3.
Documented Operating Procedures ....................................................................................... 44
4.
Patch and Vulnerability Management .................................................................................... 44
5.
Capacity Management .......................................................................................................... 45
6.
Separation of Development, Testing and Operational Environments ....................................... 46
7.
Information Backup .............................................................................................................. 47
8.
Logging and Monitoring ........................................................................................................ 48
9.
Securing Application Services on Public Networks................................................................... 49
10.
Protecting Application Services Transactions .......................................................................... 50
11.
Planning Information Security Continuity ............................................................................... 50
12.
Implementing Information Security Continuity ....................................................................... 51
13.
Verify, Review and Evaluate Information Security Continuity .................................................. 51
14.
Redundancies and Availability of Information Processing Facilities .......................................... 52
Glossary........................................................................................................................................ 53
Lebanese National Security Policy Guidelines v1.7
Page
8|