topic Re: Secruity Controls in Application Development and Automation Discussions

Secruity Controls

Former Member — Fri, 22 Aug 2008 02:41:15 GMT

Gurus - I'm doin a review of secruity controls for a company. Do you have any templates that I could use for my findings? I don't know how to document my findings.

Re: Secruity Controls

Former Member — Fri, 22 Aug 2008 08:24:03 GMT


> Gurus - I'm doin a review of secruity controls for a company. Do you have any templates that I could use for my findings? I don't know how to document my findings.

I recommend using a MS Word document and changing the page setup to "Landscape". That way you can put text, and screenshots into it - or even imbed attachments.

Cheers,

Julius

Re: Secruity Controls

Former Member — Fri, 22 Aug 2008 08:31:00 GMT

There are lots of formats, the one Julius mentioned is popular, as is excel spreadsheet.

Reviews can be done in a variety of ways. You may want to include things like Risk, Control, Steps to review control, expected result, actual result & evidence.

Re: Secruity Controls

jurjen_heeck — Fri, 22 Aug 2008 08:35:14 GMT


> I recommend using a MS Word document and changing the page setup to "Landscape". That way you can put text, and screenshots into it - or even imbed attachments.

In addition to the landscape orientation, changing the font to "Arial narrow" will allow you to document more findings per line.

Re: Secruity Controls

Former Member — Fri, 22 Aug 2008 10:45:58 GMT

IF you are doing code review, you can also use font 'Arial monospaced for SAP'.

Supported by MS Word and makes the contents look really authentic and original.

ENDIF

If given nothing else, I normally also use some headers, like:

- Description.

- Risk.

- Observation.

- Recommendation

Cheers and enjoy the weekend,

Julius

Re: Secruity Controls

Former Member — Fri, 22 Aug 2008 11:00:28 GMT

I also find that writing everything in 8pt font allows you to get more on each line

Re: Secruity Controls

jurjen_heeck — Fri, 22 Aug 2008 11:12:08 GMT


> Gurus - I'm doin a review of secruity controls for a company. Do you have any templates that I could use for my findings? I don't know how to document my findings.

As you may have noticed this thread is turning into a real 'friday afternoon fest'. If you go through this forums' history you'll notice that this general kind of questions hardly ever receives a satisfactory answer.

I think you should ask the people who employ/hire you what kind of information they want and create your template(s) based on these requirements.

Jurjen

Re: Secruity Controls

Former Member — Fri, 22 Aug 2008 15:23:37 GMT

If you convert the Word document to a PDF before sending it out, don't forget to check for Error! Hyperlink reference not valid.

Cheers,

Julius