Acquire and Maintain Technology Infrastructure

Organizations have processes for the acquisition, implementation and upgrade of the technology infrastructure. This requires a planned approach to acquisition, maintenance and protection of infrastructure in line with agreed-upon technology strategies and the provision of development and test environments. This ensures that there is ongoing technological support for business applications.

Technological Infrastructure Acquisition Plan

Produce a plan for the acquisition, implementation and maintenance of the technological infrastructure that meets established business functional and technical requirements and is in accord with the organization’s technology direction.

There are no PSGs published for this topic; however, the topic is under review for future PSGs

Infrastructure Resource Protection and Availability

Implement internal control, security and auditability measures during configuration, integration and maintenance of hardware and infrastructural software to protect resources and ensure availability and integrity. Responsibilities for using sensitive infrastructure components should be clearly defined and understood by those who develop and integrate infrastructure components. Their use should be monitored and evaluated.

There are no PSGs published for this topic; however, the topic is under review for future PSGs

Infrastructure Maintenance

Develop a strategy and plan for infrastructure maintenance, and ensure that changes are controlled in line with the organization’s change management procedure. Include periodic reviews against business needs, patch management, upgrade strategies, risks, vulnerabilities assessment and security requirements.

There are no PSGs published for this topic; however, the topic is under review for future PSGs

Feasibility Test Environment

Establish development and test environments to support effective and efficient feasibility and integration testing of infrastructure components.