Introduction: The A.12.1.4 standard from ISO/IEC 27001 focuses on the separation of development, testing, and operational environments. This standard emphasizes the importance of keeping these environments separate to ensure that the organization’s operations run smoothly and securely. In this article, we will provide a sample checklist that will help you […]
Daily Archives: April 11, 2023
65 posts
Introduction: Capacity management is a critical component of IT infrastructure management. A well-implemented capacity management process helps organizations ensure that their IT systems can meet current and future business demands, avoid performance issues, and maintain service availability. ISO/IEC 27001:2013 standard provides guidelines for the implementation of capacity management in organizations. […]
Introduction: Change is an inevitable part of any organization’s life cycle, and managing change effectively is crucial to the organization’s success. In the context of information security, change management refers to the process of planning, testing, implementing, and monitoring changes to an organization’s information systems, processes, and procedures. The goal […]
Introduction: The implementation of effective and efficient security procedures is crucial in safeguarding an organization’s information and technology assets. Documented operating procedures provide a framework for employees to follow, ensuring that critical processes are carried out consistently and securely. This article focuses on A.12.1.1 of the ISO 27001 standard, which […]
Introduction: One of the essential aspects of information security is to ensure that sensitive information is not left unattended, exposed to unauthorized access, or at risk of theft. A clear desk and clear screen policy is an effective measure to safeguard confidential data by ensuring that work areas are free […]
Introduction: Ensuring the security of unattended user equipment is crucial for preventing unauthorized access, data loss, and corruption. Organizations need to have a policy and procedures in place to manage the security of unattended user equipment. ISO 27001:2013 provides a framework for establishing, implementing, maintaining, and continually improving an information […]
Introduction: A crucial aspect of information security is the secure disposal or re-use of equipment. Organizations must have proper policies, procedures, and guidelines in place to ensure that data is not compromised when disposing of or re-using storage media and ICT equipment. Failure to do so can lead to data […]
Introduction: Information is one of the most important assets of an organization, and securing it should be a top priority. While many security measures are put in place to protect information while it’s on-premises, it’s also essential to ensure the security of equipment and assets when they are off-premises. A.11.2.6 […]
Introduction: Information assets have become crucial for organizations. Information technology (IT) equipment and storage media contain valuable information that should be protected against unauthorized access, theft, or loss. Therefore, it is important to ensure that proper policies and procedures are in place for the removal of such assets from the […]
Introduction: In the current era of technology, the IT infrastructure plays a critical role in the functioning of any organization. It is important to ensure that the supporting utilities and equipment are functioning properly to minimize the risk of downtime and potential losses. In this article, we will discuss one […]