|
Sample information security
review questions.
Section 6 -
Microcomputer Security
Microcomputer refers to desktop computing,
whether that entails PCs, Macs, work stations, or stand-alones.
Administrative
|
1. Have employees been
informed of their responsibilities and accountabilities for microcomputers
and microcomputer data in their work area?
|
|
2. Are users trained in
security awareness and security procedures?
|
|
3. Are microcomputer users
cautioned against copying proprietary programs?
|
Physical Security
|
1. Is the equipment
adequately secured against theft?
|
|
2. Are diskettes left in
machines unattended?
|
Data Integrity
|
1. Is access control
installed to protect data on hard disks from unauthorized access?
|
|
2. Is it possible to alter
financial data without producing an audit trail?
|
|
3. Have all applications and
macros been properly documented?
|
Miscellaneous
|
1. Has the department
developed an alternate processing plan (Business Continuity Plan) in the
event that normal processing capabilities are unavailable?
|
(Inquire about pre-made template
documents supportive of your program development.)



Located in: Ontario, Canada and serving the
Greater Hamilton Area and surrounding district.
|