As international compliance requirements amplify there is becoming an ever greater demand for full documentation of security procedures and associated security controls.

Constructing adequate documentation is rarely a simple process and is usually not a task which the systems technicians or the normal administrative staff either have the spare time or inclination for. Professional documentation writers can be utilised, but rarely have the background technical or security experience to fully understand this complex area.

Cronos Consulting can produce complete security documentation (in English) to the standards often required today for both External Audit and Compliance processes. Complete documentation can be expected to cover areas such as:

• The security software options and other critical settings
• Security product facilities in use
• Technical matters relating to matters such as databases and local exits or support programs
• Use of local special utilities, SPF panels etc.
• End user / management processes for completion of security requests
• Interfaces with PR systems or Identity Management technologies
• Administrative procedures
• Reporting and Auditing features and local usage
• Cross references and a glossary of technical and security terminology used

Production of such a document will typically involve examination of existing security documentation, policies and standards plus discussion with involved staff. Considerable time may be saved where partial documentation already exists in a variety of ‘old’ documents or administrators notes which mainly need to be brought up to date, standardised and consolidated.

Digital versions of input documents can be translated from Swedish or Norwegian as part of the process if required. Documentation can, at present, be produced only in English.