IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Hardware & Software Remarks
____________________________________________________________________ .........................................
S 4.65 Testing of new hardware and software
Initiation responsibility: Head of IT Section, IT Security Management
Implementation responsibility: Head of IT Section, IT Security Management
Before new hardware components and software programs are employed, they
must be checked on special testing systems. In addition to testing the
functionality of a new product, it is of particular importance to check whether
its use has any negative influence on the IT systems involved. As damaging
functions cannot be ruled out before successful tests and as errors are
provoked during tests, the testing systems in use should always be isolated
from the actual production environment.
The used of isolated testing systems is also required to check self-extracting
files, such as those received via e-mail, for damaging functions.
General procedures for software acceptance and release, including testing, are
described in Chapter 9.1 Standard software. Only after passing all tests should
new components be released for installation on production systems.
Additional controls:
- Has new hardware and software been tested before actual use?
- Has new software been scanned for computer viruses?
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000