Deze scriptie is geschreven door beide op persoonlijke titel

Manage the configuration (DS9)Control objective: control provide reasonable assurance that IT components, as they relate tosecurity and processing, are well protected, would prevent any unauthorized changes, and assistin the verification and recording of the current configurationIllustrative controlsCobitOnly authorized software is permitted for use by employees DS9.2using company IT assetsSystem infrastructure, including firewalls, routers, switches, DS5.3, DS5.4, DS5.10network operating systems, servers and other related devices, isproperly configured to prevent unauthorized accessApplication software and data storage systems are properly DS5.4configured to provision access based on the individuals demonstratedneed to view, add, change or delete dataIT management has established procedures across the organizationto protect information systems and technology from com-DS5.9puter virusesPeriodic testing and assessments is performed to conform that AI3.2, AI3.3the software and network infrastructure is appropriate configuredTabel 21:Manage the configuration (DS9)Manage problems and incident (DS10)Control objective: control provide reasonable assurance that any problems and/or incidents areproperly responded to, recorded, resolve or investigated for proper resolutionIllustrative controlsCobitIT management has defines and implemented an incident and DS8problem management system such that data integrity and accesscontrol incidents are recorded, analyzed, resolved in a timelymanner and reported to managementThe problem management system provides for adequate audit DS10.2trail facilities, which allow tracing from the problem or incidentto underlying causeA security incident response process exist to support timelyresponse and investigation of unauthorized activitiesTabel 22:Manage problems and incidents (DS10)DS5.6, DS8.3, DS10.1,DS10.350