ISO 27001 Annex : A.12.5 Control of Operational Software
ISO 27001 Annex : A.12.5 Control of Operational Software Its objective is to ensure operating system integrity. A.12.5.1 Installation of Software on Operational Systems Control- To control the installation of software on operating systems, procedures should be implemented. Implementation Guidance- To control changes in software on operational systems, the following guidelines should be considered: Trained administrators should only upgrade operational software, applications and libraries upon appropriate management permission; Only approved executable code and non-developed code or compilers should exist in operating systems; Usability, safety, effects on other systems and user-friendly functions should only be included after successful and extensive testing; testing should also be conducted on separate systems; ensure that each of the corresponding program source libraries has been updated; To retain control of all deployed applications...