OSP- other areas

Question 1

What are credential polices?

Answer 1

Personnel
Third party visitors
Devices
Service accounts
Administrator/root accounts

There should be polices for all these areas controlling the access and identification

Question 2

What are organization al policies?

Answer 2

Change management- the set processes in place from initiation of a request for change, analyzing impact of the change, approving/rejecting the request, implementing and evaluating the result of the change

Change control- a formal process used to ensure that changes to a product or system are introduced in a controlled and coordinated manner like maintaining release versions, and documnetation

Question 3

Assess management policy

Answer 3

Inverntory vs configuration
configuration managment database
Equipment lifecycle: 
Define requirement s
Acquire & implment
Operations and maintenance
disposal and decommision