IBM Corporate IT Auditing

Vendor Communication section 7/4/2007

 

Audit Period

 

•Audit Period : 7/16 ~ 8/10
•Location : Beijing
•Audit Team Lead : 5 people
•Audit Scope : Beijing, Shanghai, Taipei
•NKO CSDL Core Team : Andersen, MT, Kenny
•SWG BC team is helping us

Vendor preparation for Auditing
•Workplace security
•ITCS 104 system security
•ITCS 300 system security
•Software license

Vendor preparation for Auditing

•Installed WST in IBM asset or TPMx in non-IBM asset (ITCS 300 system)
•Upgrade Antivirus to version 10 for ITCS 104 system by 7/15
•Set Screensaver on ITCS 104 systems (Testing machine)
•Remove NON-license software from IBM system and non-IBM system
•Ensure the control is in place for all Web Servers and Notes Servers
•According to IBM IT security, VNC is not allowed
•No tail-gating

Vendor preparation for Auditing

•IBM managers will have check security everyday
•IBM managers already notify vendor managers for this IT Audit
•Within Auditing period. Any failure will cause serious problem..!!!!
•守望相助

Posted by barefooter at 痞客邦 PIXNET Comments(0) Trackback(0) Hits(43)

Shorten Url Recommend to Front page Forward by E-mail Forward to Guestbook