Deployment Solution

 View Only
  • 1.  Auditing Computer Images

    Posted Mar 27, 2009 10:05 AM
    Our SOX auditing people are considering auditing the images we make of our workstations. Anyone have any idea how this would be done? Or what I could do to prepare for this?


  • 2.  RE: Auditing Computer Images

    Posted Mar 27, 2009 10:36 AM
    I would imagine they should be able to provide you with that information so that you can prepare (so as not to waste yours or their time, not to mention to help ensure that you are in compliance). 


  • 3.  RE: Auditing Computer Images

    Posted Mar 31, 2009 12:01 PM
    Make sure you have documentation on the creation of the image and some sort of version control.  The machine build could be traced to the version of the image that was used.  Modifications of the image should constiture a different image version/revision which again is traceable from the target machine.