All SetUID and SetGID file should be reviewed daily, with cross-checks against the known checksum for the file. Administrators should be immediately alerted when there are changes or additions.