+Acceptable Use and Safe Handling of Assets Policy

Acceptable Use and Safe Handling of Assets Policy

Policies and instructions for acceptable use and safe handling of assets are documented, communicated and provided in accordance with SP-01 and address the following aspects of the asset lifecycle as applicable to the asset:
• Approval procedures for acquisition, commissioning, maintenance, decommissioning, and disposal by authorised personnel or system components;
• Inventory;
• Classification and labelling based on the need for protection of the information and measures for the level of protection identified;
• Secure configuration of mechanisms for error handling, logging, encryption, authentication and authorisation;
• Requirements for versions of software and images as well as application of patches;
• Handling of software for which support and security patches are not available anymore;
• Restriction of software installations or use of services;
• Protection against malware;
• Remote deactivation, deletion or blocking;
• Physical delivery and transport;
• dealing with incidents and vulnerabilities; and
• Complete and irrevocable deletion of the data upon decommissioning.
Additonal Criteria-
Supplementary Information - About the Criteria-

1. Přehled

1.1 Odkazy

1.2 Identifikované požadavky

1.3 Související regulace

2. Identifikované požadavky

Požadavky

3. Související regulace

Regulace