DC.A. Controls provide reasonable assurance that authorized programs are executed as planned and deviations from scheduled processing are identified and investigated.
DCA1.1 Data Center Policies
C
DCA1.2 Data Center Production Schedule
DCA1.3 Prod changes have approvals
DCA1.4 Application logs reviewed regularly
DCA1.5 Application failures notify IT Staff
DCA1.6 Daily availability capacity analysis
DC.B. Controls provide reasonable assurance that physical and environmental security standards are appropriate to safeguard critical systems.
DC.D. Controls provide reasonable assurance that third party services are appropriately retained and monitored to ensure that activities are executed in accordance with Company standards.
DC.C. Controls provide reasonable assurance that problems and issues over the processing of business/IT transactions are addressed in a timely manner.
DCC1.1 Policies for reporting issues - Help Desk
DCC1.2 Designated staff receive & log help desk calls
DCC1.3 Help Desk issues are prioritized
DCC1.4 Designated personnel handle issues as they come up.
DCC1.5 Status is reported to Requestor and Dept.
DCC1.6 Help Desk issue status is reported to IT mgmt
DCD1.1 Policies for external vendors exist
DCD1.2 IT performs regular vendor SLA review
DCD1.3 External IT Services meet internal standards (SAS70 at least)
DCB1.1 Phys-Sec Signin’s for all visitors and vendors
DCB1.2 Phys-Sec All non-authorized visitors excorted
DCB1.3 Phys-Sec Badges to be displayed at all times by all people
DCB1.4 Phys-Sec Contratcors issued temp badges which expire.
DCB1.5 Phys-Sec
Only authd staff has access to DC
DCB1.6 Phys-Sec DC visitors are escorted at all times
DCB1.7 Phys-Sec Computer Room has Raised Floor
DCB1.8 Phys-Sec
Data Center has adequate Climate Control
DCB1.9 Phys-Sec
Data Center has adequate fire supression
DCB1.10 Phys-Sec UPS Systems in place for clean shutdown
DCB1.11 Phys-Sec Backup Generators for Power Outage Protection