ASD ISM 1912 Document device settings for critical and high-value servers

The IT team should maintain an up-to-date inventory of all critical and high-value servers.

This means having a list that includes each server's purpose, location, and key settings. They can use a simple spreadsheet or a specialised software tool to keep everything organised.

Managers should ensure that documentation processes are formally established.

This means setting up clear guidelines on how and when settings should be recorded or updated. These guidelines should be communicated to everyone involved, ensuring consistency in documentation.

IT staff should regularly back up configuration settings for servers and network devices.

This involves saving the current settings file to a secure location so that it can be used for recovery if needed. This backup should be part of a regular schedule, like weekly or after every major change.

System administrators should review and update server documentation whenever changes are made.

This means every time a significant change occurs, such as installing a new application or updating software, the documentation must reflect these changes to remain accurate.

Business owners should ensure their IT team performs periodic audits of the documentation.

This involves reviewing the documentation to check that all critical systems are accounted for and that no discrepancies exist between what's on the document and what's in reality. This helps to identify areas that may need attention.