5.1.1.1.7 Procedures in place to evaluate when changes are needed to current software

From aptrust
Jump to: navigation, search


5.1.1.1.7 Procedures in place to evaluate when changes are needed to current software
Status Ready for review
Compliance Rating Fully compliant
Responsible

The repository shall have procedures in place to evaluate when changes are needed to current software.

Supporting Text

This is necessary to ensure that the repository has the capacity to make informed and timely decisions when information indicates the need for new software.

Examples for Meeting the Requirement

Evaluation procedures in place; documented staff expertise in each software technology subsystem.

Discussion

Given information from technology watches or other technology monitoring notification systems, the repository should have procedures and expertise to evaluate this data and make sound decisions regarding the need for new software. The objective is to track when technology providers have developed software infrastructure that minimizes risk, or that minimizes cost, or that improves performance. This is necessary to track emerging technologies, and plan for upgrades before capacity limits occur. The evaluation should identify when the risk of using new technology outweighs the expected benefit, and when the new technology is sufficiently mature to minimize risk.

Evidence Provided

APTrust utilizes performance metrics gathered by system and monitoring software to analyze bottlenecks and delineate actions which may require software adjustments or replacement. New technologies and software is thoroughly evaluated before being implemented. This is to manage risk and ensures to identify possible issues.

See section 5.1.1.1.6, Software Updates, and Monitoring and Alerting for additional technical information.

Also view 3.2.1 Identified duties and appointed staff for our staff's job descriptions.