Ishmael

1267 Words3 Pages

QUESTION 4
Below is a step-by-step procedure on how to successfully deploy a software update:
• Review the source of the update; understand the function and what problems /issues the update is intended to fix.
To understand the effects of an update installation, the problems the update is supposed to solve and systems files that are affected should be identified along with whether the affected system requires a reboot/ restart. Should the update fail there should be a back-out procedure or a way to revert back to the old version. This should be documented to provide an audit trail of the updates that were installed, and the reason why the update was installed.
• Prioritize and rank the importance of each update.
This information can be gathered from the operating system manufacturers, peer reviews and journals.
• Begin the change control procedure
The change control procedure is a set of documented steps that all changes must go through before any installation and it has to be done before testing the update. Change control is implemented according to the importance of the update. Severe and critical updates may require some emergency remediation but the change control procedure must still be initiated before the deployment.
• Test the patch.
The aim of testing is to ensure that business operations are not impacted and downtime is limited/avoided. The software update process should succeed on the test environment, and should be without major issues. Applications that were running before the update should continue to operate without any issues and should the update cause any problems it should be removed successfully.
• Deploy the update
Once testing has been successful, the installation process can begin. There may be a need...

... middle of paper ...

...erational structures. Information systems function, policies and procedures, staff competence also need to be reviewed for efficiency.
• A review of the datacentre infrastructure and physical environmental controls. A review of the information processing facility should include the adequacy of air conditioning, power supply and fire suppression systems.
• Audit of application software (Application software is the software that processes business transactions and or controls production systems)
• Compliance to standards, procedures and business rules in the flow and processing of information.
• Change management controls to ensure that any changes are clearly documented and follow the proper approved procedures.
• Validation of various data inputs and sanitization of data, exception handling and error logging
Access control to the information processing facility.

Open Document