IT Employment

Ask something
Discussion Locked

3rd Party Application Support

0 helpful
5 replies

by pkiefer

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

We run a few key 3rd party software applications that periodically require the vendor to access our systems, via modem, for problem resolution or implementation support.

Upon review of our security policies, we realized that we do not have any requirement for the vendor to sign a confidentiality or non-disclosure agreement.

Any recommendations for the wording of such a document or other suggestions on the best way to protect ourselves.

Thanks for your input.

5 replies

by curacao_dejavu

there is a information security policy to download at this site. If you leave a note with your email I can sent you a another sample too.

Leopold

by estebandelatorre

1st.- Create an account exclusively for each 3rd support (by application), with rights only to what they really need. Keep them allways DISABLED and turn to enable only when needed.
2nd.- If possible, launch an audit to file and events, for that users
3.- If they are using remote control, sit a person close to the monitor and perform a screen log, many times available under PCAnyWhere and carbon copy.
4.- Allways make a full backup prior to every modification.
5.- Do not pay bills unless you can verify that the problem was solved !!!

Hope it helps

This discussion is closed to new replies.