T 2.9 Poor adjustment to changes in the use of IT

The rules created for IT applications and the application environment are subject to permanent change. This is due to changes in the staff, moving of employees to different rooms, usage of new hardware or software, or changes in the supply chain. The following examples show that risks may be incurred if the required organisational adjustments are not properly taken account of:

• Staff members forget to transfer the necessary file access rights to the person who is to take over from them while they are on holiday. This can cause delays in IT operations.

• On account of alterations to a building, changes are made to the previous escape routes. Due to insufficient information provided to the staff, the building cannot be evacuated within the required time.

• When an IT procedure is modified, a large quantity of printing paper will be required. If the procurement unit is not informed, continuity of IT operations and service will be impaired.

• On their arrival, electronic documents are not scanned automatically for macro viruses, as this problem is not known yet, or no virus scanning programs are available.

• Before electronic documents are transferred, no care is taken to ensure that they have been stored in a format which is readable by the recipient