+OPS.1.1.7.A4 Protection of System Management Communication (B)

OPS.1.1.7.A4 Protection of System Management Communication (B)

As soon as a system management solution and the systems to be managed communicate via productive infrastructure, secure protocols MUST be used for this purpose. If this is not possible, a dedicated administration network (out-of-band management) MUST be used (see NET.1.1 Network Architecture and Design). If this is also not possible, complementary security mechanisms MUST be used at another level (e.g. tunnel mechanisms via encrypted VPN or comparable solutions).

1. Преглед

1.1 Препратки

1.2 Идентифицирани изисквания

1.3 Свързани регулации

2. Идентифицирани изисквания

Изисквания

3. Свързани регулации

Регулации

Свързани задачи

Връзки
blocks G 0.15 Eavesdropping
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.21 Manipulation with Hardware or Software
blocks G 0.22 Manipulation of Information
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.43 Attack with Specially Crafted Messages