Operational Controls Review | Operational controls comprise the policies, procedures, and guidelines and standards which govern an organization’s systems management process. These may include acceptable use and information sensitivity policies, change control or incident response procedures, and any other standard operating procedures (written or implied) that govern how the organization operates their information systems. In many ways, operational procedures are more critical to security than are technical controls, as vulnerabilities are often created or exacerbated due to the actions or inactions of technical operations personnel. Our review will identify gaps or problems in these policies and procedures and recommend steps to remedy these.
Other advisory offerings