Key Terms

Acceptable Use Policy (AUP)

A policy that defines what employees, contractors, and third parties are authorized to do on the organization’s IT infrastructure and its assets. AUPs are common for access to IT resources, systems, applications, Internet access, email access, and so on.

Change Control Board

A governance organization or committee that consists of executive management in regard to changes, modifications, or updates to the IT infrastructure and its assets.

Change Management Policy

A policy that is defined by a Change Control Board to manage, review, and approve changes to the IT infrastructure and its assets. Typically, changes that impact the IT infrastructure and its assets must obtain approval of the organization’s Change ...

Get Inside Network Security Assessment: Guarding Your IT Infrastructure now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.