Procedure Step:Access to Internet

Audit Step:

Determine to what extent the application functions as an open communications environment relating to Internet access.  Obtain a schematic showing the interconnectivity of application to the Internet (are there firewall policies, demilitarized zones, etc...).  Determine whether the agency Dept. meets the provisions of State IS policies.

Purpose:

To obtain an understanding of application information security controls.