---

Technology Standard

---

Contingency Planning and Business Recovery Program

IT System Inventory and Definition

Version: 1.0
Status: Approved: 2/21/07
Contact: Director, Technology Services

The IT System Inventory and Definition Standard of the Contingency Planning and Business Recovery Program cover all VCCS and college business processes and the related Information Technology infrastructure. 

The IT System Inventory and Definition Standard is applicable to the System Office and all Colleges.

The following requirements and recommendations are provided to assist with compliance of the Commonwealth of Virginia (COV) Information Technology Resource Management Standard, COV ITRM 501-01 standards for IT System Inventory and Definition. Worksheet three of the Business Impact Analysis Template may be used to assist in this process.

Worksheet one of the Business Impact Analysis Template identified the activities and core functions of each business unit. Worksheet two determined the potential damages to the VCCS or college of a compromise using the sensitivity criteria. Completion of worksheet three of the Business Impact Analysis Template will produce an application profile of all IT systems classified as critical or sensitive.

Create an application profile of all sensitive or critical IT systems. This process is mandatory for those rated as "1/high", advisable for those rated as "2/medium", and recommended for those rated as "3/low". All application profiles must be updated as changes in systems or personnel occur.

Assign the appropriate owners in each application profile. This includes:

• System Owner
• Data Owner
• System Administrator

Reference the Contingency Planning and Business Recovery Program, IT Security Roles and Responsibilities Standard for assistance in this step.

Return to Information Security Program