Network Controls: Internal Control Questionnaire: Control Answer Comments CT Risk Id CTL ICQ REF Y N
Network Controls: Internal Control Questionnaire: Control Answer Comments CT Risk Id CTL ICQ REF Y N
Network Controls: Internal Control Questionnaire: Control Answer Comments CT Risk Id CTL ICQ REF Y N
qxd
Page 400
10/10/2002
clearly defined?
1.3 1.3 Are network users adequately trained on network usage and security? 1.3.1
1.3.2
1.3.3
16:58
1.4 1.4 Do network administrators receive adequate and appropriate training 1.4.1
on network security and control? 1.4.2
1.5 1.5 Are technical standards and configuration information for all network 1.5.1
Page 400
facilities clearly documented? 1.5.2
1.5.3
1.6 1.6 Is network activity monitored to ensure that security has not been 1.6.1
breached and performance is optimised? 1.6.2
1.6.3
1.6.4
1.6.5
1.6.6
1.7 1.7 Are the commercial and service arrangements for the network fully 1.7.1
documented, supported, monitored and agreed by all parties? 1.7.2
1.7.3
2.1 2.1 Do procedures exist for the approval and installation of network 2.1.1
connections? 2.1.2
2.1.3
2.2 2.2 Are only authorised users able to make network connections and are 2.2.1
procedures in place to check for unauthorised connections? 2.2.2
2.2.3