+APP.2.1.A2 Planning the Use of Directory Services [Data Protection Officer, Process Owner] (B)

APP.2.1.A2 Planning the Use of Directory Services [Data Protection Officer, Process Owner] (B)

The use of directory services MUST be planned carefully. The specific use of the directory service MUST be defined. It MUST be ensured that the directory service and all applications using it are compatible. In addition, a model consisting of object classes and attribute types MUST be developed that meets the requirements of the intended types of use. When planning the directory service, Employee Representatives and the Data Protection Officer MUST be involved. A needs-based access control policy MUST be designed for the directory service. In general, the planned directory service structure SHOULD be fully documented. Safeguards SHOULD be planned to prevent the unauthorised collection of data from the directory service.

1. Přehled

1.1 Odkazy

1.2 Identifikované požadavky

1.3 Související regulace

2. Identifikované požadavky

Požadavky

3. Související regulace

Regulace

Propojené úkoly

Vazby
blocks G 0.11 Failure or Disruption of Service Providers
blocks G 0.14 Interception of Information / Espionage
blocks G 0.15 Eavesdropping
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.21 Manipulation with Hardware or Software
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.26 Malfunction of Devices or Systems
blocks G 0.27 Lack of Resources
blocks G 0.32 Misuse of Authorisation
blocks G 0.36 Identity theft
blocks G 0.40 Denial of Service
blocks G 0.45 Data Loss
blocks G 0.46 Loss of Integrity of Sensitive Information