IT Generals Controls Catalogue – Banking Client

IT Generals Controls Catalogue – Banking Client

This IT General Controls Catalogue contains a list of 98 controls (Excel format) with detailed descriptions which can be adjusted to fit any complex IT environment, for both Financial Services and Corporate domains. High quality of descriptions cover a range of new...
Information Classification Procedure

Information Classification Procedure

The Information Classification Procedure describes the actions necessary to comply with the Company’s Information Security Policy and Information Classification Policy. Security classifications are used to indicate the need and priorities for security protection....
Cryptographic Controls Standard

Cryptographic Controls Standard

The objective of the Cryptographic Controls Standard is to outline the minimum information security controls which must be applied when cryptographic services and solutions are utilized by the Company. Specifically, this Standard focuses on key management...
Identity and Access Management Standard

Identity and Access Management Standard

Identity and Access Management Standard describes the management of individuals, their authentication, authorization, and privileges within or across system and enterprise boundaries with the goal of increasing security and productivity while decreasing cost, downtime...
Patch Management Procedure

Patch Management Procedure

The objective of the Patch Management Procedure is to set in place IT patch management strategies and create consistently configured operational environment that is secured against known malfunction and vulnerabilities in operating system. This document provides...