MyMIS Best practice: Use for critical system. vi. ICT System Performance Monitoring Analysis. This programme analyses system performance in real time to look for items such as abnormal system response time or abnormal request for resources. Best practice: Run constantly at the background. Consider adequate lead-time for remedial action. Improving operational assurance addresses technical issues. 2.6 Operational Assurance Issues Several issues are addressed and recommended to improve the operational assurance. (a) Encouragement in the Usage of Locally Developed Security Products Locally developed security products are preferred over foreign makes to help spur local ICT security development. (b) Network Auditing Network auditing methods and tools should be use to ensure the security of the network and to simplify the management of network auditing. Examples of automated auditing methods are the checking and verifying of the data packet from one terminal to the other. (c) Analysis of the ICT System Activity Log The ICT system produces the ICT system log. This could be a daily, weekly, monthly or other time-based activity log. It is a detailed log that indicates the user’s activity. The log should be checked and reviewed by the ICTSO or by internal or external auditors. (d) Maintenance Contract Maintenance clauses should be incorporated into Sales and Purchase Agreement to include provisions for hardware maintenance by the supplier during the warranty period. In some cases it may be necessary to stipulate the service level required. (e) Standard Operating Procedures Standard Operating Procedures should be documented and formalised. Copyright MAMPU Chapter 2 - 18