Software Installation

Once your software has gone through the acquisition and inventory phases, you’ll be ready to begin installing it on your company’s PCs. Again, a centralized installation policy, with one person or department in charge of all software deployment, is optimal. Additionally, steps should be taken to ensure that only those in charge of installs may perform them.

Once in place, these policies should be made available to all employees and department managers. Be sure to define the specific consequences or penalties involved for any potential violators.

For IT or whoever is placed in charge of installs, consider the following:

Provide tech support only for approved applications and devices.
Forbid installing any new software or hardware on any company device including desktop PCs, laptops or servers without prior approval.
Disable both the Run and Add or Remove Programs options from the Start menus of all your company’s PCs.
Disable the autorun feature on all PCs with CD-ROM drives.
Make it clear that any unauthorized software or hardware will be uninstalled if it’s discovered.

In the absence of proper installation policies, your company is left open to a number of vulnerabilities including:

Increased susceptibility to viruses
Compromised security and/or security breaches
Loss of data
Loss or waste of network bandwidth from running unauthorized programs

As always, all software media (including license documentation, user manuals, installation media, etc.) should be kept in a safe storage area and maintained by one designated department after installation.