ISP Focus Area 1 IT Infrastructure Assessment

Transcription

1 ISP Focus Area 1 Bengkel Penyediaan Pelan Strategik IT Universiti Fasa 1 Organized by InfoTech Office April 2012 Intekma Resort & Convention Shah Alam, Selangor, Malaysia

2 To be filled by Business and Technology Representative: INFRASTRUCTURE 1. Department Name 2. Name 3. Position/Role 4. Contact Number 5. Date Instruction: The questionnaire consists of two sections. In each section, you will be asked to respond to a series of statements. Please provide answer for every question, if possible. You are encouraged to provide additional comments where you feel it would clarify your response. Space is provided for that purpose. Thank you for your help and cooperation < IT Infrastructure Template 1

3 SECTION 1 For the following, please provide the assessment by marking the appropriate answer. Some questions need you to provide additional answers. If you require more space please attach extra paper with your comments numbered. A. General 1. Do you have sufficient standardization of software, hardware, networking, and dataaccess/security (infrastructure) is in place within your organisation to minimize support costs and facilitate data sharing across systems. 2. If you answered Yes, please provide sample. 3. Overall, are you satisfied with the availability of this infrastructure over the last 12 months? 4. Does your infrastructure have the features to ensure information availability within your organisation? 5. If you answered Yes, please provide the feature/method? 6. Does your infrastructure have the features to ensure security of information within your organisation? 7. If you answered Yes, please provide the feature/method? 8. Does your infrastructure allow the collaboration of knowledge in your organisation within your organisation? 9. If you answered Yes, please provide the feature/method? < IT Infrastructure Template 2

4 B. Backup and Restore 1. Do you have a backup and restore procedure and facility? 2. Is the backup and restore facility centrally-operational? 3. Is the backup and restore procedure reliable and easy to perform? 4. Is the job executed and completed according to schedule? 5. Do you keep your backup tape at a remote site? 6. Other than backup and recovery from tape, do you use other media? o Internal Disk o Mobile/Portable Disk o SAN Storage o NAS Storage o Others: (please specify) 7. Do you define your levels of critical data? 8. Is these critical data stored accordingly? C. Security 1. Is this system physically secure? (eg located in a secure area) 2. Does your infrastructure have the perimeter security features to avoid attacks by irresponsible elements? 3. If you answered Yes, please provide the feature/method? < IT Infrastructure Template 3

5 4. Do you have anti-virus software on all PC, notebook and servers? 5. If you answered Yes, a. What type of antivirus is being used? b. Does the antivirus have the capability to update its virus pattern automatically? c. How often does the virus definition being updated? o Daily o Weekly o Monthly 6. Are the servers placed in one protected room such as server room? 7. Do you have user single-on system implemented? 8. If you answered Yes, what type of application is implemented? 9. Do you have a tool to monitor the security threats to your infrastructure? 10. If you answered Yes, please provide the name of the software and what is monitored? 11. Do you have a tool to produce reports on security threats to update the management? 12. If you answered Yes, please provide the name of the software? 13. Is this system protected from external factors such as dust, climatic variation, electricity spikes etc.? < IT Infrastructure Template 4

6 14. Who is the provider of these equipments Firewall Intrusion Prevention System (IPS) Other security equipments 15. If the firewall is maintained internally, please provide the following information. Brand and model of firewall Specification of the firewall Number of concurrent session per second Number of new session per second Number of IPSec VPN tunnels Number of auto-sensing 10/100 Ethernet ports Number of incoming and outgoing bits from each port Number of incoming and outgoing packets from each port 16. If the IPS is maintained internally, pleas provide the following information. Brand and model of IPS Specification of the IPS Throughput per second processed by IPS Number of concurrent session per second Number of connection per second 1. Do you implement proxy web/mail? a. Web b. Mail If you answered Yes, please specify by whom and how frequent? < IT Infrastructure Template 5

7 2. How do you control the access to the server room, communication room and wiring closet? (Please write in brief) 3. Is there any access control system being implemented at the agency? o RFID o Biometrics o PKI o Smart Card o Others, please specify D. Performance 1. Is the response time when accessing the application acceptable? 2. If you answered No, please provide the acceptable response time? 3. Does the PC/Notebook that you use contribute to the performance of the accessibility? 4. If you answered Yes, do you require these components to be upgraded to produce better performance? Please provide existing and proposed specification. Existing o CPU o RAM o Storage o Others 5. Does the application server contribute to the performance of the accessibility? 6. If you answered Yes, do you require these components to be upgraded to produce better performance? Please provide existing and proposed specification. Application Name a. Existing Configuration o CPU o RAM o Storage o Others b. Existing c. Existing d. Existing < IT Infrastructure Template 6

8 Application Name e. Existing f. Existing Configuration o CPU o RAM o Storage o Others 7. Does the networking factor contribute to the performance of the accessibility? 8. What equipment(s) and feature(s) do you think that can be enhanced to provide better performance? 9. Is the system software upgraded when a new version is released? 10. Do you have a network monitoring software implemented for this infrastructure? 11. If you answered Yes, please provide the list the software used and what do you monitor. E. Accessibility 1. Does your infrastructure support the usage of application? 2. How well your infrastructure does supports the usage of application in your organisation? ne o Fair o Very o Fully 3. Do you think the client-server application should be converted to web-based application? 4. Do you think that the existing application should be accessed centrally? 5. Do you think that the centralised application should remain centrally accessed? < IT Infrastructure Template 7

9 6. Is the availability of all the application from anywhere, critical to ensure daily activities are not disrupted? 7. Do you think that the application can be better accessed with distributed architecture? 8. If the application cannot be distributed, do you think independent modules and functions can be distributed? 9. Do you use the accessibility to Internet to conduct research and development activities? o Never o Seldom o Sometimes o Always 10. How many hours do you use the Internet to conduct your research and development activities daily? o Less than ½ hour o Between 1 to 2 hours o Between 2 to 4 hours o More than 4 hours 11. Do you use the computing facilities to conduct knowledge-sharing in the organisation? o Never o Seldom o Sometimes o Always 12. What do you use the knowledge sharing for? o Personal o Information Dissemination o Knowledge Sharing o Knowledge Collaboration 13. Do you archive any access log for the application server? If you answered Yes, please provide the log for the duration of 1 month. Analysis will be made to determine the following: Number of hit based on time Number of access based on time List of files that is highly accessed Type of browser used. F. Collaboration 1. What are the main modes of communications used internally? o Letter/Memo o Telephone o Fax o o Instant Messaging (Internal: Sametime) o Instant Messaging (External: YM, gtalk, MSN) o Social Networking (Facebook, Google+, Tweeter and etc) o Others (Please specify) < IT Infrastructure Template 8

10 2. What are the main modes of communications used in communicating with external parties? o Letter/Memo o Telephone o Fax o o Instant Messaging (Internal: Sametime) o Instant Messaging (External: YM, gtalk, MSN) o Social Networking (Facebook, Google+, Tweeter and etc) o Others (Please specify) 3. Is there any groupware (for calendaring, messaging and collaboration) employed? Please specify the groups that have access to it: 4. Does the agency have Voice Over IP or Video Over IP employ here? If you answered Yes, What kind of system used? Who are the users? When was the system installed? 5. Does the agency have any video conferencing (VC) facilities install?? If you answered Yes, Video conferencing system installed: Main purpose of usage: Year of installation: Users of video conferencing facilities: How frequent the VC facilities being used in a year: G. Maintenance 1. Is the equipment maintenance critical to your operations? 2. When long ago did you acquire the infrastructure equipments? o Less than 1 year o 1 year 3 years o 4 year 5 years o More than 5 years < IT Infrastructure Template 9

11 3. Is the equipments using out-of-date technology or reaching end-of-life? 4. Is it easy to find replacement to the faulty parts? 5. How long does it take to get the faulty equipment replaced? o 1 day o Less than 1 week o More than 1 week o More than 2 weeks 6. Do you have hot-swap equipments to replace the faulty one? 7. How often do you need to rely on outside technical support to fix a software problem? o Almost always o Often o Rarely o Almost never 8. How often do you need to rely on outside technical support to fix a hardware problem? o Almost always o Often o Rarely o Almost never H. Disaster Recovery 1. Is there any disaster recovery site being setup 2. What is the connectivity between DR site and production site? 3. If No, when are you planning to setup a DR Site? o 6-12 months o 1-3 years o 4-5 years Planning 4. Do you have a defined RPO and RTO (Recovery Time Objective, Recovery Point Objective)? If Yes please state RPO : RTO : 5. Is there a documented disaster recovery plan for this infrastructure? < IT Infrastructure Template 10

12 6. If you answered Yes, how often is the disaster recovery plan tested? 7. If you answered no, are there plans to develop a disaster recovery plan for this infrastructure? 8. Are you satisfied overall with the disaster recovery plan? I. Floor Plan 1. Please provide a rough floor plan of the data centre/server room. Please indicate the positions of: Secure Door access equipment Fire extinguishers Air-conditioning units Equipments racks (inclusive of servers and network equipments) Positions of table and chairs Others J. Wide Area Network (WAN) 1. How many zones are established in the data centre : Please provide WAN logical network architecture diagram 2. Do you know the current Internet Service Provider (ISP) in the organization supporting internet access centrally? If Yes please state the ISP: 3. Do you think that the existing bandwidth is enough of current usage in your organization? If No please state reason: K. Others 1. What is your assessment of the likely future prospects for this infrastructure? i) Useable as is ii) Useable with modification iii) Needs replacement(technology refresh) iv) Useable temporarily 2. Are there any other comments about this infrastructure which you feel may be helpful in our current infrastructure assessment? < IT Infrastructure Template 11

13 3. Can you make any suggestions to improve the way things are currently done in relation to any areas of this infrastructure? < IT Infrastructure Template 11