Search
Topics
  Create an account Home  ·  Topics  ·  Downloads  ·  Your Account  ·  Submit News  ·  Top 10  
Modules
· Home
· Content
· FAQ
· Feedback
· Forums
· Search
· Statistics
· Surveys
· Top
· Topics
· Web Links
· Your_Account

Current Membership

Latest: CMotley
New Today: 154
New Yesterday: 176
Overall: 131399

People Online:
Visitors: 48
Members: 1
Total: 49 .

Languages
Select Interface Language:


Major ITIL Portals
For general information and resources, ITIL and ITSM World is the most well known for both ITIL and ITIL Books. A shorter snapshot approach can be found at ITIL Zone

Related Resources
Service related resources
Service Level Agreement
Outsourcing

Note: ITIL is a registered trademark of OGC. This portal is totally independent and is in no way related to them. See our Feedback Page for more information.


The Itil Community Forum: Forums

ITIL :: View topic - Sensitive Changes
 Forum FAQForum FAQ   SearchSearch   UsergroupsUsergroups   ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

Sensitive Changes

 
Post new topic   Reply to topic    ITIL Forum Index -> Change Management
View previous topic :: View next topic  
Author Message
changeborg
Itiler


Joined: Jul 15, 2009
Posts: 40
Location: United States

PostPosted: Wed Mar 03, 2010 1:07 am    Post subject: Sensitive Changes Reply with quote

I'm curious how others out here in the community manage situations like what we recently experienced.

With what has been in the news lately with all the hacking of Fortune 500 companies and propriatary and sensitive information being stolen, our company is taking steps to help secure our data among other efforts.

Because this is rated as confidential (i.e. highly sensitive) and of high risk to the overall organization, our security guys do not want the CAB's to have visibility over this work to ensure any potential security breaches actually are detected rather than closed up without finding the 'holes'.

I'm curious how those in large global organizations manage these types of changes to remove the visibility from CAB but still keep the CM team aprised of the work so any potential incidents resulting from the work can be monitored. We've tossed around the idea of removing it from our FSC but this report is 100% automated and would remove other data needed for the report.
Back to top
View user's profile
DYbeach
Senior Itiler


Joined: May 25, 2008
Posts: 413
Location: Sydney, Australia

PostPosted: Wed Mar 03, 2010 8:40 am    Post subject: Reply with quote

Who has access to the CAB documents?
What about confidentiality agreements and (perhaps) security clearances?
The work still has to be scheduled. Are they even unwilling to state the work needs to be done?
Is it possible for the RFCs to only contain high level information, or is the information linked to your CMS?
Just trying to understand.....
_________________
DYbeach
ITIL V3 Release, Control & Validation,
ITIL V3 Operation SUpport & Analysis
PMI CAPM (R)

"In times of universal deceit, telling the truth will be a revolutionary act." George Orwell
Back to top
View user's profile Send e-mail
Display posts from previous:   
Post new topic   Reply to topic    ITIL Forum Index -> Change Management All times are GMT + 10 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

Powered by phpBB 2.0.8 © 2001 phpBB Group
phpBB port v2.1 based on Tom Nitzschner's phpbb2.0.6 upgraded to phpBB 2.0.4 standalone was developed and tested by:
ArtificialIntel, ChatServ, mikem,
sixonetonoffun and Paul Laudanski (aka Zhen-Xjell).

Version 2.1 by Nuke Cops 2003 http://www.nukecops.com

Forums ©

 

Logos/trademarks property of respective owner. Comments property of poster. Rest 2004 Itil Community for Service Management & Foundation Certification. SV
Site source copyright (c)2003, and is Free Software under the GNU / GPL licence. All Rights Are Reserved.