Topic IIT equipment System Patching System integrity audit System maintenance User Management Procedures to be included in the SOPs ITSM System administrators System users containing classified information that is to be transferred off‐site Managing of incoming media for malware or unapproved software Managing the disposal and N/A destruction of unserviceable IT equipment and media Advising and recommending N/A N/A system patches, updates and version changes based on security notices and related advisories Reviewing system user accounts, system parameters and access controls to ensure that the system is secure Checking the integrity of N/A N/A system software Testing access controls Managing the ongoing security and functionality of system software (maintaining awareness of current software vulnerabilities, testing and applying software patches/updates/signatures, and applying appropriate hardening techniques) Account Authorizing new system users System backup and N/A N/A N/A Adding and N/A removing system users Setting system user privileges Cleaning up directories and files when a system user departs or changes roles Backing up data, N/A 34