Case Projects: Determining Software Engineering Risks for Alexander Rocco
After reviewing all the applications Alexander Rocco uses, you notice that many have been modified or changed during the past couple of months. Two of the company's financial applications are written in C and, according to Bob Jones, the IT manager, monitor the company's accounts and financial data. Mr. Jones discovered that several modifications were made to one program, with no documentation indicating who made the changes or why.
Based on this information, write a memo to Mr. Jones with your findings and any recommendations you might have for improving the security of the company's software engineering practices. Search the Internet for any information on securing company software. Does the OSSTMM address any of these issues? What improvements should you recommend to better protect this information?