Kentucky DOI:: Difference between revisions

From HORSE - Holistic Operational Readiness Security Evaluation.
Jump to navigation Jump to search
No edit summary
No edit summary
Line 1: Line 1:
'''MANAGEMENT CONTROL '''<br>
'''Kentucky DOI'''<br>
<br>
<br>
'''Applicability:'''<br>
'''Applicability:'''<br>
Line 14: Line 14:
:: User Defined
:: User Defined
<br>
<br>
'''Risk Association Control Activities:'''<br>
* [[MANAGEMENT CONTROL:|'''MANAGEMENT CONTROL''']]
* [[ORGANIZATION CONTROLS:|'''ORGANIZATION CONTROLS''']]
* [[CHANGES TO APPLICATIONS:|'''CHANGES TO APPLICATIONS''']]
* [[SYSTEM AND PROGRAM DEVELOPMENT:|'''SYSTEM AND PROGRAM DEVELOPMENT''']]
* [[OPERATIONS:|'''OPERATIONS''']]
* [[PROCESSING CONTROLS:|'''PROCESSING CONTROLS''']]
* [[DOCUMENTATION:|'''DOCUMENTATION''']]
* [[OUTSIDE SERVICE CENTER CONTROLS:|'''OUTSIDE SERVICE CENTER CONTROLS''']]
* [[LOGICAL AND PHYSICAL SECURITY:|'''LOGICAL AND PHYSICAL SECURITY''']]
* [[CONTIGENCY PLANNING:|'''CONTIGENCY PLANNING''']]
* [[E-BUSINESS CONTROLS:|'''E-BUSINESS CONTROLS''']]
* [[WIDE AREA NETWORK (WAN) AND INTERNET CONTROLS:|'''WIDE AREA NETWORK (WAN) AND INTERNET CONTROLS''']]
<br>
<br>
[[Image:Key-control.jpg]]<br>
::'''1. [[KY DOI A.1:|'''KY DOI A.1''']] Is there an IS steering committee or other evidence that top management is involved in the IS function and, if so, who are the members? Please provide copies of the steering committee meeting minutes or other evidence (e.g., memos or agendas) of steering committee meetings held during the period under review.'''<br>
<br>
[[Image:Key-control.jpg]]<br>
::'''2. [[KY DOI A.2:|'''KY DOI A.2''']] Is there an IS steering committee or other evidence that top management is involved in the IS function and, if so, who are the members? Please provide copies of the steering committee meeting minutes or other evidence (e.g., memos or agendas) of steering committee meetings held during the period under review.'''<br>
<br>
[[Image:Key-control.jpg]]<br>
::'''3. [[KY DOI A.3:|'''KY DOI A.3''']] Is there an IS steering committee or other evidence that top management is involved in the IS function and, if so, who are the members? Please provide copies of the steering committee meeting minutes or other evidence (e.g., memos or agendas) of steering committee meetings held during the period under review.'''<br>
<br>
[[Image:Key-control.jpg]]<br>
::'''4. [[KY DOI A.4:|'''KY DOI A.4''']] Is there an IS steering committee or other evidence that top management is involved in the IS function and, if so, who are the members? Please provide copies of the steering committee meeting minutes or other evidence (e.g., memos or agendas) of steering committee meetings held during the period under review.'''<br>
<br>
[[Image:Key-control.jpg]]<br>
::'''5. [[KY DOI A.5:|'''KY DOI A.5''']] Is there an IS steering committee or other evidence that top management is involved in the IS function and, if so, who are the members? Please provide copies of the steering committee meeting minutes or other evidence (e.g., memos or agendas) of steering committee meetings held during the period under review.'''<br>
<br>
'''Implementation Guide:'''<br>
Section A – No scoping note included, as completion of this section is required for all companies.<br>
<br>
'''Supplemental Information:'''<br>
* [[Media:KY DOI.doc]]<br>
* [[EXHIBIT C:|'''EXHIBIT C''']]
* [[EXHIBIT C:|'''EXHIBIT C''']]


--[[User:Mdpeters|Mdpeters]] 08:26, 23 June 2006 (EDT)
--[[User:Mdpeters|Mdpeters]] 08:26, 23 June 2006 (EDT)

Revision as of 19:00, 23 June 2006

Kentucky DOI

Applicability:

Sarbanes-Oxley
HIPAA
GLBA
PCI
FISMA
NIST SP 800-66
Ditscap
DOI
Control Exception
User Defined



--Mdpeters 08:26, 23 June 2006 (EDT)

Retrieved from "http://horseproject.wiki/index.php?title=Kentucky_DOI:&oldid=2121"