Policy Review (Top-Down) Methodology 87
Items 5 (when) and 6 (why) are not usually considered part of the policy
text. When a policy is in effect it is normally addressed in the transmittal
document. When the policy is published, there is a document that goes with
the policy that explains why the policy was developed and when it takes
effect. Policies should not contain explanations as to why they were developed
or a compliance date.
When assessing the policies, procedures, and standards that support the
network environment, it is most important that there be some written and
published documentation. Look to see what is there. Read the documents and
then, during your interviews, ask the interviewees how they interpret the
policy. Use this information and the resources discussed in this chapter and
the previous chapter.
Summary
The review of supporting documentation will allow the bottom-up team to
set expectations on what it should see in the network. If policies, standards,
or procedures are missing, it will be necessary to identify which ones they
are. Additionally, if these documents exist but are outdated or poorly written,
it will be necessary to report this fact along with a recommendation to correct
the problem.
..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.