+NET.3.1.A10 Creating a Security Policy(S)

NET.3.1.A10 Creating a Security Policy(S)

A specific security policy MUST be drawn up for routers and switches based on the general security policy of the organisation in question. This security policy SHOULD transparently describe the requirements and specifications for the secure operation of routers and switches. The policy SHOULD be known to all administrators and be integral to their work. If the policy is changed or deviations from the agreed requirements are allowed, this SHOULD be coordinated with the CISO and documented. It SHOULD be checked regularly whether the policy is still being properly implemented. The results SHOULD be documented appropriately.

1. Преглед

1.1 Препратки

1.2 Идентифицирани изисквания

1.3 Свързани регулации

2. Идентифицирани изисквания

Изисквания

3. Свързани регулации

Регулации

Свързани задачи

Връзки
blocks G 0.23 Unauthorised Access to IT Systems