Servers
Every time we login to our validated systems we're using a server somewhere either for authentication, data storage or access to a system, application or process. These are auditable components of a system. Let Premier Infrastructure lead you to the top with a robust server infrastructure qualification framework.
Critical Computers
Servers are the very often the most critical computers in any organisation and very often they can't be turned off and the uptime required is near 100% - always. This borne in mind it is catastrophic to consider not managing these devices properly.
As with network infrastructure, servers must be installed (built) in a consistent manner such that all of the configurable items are thought through and documented, the build must be tested (qualified) and maintained.
Plan & Test
Does the server allow automatic updates? Are antivirus and spyware applications always upto date? This demonstrates some form of control right? Wrong! Any updates to our critical servers must be planned and tested always (or at least as far as possible), test environments or development systems must be used to verify that a patch or update is compatible with the existing configurations, especially for the most mission critical machines.
Document Control
Everything must be documented and tested, access controlled and permissions aligned with the user's job roles; all configurations managed and changes tracked.
Even Microsoft have released updates that cause problems and these problems can't be let through the net or at least any risks taken must be absolutely minimised.