Reporting software
malfunctions
Procedures should be established for reporting
software malfunctions. The following action should be
considered:
• The symptoms of the problem and any message appearing
on the screen should be noted.
• The computer in which the software malfunctioned should
be isolated, if possible, and use of it should be stopped.
The appropriate contact should be altered immediately. If
equipment is to be examined, it should be immediately
disconnected from the network. Diskettes used in that
computer should not be transferred to other computers.
• The matter should be reported immediately to the
information security manager.
• Users should be instructed not to remove the suspected
software or to correct it. Only appropriately trained
staff should carry out recovery.