MyMIS Some examples of testing are; (a) unit test; (b) components test; (c) system test; (d) integration test; (e) stress test; and (f) penetration test (to see whether the safeguards can be bypassed). Certification is formal testing conducted by an independent party. The appointment of such experts must conform to the current government procedures pertaining to the appointment of consultants. (Refer to Surat Pekeliling Perbendaharaan Bil. 3 Tahun 1995 – Peraturan Perolehan Perkhidmatan Perunding). 2.5.1.2 Conformance Testing The organisation may conduct conformance tests on products such as software, hardware and firmware. Conformance to ICT standards is important to ensure the inter-operability or strength of ICT security. 2.5.1.3 Need to use reliable architecture. Use of Reliable Architectures The use of reliable architecture such as fault-tolerance, redundancy and mirroring enhances the degree of assurance of ICT systems. However the use of costly reliable architecture is normally reserved for very critical systems that demand practically zero fault. 2.5.1.4 Ease of Safe Use Ease of safe use of Public Sector ICT Security products and mechanisms is another important aspect of the successful implementation of Public Sector ICT Security systems. When the interface with safeguards is easy and straight forward, the tendency is that the user is more likely to use the system correctly and commit fewer mistakes. Thus, acceptance by the users enhances the overall security assurance. 2.5.1.5 Product evaluation and review will help achieve assurance. Evaluation and Reviews Evaluation and reviews are another option for achieving assurance. Product literature in reviews provides useful information and is normally geared to product superiority above other similar products. However, product reviews are less formal and do not offer detailed and extensive examination as is available through an evaluation. Important factors to consider when attempting to seek comfort level via this means are as follows: (a) independence of the review group; (b) evaluation criteria; (c) testing parameters; Copyright MAMPU Chapter 2 - 12