Software Policies
There should be a policy in place to disallow users from installing new software or altering standard configuration without administrator authorisation. This should be documented in security policy.
Changes to standard configuration of clients should only be allowed where a valid business case exists.
Suggested Solutions
 |
Astro Communications provide a complete security solution for Internet and email access for Local Authorities. Our appliances eliminate known (such as spam, phishing and viruses) as well as new and previously unknown threats. It secures and protects productive internal and external email traffic without a high level of administrative or user effort. Please call Dalida Möger on 01322 610169 or visit www.astro.co.uk/Local-Authority.html |
 |
To see what Tiger Certified Encription Limited can do give us a call 01905 754440 or go to http://encription.co.uk/public-sector.php |
 |
Review, design and implement the processes and tools that you need to provide compliant software management. More information can be found here |
 |
StealthWatch’s ‘host snap shot’ provides Authorities with device profiles to identify which network services are running on user machines, this enables the confirmation that new or unauthorised network applications or services are not present to support written user policies. For more information, contact us at international@lancope.com or visit www.lancope.com |
 |
LogRhythm report, detect and alert on software changes and using report packages such as ISO27001/2 LogRhythm can report on deviations from the defined policy |
 |
Alongside a number of ISO27001 areas Sapphire assist clients in designing appropriate policies, to ensure licensing is maintained in line with FAST (Federation Against Software Theft) requirements. For further information please email Coco Information or call 01642 702100. |
