修改意見from修訂建議-安永反饋

12月23日已建議from1October2013to30September2014，標注ST、TH上應該保留，建議取反饋：建議不修改的寫作標準是一般不STTH的，另外參考了中行歐洲中心、美洲中心TheDeviceandEnvironmentTeam(DET-BJ)isresponsiblefortheoverallplanningofcomputerroomenvironmentalcontroloftheDataCenterandforestablishingthecorrespondingmanagementpoliciesplanspoliciesplans”兩個復數？反饋：已修修改為TheDeviceandEnvironmentTeamDET-BJ)isresponsiblefortheoverallplanningofcomputerroomenvironmentalcontroloftheDataCenterandforestablishingthecorrespondingmanagementpolicies,plansandprocedures”LinuxsystemsarenotmanagedbySAS,usersareauthenticatedbystaticpasswordviaSSHprotocol“LinuxsystemsarenotmanagedbySAS”描述有點歧義：Linux都沒被SAS管理，應該用定語。反饋：已修ForbystaticpasswordviaSSHprotocol”TheDataCentersynchronisestheapplicationsystemsinthelocalandremotedisasterrecoveryenvironmentswiththeonesintheproductionenvironmentbasedonthesystemdisasterrecoverystrategies.“theapplicationsystems“應該同步，但操作反饋：經與科技部商議，該控制點已刪“toensurethatITsystemoperationswereoperatedasexpected“是否可修改為”toensurethatITsystemswereoperatedasexpected“反饋：已修修改為“toensurethatITsystemswereoperatedasInspectedaselectionoftheprogramchecklistsprogramchecklists反饋：已修修改為“InspectedaselectionoftheprojectacceptanceregistrationInspected…ensure…。ensure用法有問題，應該使用確認、確定,例如determineInspectedservicelevelmanagementpoliciestoensurethatthedevelopmentandsigningofservicelevelagreementInspectedaselectionoftheinternalSLAsandSOWstoensurethatinternalacquiredtherelatednon-disclosureagreementstoensurethattheexternalITserviceemployeessignedthenon-disclosureagreements。獲取本身不能確保反饋該用法為TYPE1報告的沿用中行在“對批次ISAE3402報告20140827版本的修訂意見”中針對所用句式“inspected…ascertainthat”中ascertain一詞的使用提出了建議；在20148月29日的回復郵“對批次ISAE3402報告20140827版本的修訂意（終稿）安V5”中針對中行建議進行了反饋ensureascertain此后報告一直12月24日建議ForaselectionofredundancyuserIDs,observedtheredundancyuserIDsinsystemtoensurethattheIDswerenotexistedinthesystem.2個步驟有，為反饋：已修修改為ForaselectionofredundancyuserIDs,observeduserIDsinthesystemtoensurethattheredundancyuserIDswerenotexistedinthesystem.”Foraselectionoftheproductionchanges,andinspectedtherelevanttestingreviewed.Foraselectionoftheproductionchanges,andinspectedtherelevantpost-evaluationForaselectionoftheproductionchanges,andinspectedthechangerequestrecords,ForaselectionoftheprojectinitializationapplicationsrelatedtooverseasITsystems(AsiaPacificregion),andinspectedtherelatedprojectinitializationnotificationsForaselectionofthevendorsfromthevendorlist,inspectedthecontractsForaselectionofthenewuserapplicationformsoftheNotessystem,inspectedtoForaselectionoftheapprovedchangerequests,andinspectedtherelevantproductionchangeimplementationplansForaselectionoftheITsystem,obtainedthedatabasepartitiondescriptionsForaselectionoftheapplicationsystems,observedlogconfigurationofthe反饋：已修“andForaselectionofthenewuserapplicationformsoftheNotessystem,inspectedtoensurethattheapplicationswereapprovedbyBOCHOexecutiveoffice.Inspected什反饋：已修ForaselectionofthenewuserapplicationformsoftheNotessystem,inspectedtheapprovalpartstoensurethattheapplicationswereapprovedbyBOCHOexecutiveForaselectionoftheversionsofapplicationsystemsintheproductionenvironment,observedtheversionnumbersoftheapplicationsystemsinthelocaldisasterrecoveryenvironmenttoensurethattheversionnumberswereconsistent.建議：Foraselectionoftheapplicationsystemsintheproductionenvironment,observedtheversionnumbersoftheapplicationsystemsinthelocaldisasterrecoveryenvironmenttoensurethattheversionnumberswereconsistent.反饋：經與信息科技部商議，該控制點已刪1225ThecreationoftheuserIDsandtheuserprivilegesreviewwereinlinewiththeauthorizedrightswereexecutedbydifferentemployees.語法有疑問。反饋：已修TheuserIDscreationanduserprivilegesreviewwhichwereintendedtocheckwhethertheauthorizedrightswereinlinewiththeappliedrights,wereexecutedbydifferentemployees.AllITsystemsusersoftheDataCenterapplyforrightsaccordingto‘UserIDUniqueness’principle,‘AuthorizationonDemand’principle,‘NeedtoKnow’and‘LeastPrivilege’principle.Theuser’creationandrightsmodificationoftheDenterareauthorizedbytheheadsofapplicant’andtheauthorizingteam.與中文版有差異申請權限是否需要考慮UserID反饋：已修Foraselectionofresponsibilitychangedusersandtheresponsibilities’descriptions,observedtheiraccountandrightsinthesystemon-sitetoensurethattheoriginaluserrightswereadjustedandtheexistinguserrightswereinlinewiththeresponsibilities’descriptions。responsibilitychangedusers英文含義不明責任改變了用戶？)，responsibilities’descryptions英文似乎不太這樣用，jobdescriptions?反饋：已修Foraselectionofuserswithpositionchangesandthecorrespondingjobdescriptions,observedtheiraccountsandrightsinthesystemon-sitetodeterminethattheoriginaluserrightswereadjustedandtheexistinguserrightswereinlinewiththeresponsibilitiesstatedinjobdescriptions.Foraselectionofterminatedusers,observedtheusers’accountsandrightsinthesystemon-sitetoensurethattheusers’accountsweredeleted.建議修改為Foraselectionofterminatedusers,observedtheusers’accountsinthesystemon-sitetoensurethattheusers’accountsweredeleted.反饋：已修修改為Foraselectionofterminatedusers,observedtheusers’accountsinthesystemon-sitetoensurethattheusersaccountsweredeleted”ForthenetworkdeviceswerenotsupportedbyRADIUStheuserisrequiredtouseastaticpassword，句法有疑問，應該使用定語反饋：已修ForthenetworkdeviceswhichwerenotsupportedbyRADIUS,theuserisrequiredtouseastaticpassword,Inspectedtheaccesscontrollistfromthefirewallconfigurationtoensurethatofficeenvironmentuserscouldnotconnecttotheexternalnetwork.用戶不能連接到外部網絡？officeenvironmentusers有點中文直譯，英文可能不這樣寫。反饋：已修Inspectedtheaccesscontrollistfromthefirewallconfigurationtodetermineofficeterminalscouldnotconnecttotheexternal“獲取并檢查開放平臺用戶ID申請表，確認用戶已使用完畢”描述（即使結反饋：建議不修ID申請表中會對用戶的關閉時間進行記錄1225Foraselectionoftheversionsofapplicationsystemsintheproductionenvironment,observedtheversionnumbersoftheapplicationsystemsinthelocaldisasterrecoveryenvironmenttoensurethattheversionnumberswereconsistent.只觀察本地，反饋：經與科技部商議，該控制點已刪ObservedtheRACFprofiletoensurethatRACFsecuritymanagementmodulewasdeployedtocontrolaccessrightofmainframesystem.前面一段已經包括這些內容，是否需要重復（InspectedtheDataCenteraccesscontroltechniquespecificationtoensurethatRACFsecuritymanagementmodulewasdeployedtocontrolaccessrightofmainframesystem,andthespecificationwasapprovedandformallyreleased.）反饋：建議不修InquiredoftheDentermanagementaboutthesecurityconfigurationoftheplatformsystemuserpassword.theopenplatformsystemuserpassword有點中文直反饋：已修“Inquiredofuserpasswordofopenplatformsystems.”現場觀察WINWIN平臺系統通過域控服務器的安全策略對用戶權限進行控制。反饋：已修現場觀察WIN平臺系統域控服務/r