Procedure Step:Operating System Configurations

Audit Step:

Determine whether the agency has adequate policies and procedures for ensuring application Operating System settings are adequate (i.e., authorized, updated to reflect security patches, etc..  Check the SANS web page for guidance.  Also, consider that the application may be available to agency employees over a network with either Windows NT or Windows 2000).

Purpose:

To obtain an understanding of application information security controls.