+OPS.1.1.2.A6 Protecting Administrative Tasks (B)

OPS.1.1.2.A6 Protecting Administrative Tasks (B)

Administrators MUST authenticate themselves through appropriate procedures before performing actions with administrative privileges.

Actions and activities that do not require elevated privileges MUST NOT be performed with administrative privileges.

Organisations MUST ensure that only administrators have access to administrative interfaces and functions. In particular, organisations MUST ensure that only administrators can make security-relevant changes to IT systems and applications.

Administration MUST be performed using secure protocols. The option to set up a separate administration network SHOULD be considered.

1. Přehled

1.1 Odkazy

1.2 Identifikované požadavky

1.3 Související regulace

2. Identifikované požadavky

Požadavky

3. Související regulace

Regulace

Propojené úkoly

Vazby
blocks G 0.14 Interception of Information / Espionage
blocks G 0.21 Manipulation with Hardware or Software
blocks G 0.22 Manipulation of Information
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.37 Repudiation of Actions