Macedonian Customs Administration IT Survey

1. Macedonian Customs Administration IT Survey

2. Equipment Description of servers, workstations, laptops and similar: the type, brand name, approximate date of manufacturing, processor architecture/type/speed, RAM, HDD capacity, available interfaces

5. Equipment printers, scanners and all other devices: the type, brand name, approximate date of manufacturing, available interfaces

6. Equipment purchased from EU-funds? 2008, 105 PCs, 30 printers, 18 routers and network equipment, projectors, 25 CCTV Speed dome cameras...

7. Equipment The preventive maintenance is performed in the following areas and on the basis of the following rules: Preventive maintenance of PC’s, peripheral equipment and network is done by ICT Sector staff, on every visit to the customs office or department (minimum once in 2 months). Servers are monitored on daily basis. Corrective actions are performed by our staff

8. Networking and installations LANs (Local Are Networks) within MCA: 40 Topology: Fastethernet Number of nodes: 40

10. Networking and installations Interconnection and connection type. - all locations are interconnected: BCPs and airports through SDH (MoI); and FrameRelay for backup Inland CO through VPN; Internet (IPSec) Some locations use PPP connection

11. Networking and installations Protection from power breakdown UPSes used from different vendors, with different year of manufacturing, most of them recharged. All critical network and server equipment is powered through UPSes, some PCs also. Power generators in MCA HQ and also in several BCPs. In the HQ, there is separate power line for the devices mentioned.

12. Software and databases OS-es in use For servers: Tru64UNIX, Unixware, Windows 2000, Windows 2003, RedHat Linux, AIX; For PCs: Windows XP and Windows Vista; software tools in use (office suites, graphic editors, etc.), - Oracle development tools (form designer, reports), Visual Studio, Java tools; specific software in use , - Asycuda 1.17d- Customs Declaration Processing Software; - Other in-house developed software for next purposes: - Customs offices daily registers, - Internal customs warehouses, - Quota management; - Customs guarantee management system;

13. Software and databases antivirus software in use - Trend Micro; databases in use (type, architecture, users) Oracle 9i/Tru64UNIX/8 CPU licenses Informix 7.22/Unixware2.1.3/40 server licenses MS SQL 2000/Windows 2000/1 server license MS Access/WindowsXP/ different number od users

14. Software and databases - All PCs are with licensed OS (Microsoft), all servers and databases are licensed. - Software is localised (i.e. it supports Macedonian language, Cyrillic alphabet), where applicable, e.g. OS for PCs and customs software; - For Asycuda system (Unixware, Informix, Asycuda server/client) ICT Sector is responsible, for PC OS and Office suite also, other software installations depend of the software developer. - According to ICT general policy, the ICT Sector has already started implementation of security policy through Active Directory (LDAP) to limit the personal user installation.

15. Documentation, Procedures, People and Education – organisational structure

17. Documentation, Procedures, People and Education) The technical support department is responsible for any kind of ICT equipment relocation. The decisions are made with consensus, the job is physically done by department staff, reconnection also. For bigger, more complex relocation, different companies are engaged. About 900 people use IT equipment There are about 600 PCs, each employee in HQ uses PC, the PCs in customs offices are shared among staff. The training is organized on demand, by the training department.

18. Security of data and communication Back Up The backups are made on daily and weekly basis for the databases. The technical support department is responsible for ensuring the implementation of an effective back-up strategy for server-held software and data.

19. Security of data and communication Anti-Virus Protection As a part of general ICT policy, the antivirus application is implemented on each PC in the corporate network; User support unit is responsible for the implementation of an effective Anti-Virus protection. 500 antivirus user licences.

20. Security of data and communication Passwords and accounts Network, servers (OS), databases, e-mail, … are password-protected? There are restrictions for the passwords creation. (minimal length, composition of letters & numbers etc.) User support unit is responsible for creation of network and e-mail accounts and system permissions User support unit, application support unit, based on information provided by HR Sector are responsible for removing or changing user accounts There is general policy; the access to the system and the privileges are defined according to job position.

21. Security of data and communication Encryption On network level (point to point) there is secure tunnelling

22. E-mail/Internet We have leased line Internet connection with 5Mbps Two pool of public IP addresses Two DNS Servers -All section in Customs Administration Headquarters and heads of Customs Offices have access. Content filtering is implemented. By using firewalls and intrusion prevention system networks are protected from the potential attacks from the Internet.

23. E-mail/Internet Users have access only for http and https ports Restriction for all executable and compressed file (exe, bat, rar, zip ect..) Restriction for all audio and video file (mp3, avi, mov, ect..) We use 32 public address for our public services (web, smtp, pop3, NAT for Asycuda servers) We monitor continually statistics about, but we don’t research use and content of e-mail accounts. There is random examination of users Internet activities, performed by IT Security staff.

24. Special equipment Container examination and X-ray facilities Trace-Particle Detectors and/or mass spectrometers Closed Circuit Tv (CCTV) and (ANPR) There is active system with 240 cameras.

25. Questions and Suggestions?