Get the most from Notes®

This is the second of a seven part series of posts about ACL compliance. Click here to read the first post.

Establish ACL Standards
Establish ACL Control Process
Establish Management Process For ACL Change Requests
Audit and Benchmark Current ACL Landscape
Correct Non-Standard ACL Issues
Monitor and Record ACL Changes
Immediately Remediate All New Non-Standard ACL Issues

What is a Control Process
A control process is a series of documented steps for:

• Monitoring changes to ACLs
• Auditing changes to ACLs
• Managing changes to the ACLs

Documentation must identify which tools must be used, who is responsible for the process, how reports are created and remediation steps should a problem be identified.

Why it’s important Without a documented control process administrators will invent their own methods for auditing and controlling ACLs and each method will be distinctly different. This could again lead to uncontrolled standards compliance.

Standards don’t work without control Without process control, documentation and training, implementing and maintaining standards for ACLs will not work.

Document, document, document Everything must be written down and understood by everyone. Checks must be in place to ensure consistency.