System Maintenance Controls
Ensure changes to system are authorised, meet user needs
Changes are complete, valid, tested, recovery process in place
organisational and management controls
SOD, supervision, review and virus protection
Access controls to data programs
Programmed access controls: Terminals, ID of users, Authorisations of users, monitor of access and processing, comm lines and networks, password controls, programme libraries, utilities**
Physical access controls: terminals, computer hardware, manual logs, program libraries, distributable processing, logs reviewed, screening and training of staff, emergency access controls
-