Re: Need security advice from Admins at Software Development companies
From: Ray (replyhere_at_newsgroup.only)
Date: 10/18/05
- Next message: Chris Wood: "MS05-051 on W2K3"
- Previous message: Jordan: "Need security advice from Admins at Software Development companies"
- In reply to: Jordan: "Need security advice from Admins at Software Development companies"
- Next in thread: Alun Jones: "Re: Need security advice from Admins at Software Development companies"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Tue, 18 Oct 2005 11:59:13 -0400
Inline.
> 1. The developer to control the company's copies of Visual Studio and
other
> packages so they (the Developer) can install where ever they see fit.
Can your company afford a six-digit voluntary fine to avoide federal
prosecution?
http://www.bsa.org/usa/press/newsreleases/Software-Watchdog-Collects-Record-Settlement.cfm
IT holds ALL install media in a locked room, no exceptions.
> 2. The developer be allowed to download and install any software they want
> off the Internet unrestricted.
ALL of our developers are only granted Restricted user (XP standard user)
rights on their computer. If their tools require elevated rights, only those
files and folders are granted those rights. They simply cannot install
anything they download.
> 3. When a developer writes a program for use internally do they
(Developer)
> get to be Admins of any computer that uses their in-house package or do
they
> have to use the test lab.
Modern software must run properly as a Restricted user/Standard user. If the
developers run as local admins on their computers or others, they may not be
thoroughly testing the software.
Eventually it has to be installed in a live environment for testing.
> 4. Do they get to distribute their in-house developed packages on the fly
> without providing any proof that it has been tested.
"tested" is subjective.
> 5. Are the developers allowed to send out copies of software developed
under
> the company's name without restriction.
If your policy allows it and the lawyers have signed off on it, sure.
- Next message: Chris Wood: "MS05-051 on W2K3"
- Previous message: Jordan: "Need security advice from Admins at Software Development companies"
- In reply to: Jordan: "Need security advice from Admins at Software Development companies"
- Next in thread: Alun Jones: "Re: Need security advice from Admins at Software Development companies"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
