IT Management & Cyber Security

  In this article explain ISO 27001 Annex : A.14.2.3 Technical Review of Applications after Operating Platform Changes , A.14.2.4 Restrictions on Changes to Software Packages & A.14.2.5 Secure System Engineering Principles this controls. A.14.2.3  Technical Review of Applications after Operating Platform Changes Control-   In changing operating platforms, critical applications of business should be revised and tested to ensure no adverse impacts on business or security. Implementation Guidance –  The following points should be covered in the process: Review of application  control and processes  of integrity to ensure that changes to the operating platform have not compromised them; Ensure that operating platform changes are  communicated  at the right time to enable proper tests and reviews prior to implementation; Ensuring that the business continuity plans are properly amended. Other Information –  Operating environments are operating ...

  ISO 27001 Annex : A.12.5 Control of Operational Software  Its objective is to  ensure operating system integrity. A.12.5.1  Installation of Software on Operational Systems Control-   To control the installation of software on operating systems, procedures should be implemented. Implementation Guidance-  To control changes in software on operational systems, the following guidelines should be considered: Trained administrators should only upgrade operational software, applications and libraries upon appropriate  management  permission; Only approved executable code and non-developed code or compilers should exist in operating systems; Usability, safety, effects on other systems and user-friendly functions should only be included after successful and extensive testing; testing should also be conducted on separate systems; ensure that each of the corresponding program source libraries has been updated; To retain control of all deployed applications...