|
Re: What's your company doing to meet the SOX requirements for IT?
Since our major customer at the company site I work at is the US Navy, we follow their rules.
Most MACs are entered into Remedy and must be approved by local management, the exceptions are name changes and feature changes. Adds and moves must be approved, the main reason for this is so facilities management knows what cubes and offices are occupied or vacant.
The same rules apply to adding or moving computers. The only time the rules get more strict is if you are doing something that will affect the Ethernet setup in any way. Adding IP trunking which adds QoS and VLANs, for example. The DoD maintenance window opens at 9PM local time and closes at 6AM.
This kind of change must be entered into Remedy and approved by corporate mangement. All the details of what is being done and why, they aren't interested how.
The company's main concern is if something happened to the Call Center and this caused them to miss their SLAs, thus causing them to lose $$$$ in payments. Plus having to explain to the Navy why something happened.
All of these are reasonable concerns.
__________________
Marty
Retired Avaya DSIC tech
|