What are your best practice about some IT general controls? -> minimum length of password -> about the admin profiles -> DRP

[ste]

I would like to know what are your best practice about some (9) IT
general controls. Edit the wiki and add your best practice!

For our study, we will take just the following three main area:

- the logical access (access to programs and data (access security))

- program (application system) development and change (maintenance)

- computer (data centre and network) operations


I created a wiki where you can add your personal opinion (to each of
the 9 controls, or to one too). Your can also suggest other source
than you (ex. some article).


That's the site web for the wiki:
http://www.compliancesupportsystem.com/patterns/index.php?title=Main_Page


Thank you for your opinion