S 4.65 Testing of new hardware and software

Initiation responsibility: Head of IT Section, IT Security Management

Implementation responsibility: Head of IT Section, IT Security Management

Before new hardware components and software programs are employed, they must be checked on special testing systems. In addition to testing the functionality of a new product, it is of particular importance to check whether its use has any negative influence on the IT systems involved. As damaging functions cannot be ruled out before successful tests and as errors are provoked during tests, the testing systems in use should always be isolated from the actual production environment.

The used of isolated testing systems is also required to check self-extracting files, such as those received via e-mail, for damaging functions.

General procedures for software acceptance and release, including testing, are described in Chapter 9.1 Standard software. Only after passing all tests should new components be released for installation on production systems.

Additional controls:

• Has new hardware and software been tested before actual use?

• Has new software been scanned for computer viruses?