Metadata access controls and authorization
Access controls and authorization checks are enforced for SaaS infrastructure components and services.
An approval process is used to authorize access to the following infrastructural elements and services:
- The network
- The operating system
- The middleware components
- The application
- Administrative services
When managing the changes to a production environment, the following change management processes
are adhered to:
- Changes to the production environment must be recorded and must be approved by the change advisory board
- All support activities must be tracked in the IBM® Support Portal for cloud services
- All operational and maintenance activities must be tracked by the internal ticketing system