Software Management Policy

 

Policy No:  1.21                                                                                                                                                            Printable Version

 

PURPOSE

 

The purpose of the Software Management Policy is to ensure that the correct processes and procedures are employed when purchasing, developing, deploying, maintaining and replacing software applications.  It assists with compliance with industry standards, encourages consistency throughout The Fake Chicken Company and ensures that software continues to meet the needs of the business.  Another objective is to ensure that key application software is protected from the threat of a security breach.

 

SCOPE

 

This policy affects all persons involved in any way in the purchase, management or maintenance of software applications.

 

POLICIES 

1.      Software Developed In-House

 

1.1      Business  application  developers will only be  permitted  to  access  live information associated with software on which they are currently working.

 

 

 

... and more

2.      Maintenance of Live Software

 

2.1     All computer  and  communications  systems  used for  live processing  at  The  Fake Chicken Company must use a formal change control procedure...

 

 

 

... and more

3.      Vendor Supplied Software

 

3.1      Executable programs (software object code) provided by external software developers and vendors must be tested before installation on any The Fake Chicken Company live system...

 

 

 

... and more

4.      Operating System Software

 

4.1     All security fixes, program updates, command scripts, and the like provided by operating system vendors, official computer emergency response teams and other trusted third parties must be installed as listed below:-

 

                        Within the Trusted Domain

§         Urgent                        within 1 week

§         Everything else        monthly

 

                        Other

§         Urgent                        within 24 hours

§         Medium                      within 1 week

§         Low                             monthly

 

 

Hardware Management Policy

Installation of Operating System Fixes, Patches and Updates

Maintenance Log

    

... and more

 

5.      Change Control Procedures

 

5.1

A record of agreed authorisation levels is maintained to ensure that the granting of access rights  to perform specific functions and sign off of change control procedures is only undertaken by those with the appropriate authority.

 

 

 

... and more

 

 

Top

© 2004 All Rights Reserved Kaon Security Ltd