InfoWorld Security Boot Camp: Day 11: Make a resource lifecycle plan
October 5, 2009
SECURITY BOOT CAMP, WEEK THREE
This week, we'll be focusing on getting strategic.
YOUR ASSIGNMENT TODAY: Make a resource lifecycle plan.
WHY DO IT: A resource lifecycle plan can prevent stale user accounts and other lapses from coming back to bite you.
HOW TO DO IT: Every task or activity associated with an object or resource under your control should be contained in the lifecycle plan. Lifecycle plans typically include policies and procedures for the following activities: Acquisition, Accountability, Modifications, De-provisioning, Confirmation of change, Auditing and finally -- Documentation.
RECOMMENDED READING: "Do you have a handle on your 'managed' resources?," Infoworld.com