July 4, 2012 1:01 AM
Posted by: Robert Davis
Configuration Management,
Digital Storage Devices,
Hardware Controls,
Information Communication Technology,
Information Security,
Infrastructure Management,
IT Configuration,
IT Hardware,
Risk ManagementAutomatic retry is also utilized with magnetic tape. Imperfections on the surface of the magnetic tape that interfere with reading or writing can be dislodged by back-spacing the tape and trying again.
Whereas, disc drives utilize automatic retry to facilitate successful read/write operations. Depending on the deployed hardware, the original error-free read/write may fail because the data is slightly misaligned with the designated recording track. To remediate the condition, the read/write operation will be repeated several times at different offset locations until the required action is performed or until it is clear that some other problem is at fault.
“View Part I of the IT Equipment Functionality and Integrity Checks series here”
Post Note: “IT Equipment Functionality and Integrity Checks – Part IV” was originally published through Suite101.com under the title “IT Equipment Functionality and Integrity Checks”
June 29, 2012 8:34 PM
Posted by: Robert Davis
Configuration Management,
Digital Storage Devices,
Hardware Controls,
Information Communication Technology,
Information Security,
Infrastructure Management,
IT Configuration,
IT Hardware,
Risk ManagementCorrespondingly, the CPU can monitor printer operations to ensure correct print synchronization. This entails the CPU checking print timing to ensure that the image is created when the print device is in the right position.
Lastly, data communication facilities may have cybernetic line and equipment diagnosis. This automatic diagnostic may be part of the communication hardware rather than the CPU.
Forms of automatic retry routines
Automatic retry enables electronic error correction in several situations. It is particularly valuable in the CPU, which is subject to transient error. Transient error, such as a data parity error, may occur because of temporary conditions such as static electricity or random variations in switching times. Since it is likely that such a condition will disappear on its own accord; a simple activity repeat or retry will commonly eliminate the indicted error.
“View Part I of the IT Equipment Functionality and Integrity Checks series here”
Post Note: “IT Equipment Functionality and Integrity Checks – Part III” was originally published through Suite101.com under the title “IT Equipment Functionality and Integrity Checks”
June 28, 2012 12:00 AM
Posted by: Robert Davis
Configuration Management,
Digital Storage Devices,
Hardware Controls,
Information Security,
Infrastructure Management,
IT Hardware,
Risk ManagementForms of automatic error diagnosis routines
Automatic error diagnosis is utilized by several hardware configuration components. A typical application is the installation of Central Processing Unit (CPU) circuitry to diagnosis data parity errors identified in the CPU and linked storage areas. Furthermore, the CPU may have self-diagnostic capabilities to reveal defective circuitry or memory. In some instances, as a corrective measure, the CPU may be able to route operations and storage around defective configuration components.
Automatic error diagnosis is also utilized to identify faulty magnetic tape read/write heads. In this scenario, the CPU checks the read/write head during an assigned task to ensure that the current is flowing through the device. With a positive check, it is assumed that reading and writing is taking place during inspection. Conversely, with a negative check, it is assumed that reading and writing is not taking place during inspection.
“View Part I of the IT Equipment Functionality and Integrity Checks series here”
Post Note: “IT Equipment Functionality and Integrity Checks – Part II” was originally published through Suite101.com under the title “IT Equipment Functionality and Integrity Checks”
June 23, 2012 12:00 AM
Posted by: Robert Davis
Configuration Management,
Digital Storage Devices,
Hardware Controls,
Information Security,
Infrastructure Management,
IT Hardware,
Risk ManagementCollectively, the term IT hardware describes all equipment necessary to enable IT services utilization. Yet, each hardware configuration item may have distinct operational characteristics and controls.
A primary hardware characteristic can be: auxiliary storage, wiring, IT board, input device, or output device. Whereby, the hardware control can be: redundant character checks, duplicate process checks, echo checks, equipment checks, and/or validity checks. Some or all of these controls can be found on two or more types of equipment within the IT infrastructure.
Common firmware programming associated with IT equipment
Regarding equipment checks, controls are generally built into circuitry to ensure that the hardware is functioning properly and, where necessary, to provide cybernetic error correction. Commonly, these capabilities are known as automatic error diagnosis and automatic retry.
Post Note: “IT Equipment Functionality and Integrity Checks – Part I” was originally published through Suite101.com under the title “IT Equipment Functionality and Integrity Checks”
June 19, 2012 11:24 PM
Posted by: Robert Davis
Configuration Management,
Digital Storage Devices,
Hardware Controls,
Infrastructure Management,
IT Hardware,
Risk ManagementImpact of IT hardware failures on information integrity
Failure of a semiconductor, diode, or transistor may affect the electrical impulses utilized in the processing of data, the storage of data, and the communication of data between different equipment in the IT infrastructure. If the failure leads to a change in timing, strength, shape, or frequency of pluses; the result could be an invalid data operation, invalid data storage or transmission, or the modification or destruction of datum or program instructions.
The failure of a mechanical part is a hazard to the operation of peripheral input/output (I/O) and storage devices. Such a failure can result in an error in reading datum during an input operation or in an error in writing datum during an output operation.
“View Part I of the Computer Hardware Risks series here“
Post Note: “Computer Hardware Risks – Part II” was originally posted on my Suite101.com web page under the title “Computer Hardware Risks”
June 15, 2012 9:31 PM
Posted by: Robert Davis
Configuration Management,
Digital Storage Devices,
Hardware Controls,
Infrastructure Management,
IT Hardware,
Risk ManagementSome data processing specialist believe that it is unnecessary to devote much attention to hardware deployments. According to this school of thought, modern computer hardware is designed to be very resilient, and most of them have built in protection mechanisms. Consequently, control professionals should encounter effective hardware configurations. In actual practice, however, several factors can reduce IT hardware effectiveness and efficiency.
Common types of IT hardware risk
IT errors may occur due to failures in IT hardware configuration items. Specifically, errors may occur because of a failure in an electronic element or in a mechanical part of computer equipment. The risk to management from weaknesses in hardware controls is considerable because of their pervasive influence on information integrity.
Post Note: “Computer Hardware Risks – Part I” was originally posted on my Suite101.com web page under the title “Computer Hardware Risks”
June 12, 2012 9:46 PM
Posted by: Robert Davis
Audit,
COBIT,
Control Environment,
Control Methods,
Ethics,
Human Resources,
Infrastructure,
Integrity,
ISACA,
ISO,
IT Audit,
ITSM,
Organizational Structure,
Service Delivery,
SystemsAudit professionals have a significant role in supporting an adequate control environment when providing contributions to strategic, tactical, and operational value through governance improvement recommendations. Consistent with entity oversight responsibilities, board of directors should insist on utilizing perceptive IT auditors to permit control environment enrichment. In particular, an entity’s audit committee should proactively ensure IT service delivery and support are subject to periodic audits, reviews, as well as agreed-upon procedures by highly qualified auditors so individuals responsible for governance can advance entity oversight goals with IT enhancement triggers. Furthermore, a robust IT audit function can usually render superior performance when requested to assist management with operational control issues that may arise.
Lastly, external factors often influence an entity’s environment. Specific external influencers affecting an entity’s ability to achieve objectives include: economics, communities, governments, technologies, competitors, suppliers, and customers. Therefore, it is crucial that the external environment be accurately assessed prior to proceeding with a course of action impacting the entity’s system of controls.
“View Part I of the What Every IT Manager Should Know About Service Delivery and Support series here“
June 8, 2012 10:32 PM
Posted by: Robert Davis
COBIT,
Control Environment,
Control Methods,
Ethics,
Human Resources,
Infrastructure,
Integrity,
ISACA,
ISO,
ITSM,
Organizational Structure,
Service Delivery,
SystemsFoundationally, the IT control environment should assist in enabling the governing body, management and all other staff in providing reasonable assurance regarding achievement of the following general objectives:
Operational Efficiency
Operational Effectiveness
Operational Economy
Management Reliability
Laws and Regulations Compliance
Internal Policies Compliance
General entity objectives increase in significance when they are collectively considered in relation to operations, management and compliance fiduciary responsibilities. Categorically, these distinct general objectives can be achieved through various criteria establishment that frame aligned focus on meeting entity-centric needs. For instance, IT related information criteria (i.e. effectiveness, efficency, confidentiality, integrity, availability, compliance and availability) can be utilized to satisfy entity-level objectives that have specific fiduciary responsibilities.
“View Part I of the What Every IT Manager Should Know About Service Delivery and Support series here“
June 5, 2012 9:55 PM
Posted by: Robert Davis
COBIT,
Control Environment,
Control Methods,
Ethics,
Human Resources,
Infrastructure,
Integrity,
ISACA,
ISO,
ITSM,
Organizational Structure,
Service Delivery,
SystemsManagement’s control methods over compliance with laws and regulations should ensure appropriate measures are deployed to ascertain whether entity personnel understand implemented governance practices, and governance processes are being followed as intended. Legal compliance procedures for ethical control standards should be set by top management and promoted through exemplary behavior.
The importance of responsibilities of those charged with governance is recognized in codes of practice and other regulations or guidance produced for the benefit of oversight committee members. Documented primary responsibilities of those charged with governance include oversight of the design and effective operation of procedures and the process for reviewing the effectiveness of the entity’s control system. Consequently, the entity’s oversight committee should direct IT management to achieve measurable service and support value.
“View Part I of the What Every IT Manager Should Know About Service Delivery and Support series here“