AI05 Process Description

Formalized installation, migration, conversion and acceptance planning.

Training: Client training at project completion
Application sizing: determine application software performance optimum sizing to forecast the resources required for operating new and significantly changed software.
Conversion: provide that the necessary elements from an old system are converted to the new one according to a pre-established plan.
Testing: test all changes in accordance with the impact and resource assessment
Sign-off: a formal evaluation and approval of the test results by management of the affected user department(s) and the information services function.
Post-implementation review of operational information system requirements : (e.g., capacity, throughput, etc.) be conducted to assess whether the users' needs are being achieved by the system and report on whether the system delivered the benefits envisioned in the most cost effective manner.

Reduced number of missed installation and accreditation milestones
Time to complete the installation and accreditation process, from beginning to the end of the security certification and accreditation process
Reduced number of operational systems not accredited, in the instance where the process did not occur
Number of changes to installed systems needed to optimise operations
Number of changes required following system acceptance testing
Number of findings during internal or external audits regarding the installation and accreditation process
Number of changes required to correct problems after solutions are put into production

pilot in production, the VISA 3rd party identification and authentication services. Proposed that PPSR's current Equifax authentication be replaced by the VISA service

Degree of stakeholder involvement in the installation and accreditation process
Number of automated installation and accreditation processes
Frequency of reporting of lessons learned
Reported user satisfaction with the installation and accreditation process (lessons learned)
Number of findings during the quality assurance review of installation and accreditation functions
Reusability of the test platform

The acquisition and implementation methodology is established and consistently applied
Resources are available to support a separate test environment and sufficient time is allowed for the test process
Commitment and involvement of stakeholders is assured in the testing, training and transition processes
Test data is available and representative of live data in kind and quantity, and the test environment reflects as close as possible the live environment
A feedback mechanism is implemented for optimising and continuously improving the process
Stress testing is performed for new systems before they are rolled out and regression testing is conducted for existing systems when changes are implemented
Procedures for formally certifying and accrediting systems for security are consistently defined and adhered to
There is clear understanding and verification of operational requirements