|
|
 |
PKI Policies and Procedures: Configuration Management and Quality Control Manuals
Configuration mangement and quality control describe the methods and procedures through which the security components and safeguards are kept intact over time. The SPYRUS configuration mangement and quality control template includes a configuration management manual that documents procedures for maintaining the PKI system-based or its administration
The configuration management manual is used daily by system administrators, CA operators, system technicians, and others who need to make changes to the overall IT system. Communication and training are essential to ensure that configuration management procedures are rigorously enforced and followed throughout the organization.
Quality control might require its own manual, particularly for ISO 9000 certification. The start of the manual includes a policy derived from business objectives and the certificate policy.
Configuration and change management are inherent in maintaining the trust and assurance of the certificates issued from a PKI system. Similarly, specified and written procedures covering the processes involved in the daily operations of the organization provide evidence of quality control.
|
|
