System Configeration Management

Policies & Procedures

Firms need to document their Policies/Procedures regarding manually maintained datasets and periodically revise them in the light of errors they might have caused.
The Policies/Procedures should include a determination of the risk v reward tradeoff in using manually maintained datasets and their approval process.

Manual Data Risk Assessment

All the manual data used by your firm, whether used in formal systems or by individual employees, needs to be identified and checked for completeness. The manually maintained data should be risk assessed to ensure monitoring is focused on the highest risk manually maintained data.

Manual Data Monitoring

Each manual dataset needs to be reviewed at a risk assessed frequency to ensure it complies with the firm's Data Governance standards and remains necessary, complete, accurate and that its risk assessment has not changed since the last assessment.

Errors: Identification & Reporting

On an exception basis, operational errors where it is assessed that manually maintained data was a contributory factor need to be reported. Remedial action might include assessing why the manual data failed and how to prevent a recurrence.