CertiGuide to Security+  9  Chapter 5:  Operational/Organizational Security (Domain 5.0; 15%)       9  5.9  Documentation

5.9.1  Standards and Guidelines 1 5.9.3  Change Documentation

Hardware and software combine to become a system. Both maintaining and securing a system requires detailing how a system was designed with sub-components detailing hardware and software, so this information should be carefully documented. MIT has a white paper titled “A fractal Representation for Systems”⁴⁶⁶. A template for software project management is listed in the footnote⁴⁶⁷.

Include in this documentation items like:

• Maps of the company’s networks, showing physical connectivity and network addresses.
  
  
• Descriptions of what each computer is used for.
  
  
• Information about the hardware installed in each machine.
  
  
• Information about other devices used on the network.
  
  
• A list of the software installed on each machine (including versions).
  
  
• a list of the computers each application depends on (such as “database server 1 with customer data”, “database server 30 containing geographical data”, “application server PAR12 containing the FINS application”)

5.9.1  Standards and Guidelines 1 5.9.3  Change Documentation