Really, do you?

System and process documentation  are something that I am always asking for in my job as a security consultant.  No surprise to anybody in the field, most times the documentation just doesn't exist. When it does exist, it is usually really hard to find because it is scattered amongst a variety of file servers, CMS and personal computers. To complicate things, it's probably also in a variety of formats.

Nothing would make me happier than if, someday in the fictional future, I could walk into a client site, ask for their documentation and they could point me to a single source of information that is well organized and consistent.

Nobody, except for a rare form of masochist, likes doing documentation. None the less, it is important. It will save your bacon some day; maybe when your sys admin gets hit by a bus or maybe when your DBA walks out to a new job.  However, if nobody can find your documentation when it's needed it isn't going to do you any good.

So, find a place to store your docs. It might be something fancy like a Sharepoint system or it might be a single file store. Just make sure that it is usable and up to date.

As a final note, make sure you secure your documentation repository. It does contain all sorts of nuggets of information that a malicious person would love to see.

Want ideas on ways that you can improve your document management or documentation? Call us. We have some of those elusive documentation masochists on staff!