Additional Resources: Standardized to Rationalized Checklist

The following checklist outlines the requirements you must meet to move to the Rationalized level. After you have addressed each item under the main topics, you have successfully moved from the Standardized level to the Rationalized level.

On This Page

Capability: Identity and Access Management
Capability: Desktop, Device and Server Management
Capability: Security and Networking
Capability: Data Protection and Recovery

Capability: Identity and Access Management

Attributes:

• Identified which configurations should be monitored or enforced.

• Selected tools for monitoring and enforcing configuration compliance.

• Defined Group Policy objects for settings managed through Group Policy.

• Implemented Group Policy Management Console to manage Group Policy objects.

• Applied Group Policy to at least 80 percent of your desktops.

Capability: Desktop, Device and Server Management

Attributes:

• Identified tools and technologies required to enable automated operating system deployment.

• Performed necessary pre-deployment tasks for application compatibility and packaging, infrastructure remediation, imaging, user-state migration, and desktop security.

• Tested and validated Zero Touch Installation in a lab environment and pilot program.

• Performed automated OS deployment to end users.

Attributes:

• Deployed tools and procedures to automate desktop asset inventory.

• Implemented procedures and technologies to automate application and operating system deployment

• Implemented tools and procedures to perform and analyze software usage tracking reporting.

• Implemented best practice automated software update management.

• Deployed tools and procedures to monitor desktop system status, including product compliance and system status monitoring.

Attributes:

• Inventoried existing production operating systems.

• Determined new computer and refresh strategies in order to phase out older operating systems.

• Deployed two most recent operating system versions to at least 80 percent of all desktops.

Attributes:

• Evaluated the latest versions of Office and defined plan to consolidate Office versions on production workstations.

• Deployed latest versions of Office to desktops.

• Defined plan for managing Office configurations.

Attributes:

• Collected and analyzed the application inventory in your organization to build your application portfolio.

• Implemented standard testing of your mitigation strategies to create your application mitigation packages.

• Implemented standard processes to resolve any outstanding compatibility issues to report compatibility mitigation to management.

• Implemented automated deployment of all compatibility mitigation packages.

Attributes:

• Implemented process and tools to inventory hardware and software assets.

• Implemented process and tools to scan servers for software updates.

• Established a process to automatically identify available patches.

• Established standard testing for every patch.

• Implemented patch distribution software.

Attributes:

• Inventoried mobile devices connecting to your network.

• Determined a communication security strategy appropriate for your needs.

• Implemented mobile device authentication to all connected devices.

Attributes:

• Inventoried mobile devices connecting to your network and Web applications currently consumed or potentially consumed by mobile device users.

• Developed and implemented a strategy to optimize Web applications for mobile device users, update mobile device hardware, or both.

Attributes:

• Inventoried all IT services and LOB applications in your organization, including performance and traffic data.

• Developed a plan to consolidate server infrastructure by implementing virtual machine technologies.

Attributes:

• Inventoried and rationalized the current set of managed desktop images in your organization.

• Developed and implemented a strategy to consolidate desktop images by using thin or hybrid layered-imaging for desktop deployment.

Capability: Security and Networking

Attributes:

• Inventoried your desktop and server computers to identify which hardware currently has host-based firewall technologies.

• Deployed host-based firewall technology to hardware lacking firewall capabilities or updated servers to Windows Server 2003 SP1 or later.

• Established policy enforcement to ensure host-based firewalls are always enabled and cannot be disabled.

Attributes:

• Evaluated remote access requirements for remote clients and branch offices.

• Designed and implemented secure virtual private network or similar services to remote clients and branch office.

Attributes:

• Assessed the current state of network infrastructure affected by Internet Protocol Security (IPsec).

• Identified organizational requirements to ensure secured and guaranteed communication between servers, including regulation and compliance impacts.

• Developed and implemented a plan across the organization using Ipsec to meet defined requirements.

Attributes:

• Defined your organization’s IT services in a service catalog.

• Determined the baseline or current service levels for defined services.

• Defined service levels appropriate for your organization and determined a plan for automating service level monitoring.

• Implemented an automated availability monitoring solution.

Attributes:

• Assessed any current unmanaged methods used for presence and instant communication.

• Created a requirements specification for presence and instant messaging, aligning to industry or local regulations and policies.

• Evaluated presence and instant technology and created a plan to implement your selected solution.

• Implemented presence at minimum through managed instant messaging and optionally through collaboration and e-mail infrastructure.

Attributes:

• Identified current wireless access and related topologies.

• Evaluated wireless technologies, protocols, and standards.

• Developed and implemented plans for secure wireless authentication infrastructure.

Attributes:

• Performed a network discovery to inventory all components.

• Identified people, process and technology design considerations for the certification authority and public key infrastructure.

• Created a detailed deployment plan to enable the PKI.

• Implemented PKI deployment plan.

Attributes:

• Identified and documented branch office topology.

• Created requirement specification based on the needs of all branch office types.

• Created a plan and architecture for branch office service consolidation and identified performance thresholds for reexamination of branch office WAN requirements.

• Implemented plan to optimize branch office services against WAN link limitations.

Capability: Data Protection and Recovery

Attributes:

• Created a centralized data backup plan and a recovery plan for branch offices in your organization.

• Implemented a backup and recovery plan for centralized control of backup and recovery operations, either via network-centralized tools or operational guidelines for local backup and recovery, with defined service levels.

Attributes:

• Created a data backup plan and a recovery plan for 80 percent or more of all servers in your organization.

• Used drills to test your plans and validate defined recovery times.

Capability: Security and ITIL/COBIT-based Management Process

Attributes:

• Developed and implemented two-factor identity and access management policies.

• Developed a process to manage security requirement testing on all acquired or developed software.

• Established a standard and repeatable procedure for classifying sensitive data.

Attributes:

• Implemented service level management across IT operations.

• Implemented best practice release management.

• Optimized network and system administration processes.

• Implemented best practice job scheduling.