Physical Server Provisioning and Deployment Policy

• Table of Contents

  • EDC Inc Physical Server Provisioning and Deployment Policy
  • 1.0 Policy Statement
  • 2.0 Scope
  • 3.0 Server Provisioning
  • 3.1 Request and Approval
  • 3.2 Configuration
  • 3.3 Active Directory Integration
  • 3.4 CMDB Registration
  • 4.0 Server Deployment
  • 4.1 Change Audit Board (CAB) Approval
  • 4.2 Physical Security
  • 4.3 IT Security Operations
  • 4.4 IT Monitoring Operations
  • 4.5 IT Database Operations
  • 4.6 IT Audit and Compliance
  • 5.0 Policy Compliance
  • 6.0 Policy Review
  • Summary

EDC Inc Physical Server Provisioning and Deployment Policy

This policy outlines the procedures and guidelines for the provisioning and deployment of physical servers at EDC Inc. It is designed to ensure the efficient, secure, and compliant operation of our IT infrastructure.

1.0 Policy Statement

EDC Inc is committed to maintaining a robust, secure, and efficient IT infrastructure. This policy provides the framework for the provisioning and deployment of physical servers, ensuring that all activities are conducted in a controlled, secure, and auditable manner.

2.0 Scope

This policy applies to all EDC Inc employees, contractors, and third parties who are involved in the provisioning and deployment of physical servers within the EDC Inc environment.

3.0 Server Provisioning

3.1 Request and Approval

All server provisioning requests must be submitted to the IT Server Build Operations department. The request must include the purpose of the server, the required specifications, and the expected lifespan. The IT Director will review and approve all requests.

3.2 Configuration

Once approved, the IT Server Build Operations team will configure the server according to the approved specifications. All servers will be configured in accordance with EDC Inc’s standard build procedures and security guidelines.

3.3 Active Directory Integration

All servers must be integrated into the Active Directory for user and service account management. This will be managed by the IT Server Operations team.

3.4 CMDB Registration

Upon completion of the build, the server must be registered in the CMDB inventory management tool. This will be managed by the IT Server Operations team.

4.0 Server Deployment

4.1 Change Audit Board (CAB) Approval

Before deployment, all server changes must be approved by the CAB. The IT Server Operations team will submit the change request to the CAB for review and approval.

4.2 Physical Security

The Corporate Physical Security team is responsible for ensuring the physical security of all servers. This includes access control, environmental controls, and physical security monitoring.

4.3 IT Security Operations

The IT Security Operations team is responsible for ensuring the security of all servers. This includes network security, OS patching, and vulnerability management. All servers must be patched every 30 days, unless an “IT Exception” is approved by IT Security.

4.4 IT Monitoring Operations

The IT Monitoring Operations team is responsible for monitoring the performance and availability of all servers. They will also manage incident response and recovery in coordination with the IT-SOC.

4.5 IT Database Operations

The IT Database Operations team is responsible for managing all database servers. This includes database configuration, performance tuning, and backup and recovery.

4.6 IT Audit and Compliance

The IT Audit and Compliance team is responsible for ensuring that all server provisioning and deployment activities comply with EDC Inc’s policies and procedures, as well as applicable laws and regulations.

5.0 Policy Compliance

All EDC Inc employees, contractors, and third parties must comply with this policy. Failure to comply may result in disciplinary action, up to and including termination of employment or contract.

6.0 Policy Review

This policy will be reviewed annually by the IT Director. Any changes to the policy will be communicated to all relevant parties.

Summary

This policy provides a comprehensive framework for the provisioning and deployment of physical servers at EDC Inc. It ensures that all activities are conducted in a controlled, secure, and auditable manner, in line with EDC Inc’s commitment to maintaining a robust, secure, and efficient IT infrastructure.