+NET.3.1.A23 Audits and Penetration Tests (S)

NET.3.1.A23 Audits and Penetration Tests (S)

Routers and switches SHOULD be checked for known security issues at regular intervals. Audits SHOULD also be performed regularly. This SHOULD include checking whether the actual situation corresponds to the basic configuration defined as secure. The results SHOULD be clearly documented and compared against the target situation. Deviations SHOULD be investigated.

1. Přehled

1.1 Odkazy

1.2 Identifikované požadavky

1.3 Související regulace

2. Identifikované požadavky

Požadavky

3. Související regulace

Regulace

Propojené úkoly

Vazby
blocks G 0.9 Failure or Disruption of Communication Networks
blocks G 0.11 Failure or Disruption of Service Providers
blocks G 0.14 Interception of Information / Espionage
blocks G 0.15 Eavesdropping
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.25 Failure of Devices or Systems
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.31 Incorrect Use or Administration of Devices and Systems
blocks G 0.32 Misuse of Authorisation
blocks G 0.36 Identity theft
blocks G 0.38 Misuse of Personal Information