Chapter 19. Other Systems

Solutions in this chapter:

▪ Mainframes and Legacy Systems
▪ UML
▪ Code Reviews and Testing Third-Party Software
▪ Encryption
Summary

Introduction

In this chapter we will look at a number of other audit and compliance issues that are commonly avoided. Many systems, including legacy applications and mainframes, are either placed in the “too hard” basket or ignored for fear of failure if the audit causes them to crash.
In many cases, embedded systems are not checked due to an unfounded belief that these are, in effect, an appliance with no software-based controls. This could not be further from the truth.

Mainframes and Legacy Systems

In many ways, auditing mainframe and other legacy systems is far simpler than auditing modern client/server ...

Get The IT Regulatory and Standards Compliance Handbook now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.