System Configuration
1.
Does the department have IBM PCs, compatibles or clones?
Yes
No
2.
Does the department have Macintosh or Apple computers?
Yes
No
3.
What software does the department use for:
Word processing
Spreadsheets
Database
Accounting
Other
Internally Developed Software
4.
Are there any applications that have been developed by department personnel?
Yes
No
5.
Does basic documentation (program logic, database structure, macros, required input, and expected output) exist for internally developed applications?
Yes
No
Purchased Software
6.
Are original copies of purchased software kept in a secure location?
Yes
No
7.
Is purchased software registered in the department’s name rather than an individual’s name?
Yes
No
All Software
8.
Are computer users aware of how computer viruses can be distributed?
Yes
No
9.
Does the department have a policy on the installation of personal software on department computers?
Yes
No
10.
Do at least two individuals know how to use each application?
Yes
No
11.
Is there a single “key” person whose departure from the department could jeopardize the continued use of an application?
Yes
No
12.
Would accidental or intentional changes to the application program code be detected?
Yes
No
Backup and Recovery Plans
13.
Are backup files created at appropriate time intervals so that damaged or lost files can be easily reconstructed?
Yes
No
14.
Where are computer backups physically stored?
15.
Are system templates backed up periodically as well as data files?
Yes
No
16.
Are the backup files secured from accidental or intentional damage and/or unauthorized examination?
Yes
No
17.
If the department has a “key” computer and/or computer system, have contingency plans been made for emergency situations including hard disk “crashes” and central processing unit (CPU) failures?
Yes
No
Sensitive Data
18.
Are disks containing confidential files kept in a locked cabinet?
Yes
No
19.
If confidential files (personnel files, confidential correspondence, student records, etc.) are maintained on a hard disk, is access to the computer restricted:
a. to authorized personnel?
Yes
No
b. by security software?
Yes
No
c. by physical barriers?
Yes
No
20.
If confidential files are maintained on a network server:
a. is access restricted by passwords?
Yes
No
b. is the network accessible via modems from “outside” computers?
Yes
No
21.
Does the department have password management guidelines?
Yes
No
Physical Security
22.
Have equipment loan forms been completed for all computers taken off campus?
Yes
No
23.
Are department computers adequately secured from theft?
Yes
No
24.
Are administrative offices, faculty offices, and research and teaching labs locked during lunch hours or when unattended?
Yes
No