Incorrect use or administration of devices, systems and applications can jeopardise their security especially if existing IT security safeguards are ignored or bypassed through the misuse. In many cases, this results in malfunctions or failures. Depending on the types of systems that are used incorrectly, the confidentiality and integrity of information may also be impaired.

A particularly important special case of incorrect use is incorrect administration. Errors during the installation, configuration, maintenance and support of hardware or software components may lead to serious damage.

For example, security incidents can occur when access rights are granted too generously, the passwords are easy to guess, the data media containing backup copies are inadequately protected, or the terminals are not locked during temporary absences.

Similarly, data can also be accidentally deleted or changed through the incorrect operation of IT systems or applications. However, confidential information could also be disclosed unintentionally, for example when the data access rights are set incorrectly.

When power supply or network cables are routed in such a way that they are not protected, they may be damaged accidentally, causing connections to fail. When device connection cables are exposed, employees or visitors can trip over the cables and disconnect the devices.

Propojené úkoly

Vazby
is blocked by ORP.3.A1 Top Management Awareness of Information Security Issues [Supervisor, Top Management] (B)
is blocked by ORP.3.A3 Training Employees in the Secure Handling of IT [Supervisor, Human Resources Department, IT Operation Department] (B)
is blocked by ORP.3.A7 Training in the IT-Grundschutz Methodology (S)
is blocked by ORP.3.A9 Special Training for Exposed Persons and Organisations (H)
is blocked by ORP.4.A17 Suitable Selection of Identity and Access Management Systems [IT Operation Department] (S)
is blocked by ORP.4.A19 Instruction of All Employees in the Handling of Authentication Methods and Mechanisms [User, Head of IT] (S)
is blocked by ORP.4.A24 Dual Control for Administrative Activities [IT Operation Department] (H)
is blocked by CON.1.A7 Drawing Up a Security Policy for the Use of Cryptographic Methods and Products (H)
is blocked by CON.1.A9 Selecting an Appropriate Cryptographic Product [IT Operation Department, Process Owner] (H)
is blocked by CON.1.A11 Secure Configuration of Crypto Modules [IT Operation Department] (H)
is blocked by CON.1.A14 Training of Users and Administrators [Supervisor, Process Owner, IT Operation Department] (H)
is blocked by CON.7.A1 Security Policy for Information Security on Trips Abroad
is blocked by CON.7.A2 Raising Employee Awareness of Information Security When Travelling Abroad (B)
is blocked by CON.7.A8 Secure Use of Public WLANs [User] (B)
is blocked by CON.7.A12 Secure Destruction of Sensitive Materials and Documents [User] (B)
is blocked by CON.7.A11 Use of Anti-Theft Devices [User] (S)
is blocked by CON.7.A16 Protecting Integrity Using Checksums or Digital Signatures [User] (H)
is blocked by CON.7.A18 Restricted Authorisations on Trips Abroad [IT Operation Department] (H)
is blocked by CON.8.A10 Source Code Version Management [Developer] (B)
is blocked by CON.8.A1 Definition of Roles and Responsibilities [Central Administration] (S)
is blocked by CON.8.A11 Drawing Up a Policy for Software Development (S)
is blocked by CON.8.A16 Appropriate Control of Software Development (S)
is blocked by CON.8.A19 Regular Integrity Audits of the Development Environment [IT Operation Department] (H)
is blocked by OPS.1.1.2.A8 Administration of Specialised Applications (S)
is blocked by OPS.1.1.2.A9 Sufficient Resources for the IT Operation Department (S)
is blocked by OPS.1.1.2.A10 Further Education and Information (S)
is blocked by OPS.1.1.2.A17 Dual Control in IT Administration (H)
is blocked by OPS.1.1.7.A6 Securing Access to the System Management Solution (B)
is blocked by OPS.1.1.7.A7 Definition of a Security Policy for System Management (S)
is blocked by OPS.1.1.7.A8 Drawing Up a System Management Concept (S)
is blocked by OPS.1.1.7.A9 Detailed and Implementation Planning for System Management (S)
is blocked by OPS.1.1.7.A10 Concept for Secure Operation of the System Management Solution (S)
is blocked by OPS.1.1.7.A12 Triggering Actions by the Central Components of the System Management Solution (S)
is blocked by OPS.1.1.7.A13 Commitment to the Use of Designated Interfaces for System Management (S)
is blocked by OPS.1.1.7.A15 Status Monitoring, Logging, and Alerting of Relevant Events in the System Management Solution and the Systems to be Managed (S)
is blocked by OPS.1.1.7.A17 Control of System Management Communication (S)
is blocked by OPS.1.1.7.A22 Integration of System Management into Automated Detection Systems (S)
is blocked by OPS.1.1.7.A24 Automated Checking of Security-Relevant Configurations by Suitable Detection Systems (H)
is blocked by OPS.1.1.7.A25 Logging and Regulation of System Management Meetings (H)
is blocked by OPS.1.2.2.A10 Drawing Up a Policy for Using Archive Systems [IT Operation Department] (S)
is blocked by OPS.1.2.2.A11 Instruction Regarding the Administration and Operation of the Archive System [IT Operation Department, User] (S)
is blocked by OPS.1.2.4.A1 Rules on Teleworking [Supervisor, Human Resources Department] (B)
is blocked by OPS.1.2.4.A2 Security-Related Requirements for Teleworking Computers (B)
is blocked by OPS.1.2.4.A7 Regulations on Using Communication Capabilities for Teleworking [IT Operation Department, Employee] (S)
is blocked by OPS.1.2.5.A2 Establishing a Secure Connection for Remote Maintenance of Clients [User] (B)
is blocked by OPS.1.2.5.A3 Securing Interfaces for Remote Maintenance (B)
is blocked by OPS.1.2.5.A24 Securing Integrated Remote Maintenance Systems (S)
is blocked by DER.1.A4 Raising Employee Awareness [Supervisor, User, Employee] (B)
is blocked by DER.1.A7 Training of Responsible Persons [Supervisor] (S)
is blocked by DER.1.A14 Evaluation of Log Data by Specialised Personnel (H)
is blocked by DER.2.2.A2 Drawing Up a Guide for Initial Measures in Case of an IT Security Incident (B)
is blocked by DER.2.2.A3 Pre-Selection of Forensic Service Providers (B)
is blocked by DER.2.2.A5 Drawing Up a Guide to Securing Evidence in Case of IT Security Incidents (S)
is blocked by DER.2.2.A6 Training Personnel on Forensic Securing of Evidence (S)
is blocked by DER.2.2.A7 Selecting Tools for Forensics (S)
is blocked by DER.2.2.A8 Selection and Order of Evidence to Be Secured [Process Owner] (S)
is blocked by DER.2.2.A9 Pre-Selection of Forensically Relevant Data [Process Owner] (S)
is blocked by DER.2.2.A10 Forensic Securing of IT Evidence [Process Owner] (S)
is blocked by DER.2.2.A11 Documentation of Securing Evidence [Process Owner] (S)
is blocked by DER.2.2.A13 Framework Agreements with External Service Providers (H)
is blocked by DER.2.2.A14 Specifying Standard Procedures for Securing Evidence (H)
is blocked by DER.2.2.A15 Conducting Drills on Securing Evidence (H)
is blocked by DER.2.3.A6 Returning to Production Operations (B)
is blocked by APP.1.4.A16 Mobile Application Management (H)
is blocked by APP.2.1.A1 Creation of a Security Policy for Directory Services (B)
is blocked by APP.2.1.A3 Setting Up Access Authorisations for Directory Services [Process Owner] (B)
is blocked by APP.2.1.A5 Secure Configuration and Configuration Changes in Directory Services (B)
is blocked by APP.2.1.A6 Secure Operation of Directory Services (B)
is blocked by APP.2.1.A12 Monitoring Directory Services (S)
is blocked by APP.2.1.A13 Protection of Communications with Directory Services (S)
is blocked by APP.2.1.A14 Orderly Decommissioning of a Directory Service [Process Owner] (S)
is blocked by APP.2.1.A15 Migration of Directory Services (S)
is blocked by APP.2.2.A2 Planning of Active Directory Administration [Process Owner] (B)
is blocked by APP.2.2.A7 Implementation of Secure Administration Methods for Active Directory [Process Owner] (B)
is blocked by APP.2.2.A11 Monitoring Active Directory Infrastructure (S)
is blocked by APP.2.2.A14 Use of Dedicated Privileged Administration Systems (H)
is blocked by APP.2.2.A15 Separation of Administration and Production Environments (H)
is blocked by APP.3.1.A1 Authentication (B)
is blocked by APP.3.1.A7 Protection Against Unauthorised Automated Use (B)
is blocked by APP.3.1.A12 Secure Configuration (S)
is blocked by APP.3.2.A8 Planning the Use of a Web Server (S)
is blocked by APP.3.2.A9 Defining a Web Server Security Policy (S)
is blocked by APP.3.4.A12 Training Samba Server Administrators (S)
is blocked by APP.3.6.A4 Secure Basic Configuration of a DNS Server (B)
is blocked by APP.4.2.A1 Secure Configuration of the SAP Java Stack (B)
is blocked by APP.4.2.A2 Secure Configuration of the SAP Java Stack (B)
is blocked by APP.4.2.A4 Protection of Standard SAP User IDs (B)
is blocked by APP.4.2.A5 Configuration and Protection of SAP User Administration (B)
is blocked by APP.4.2.A6 Creation and Implementation of a User and Access Control Policy [Department, Developer] (B)
is blocked by APP.4.2.A7 Protection of SAP Databases (B)
is blocked by APP.4.2.A8 Protection of the SAP RFC Interface (B)
is blocked by APP.4.2.A11 Secure Installation of an SAP ERP System (S)
is blocked by APP.4.2.A27 Auditing the SAP ERP System [Department] (S)
is blocked by APP.4.2.A30 Implementation of Continuous Monitoring of Security Settings (S)
is blocked by APP.4.2.A32 Real-Time Detection and Alerts for Irregular Processes (H)
is blocked by APP.4.3.A19 Protection Against Malicious Database Scripts [Developer] (S)
is blocked by APP.5.2.A10 Secure Configuration of Outlook (S)
is blocked by APP.6.A4 Regulation of Software Installation and Configuration [Process Owner] (B)
is blocked by APP.6.A5 Secure Installation of Software (B)
is blocked by APP.6.A10 Establishing a Security Policy for Software Use (S)
is blocked by SYS.1.1.A11 Defining a Security Policy for Servers (S)
is blocked by SYS.1.1.A25 Controlled Decommissioning of a Server (S)
is blocked by SYS.1.1.A37 Encapsulation of Security-Critical Applications and Operating System Components (S)
is blocked by SYS.1.2.2.A2 Secure Installation of Windows Server 2012 (B)
is blocked by SYS.1.2.2.A3 Secure Administration of Windows Server 2012 (B)
is blocked by SYS.1.2.2.A4 Secure Configuration of Windows Server 2012 (S)
is blocked by SYS.1.2.2.A6 Secure Authentication and Authorisation in Windows Server 2012 (S)
is blocked by SYS.1.3.A2 Careful Allocation of IDs (B)
is blocked by SYS.1.3.A6 Managing Users and Groups (S)
is blocked by SYS.1.6.A1 Planning Container Use (B)
is blocked by SYS.1.6.A2 Container Management Planning (B)
is blocked by SYS.1.6.A3 Secure Use of Containerised IT Systems (B)
is blocked by SYS.1.6.A4 Planning the Provision and Distribution of Images (B)
is blocked by SYS.1.6.A5 Separation of Administration and Access Networks for Containers (B)
is blocked by SYS.1.6.A6 Use of Secure Images (B)
is blocked by SYS.1.6.A9 Suitability for Container Operation (S)
is blocked by SYS.1.6.A10 Policy for Images and Container Operation (S)
is blocked by SYS.1.6.A12 Distribution of Secure Images (S)
is blocked by SYS.1.6.A16 Administrative Remote Access to Containers (S)
is blocked by SYS.1.6.A17 Running Containers Without Privileges (S)
is blocked by SYS.1.6.A18 Application Services Accounts (S)
is blocked by SYS.1.6.A21 Extended Security Policies (H)
is blocked by SYS.1.6.A25 High Availability of Containerised Applications (H)
is blocked by SYS.1.7.A4 Training z/OS Operators [Supervisor] (B)
is blocked by SYS.1.7.A9 Multi-Client Capability in z/OS (B)
is blocked by SYS.1.7.A14 Reporting on the Secure Operation of z/OS (S)
is blocked by SYS.1.7.A16 Monitoring of z/OS Systems (S)
is blocked by SYS.1.7.A17 Synchronisation of z/OS Passwords and RACF Commands (S)
is blocked by SYS.1.7.A18 Role Concept for z/OS Systems (S)
is blocked by SYS.1.7.A21 Protection of the Startup Process of z/OS Systems (S)
is blocked by SYS.1.7.A22 Protection of the Operating Functions of z/OS (S)
is blocked by SYS.1.7.A23 Protection of z/VM (S)
is blocked by SYS.1.7.A25 Stipulation of z/OS System Capacity (S)
is blocked by SYS.1.7.A27 Character Set Conversion in z/OS Systems (S)
is blocked by SYS.1.7.A31 Contingency Planning for z/OS Systems (S)
is blocked by SYS.1.7.A32 Determining Standards for z/OS System Definitions (H)
is blocked by SYS.1.7.A33 Separation of Test and Production Systems in z/OS (H)
is blocked by SYS.2.1.A8 Protecting the Boot Process (B)
is blocked by SYS.2.1.A9 Defining a Security Policy for Clients (S)
is blocked by SYS.2.1.A10 Planning the Use of Clients (S)
is blocked by SYS.2.1.A11 Procurement of Clients (S)
is blocked by SYS.2.1.A23 Preferences for Client-Server Services (S)
is blocked by SYS.2.1.A24 Dealing with External and Removable Media (S)
is blocked by SYS.2.1.A34 Encapsulation of Security-Critical Applications and Operating System Components (H)
is blocked by SYS.2.1.A43 Local Security Policy for Clients (S)
is blocked by SYS.2.1.A44 Client Security Policy Management (S)
is blocked by SYS.2.1.A30 Setting Up a Reference Environment for Clients (H)
is blocked by SYS.2.1.A33 Using Execution Control (H)
is blocked by SYS.2.1.A39 Stable and Uninterruptible Power Supply [Building Services] (H)
is blocked by SYS.2.1.A41 Use of Quotas for Local Media (H)
is blocked by SYS.2.1.A45 Extended Logging (H)
is blocked by SYS.2.2.2.A1 Selecting a Suitable Windows 8.1 Version (B)
is blocked by SYS.2.2.2.A5 Local Security Policy for Windows 8.1 (S)
is blocked by SYS.2.2.2.A7 Use of Windows User Account Control (S)
is blocked by SYS.2.2.2.A10 Integration of Online Accounts into the Operating System [User] (S)
is blocked by SYS.2.2.2.A11 Configuration of Synchronisation Mechanisms in Windows 8.1 (S)
is blocked by SYS.2.2.2.A16 Use of Windows PowerShell (H)
is blocked by SYS.2.2.2.A17 Secure Use of the Maintenance Centre (H)
is blocked by SYS.2.2.2.A19 Use of Login Information Management (H)
is blocked by SYS.2.2.2.A20 Security During Remote Access Using RDP (H)
is blocked by SYS.2.2.2.A21 Use of File and Registry Virtualisation (H)
is blocked by SYS.2.3.A1 Authentication of Administrators and Users [User] (B)
is blocked by SYS.2.3.A7 Restrictive Granting of Access Rights for Files and Directories (S)
is blocked by SYS.2.3.A8 Use of Techniques to Restrict the Rights of Applications (S)
is blocked by SYS.2.3.A9 Secure Use of Passwords in the Command Line [User] (S)
is blocked by SYS.2.3.A12 Secure Use of Appliances (S)
is blocked by SYS.2.3.A17 Additional Prevention of Further Intrusion When Vulnerabilities Are Exploited (H)
is blocked by SYS.2.3.A18 Additional Kernel Protection (H)
is blocked by SYS.2.3.A20 Disabling Critical SysRq Features (H)
is blocked by SYS.2.4.A1 Planning the Secure Use of macOS (B)
is blocked by SYS.2.4.A3 Use of Suitable User Accounts [User] (B)
is blocked by SYS.2.4.A12 Firmware Password and Boot Protection on Macs [User] (H)
is blocked by SYS.3.1.A7 Orderly Issue and Return of Laptops [User] (S)
is blocked by SYS.3.1.A16 Central Administration and Administration of Laptops (H)
is blocked by SYS.3.2.1.A1 Definition of a Policy for Using Smartphones and Tablets (B)
is blocked by SYS.3.2.1.A3 Secure Basic Configuration for Mobile Devices (B)
is blocked by SYS.3.2.1.A28 Using the Filter Option for Websites (S)
is blocked by SYS.3.2.1.A32 MDM Usage (S)
is blocked by SYS.3.2.1.A33 Selection and Installation of Security Apps (S)
is blocked by SYS.3.2.1.A25 Use of Separate Work Environments (H)
is blocked by SYS.3.2.2.A4 Distribution of the Basic Configuration to Mobile Devices (B)
is blocked by SYS.3.2.2.A5 Installing the MDM Client (B)
is blocked by SYS.3.2.2.A20 Regular Review of the MDM System (B)
is blocked by SYS.3.2.2.A6 Logging the Device Status (S)
is blocked by SYS.3.2.2.A7 Installation of Apps (S)
is blocked by SYS.3.2.2.A21 Administration of Certificates (S)
is blocked by SYS.3.2.2.A17 Monitoring the Use of Mobile Devices (H)
is blocked by SYS.3.3.A1 Security Guidelines and Rules for the Use of Mobile Phones (B)
is blocked by SYS.3.3.A3 Raising Employee Awareness and Providing Training on the Use of Mobile Telephones (B)
is blocked by SYS.3.3.A6 Mobile Telephone Updates [User] (S)
is blocked by SYS.4.1.A5 Drawing Up User Guidelines for Handling Printers, Copiers, and All-in-One Devices [Chief Information Security Officer (CISO)] (S)
is blocked by SYS.4.3.A1 Rules for Handling Embedded Systems (B)
is blocked by SYS.4.3.A10 Recovery of Embedded Systems (S)
is blocked by SYS.4.3.A16 Tamper Protection for Embedded Systems [Planner] (H)
is blocked by IND.2.1.A6 Network Segmentation [OT Operations, Planner] (B)
is blocked by IND.2.1.A11 Maintenance of ICS Components [Employee, OT Operations, Maintenance Personnel] (S)
is blocked by IND.3.2.A4 Binding Regulation of OT Remote Maintenance by Third Parties (B)
is blocked by IND.3.2.A10 Observation and Control of OT Remote Maintenance Sessions (S) [Employee]
is blocked by IND.3.2.A14 Technical Control of Remote Maintenance Sessions (H) [Planner, Data Protection Officer]
is blocked by NET.1.2.A18 Training Measures for Management Solutions [Supervisor] (S)
is blocked by NET.1.2.A24 Central Configuration Management for Network Components (S)
is blocked by NET.2.1.A5 Secure Basic Configuration of Access Points (B)
is blocked by NET.2.1.A6 Secure Configuration of WLAN Infrastructure (B)
is blocked by NET.2.1.A9 Secure Connection of WLANs to a LAN [Planner] (S)
is blocked by NET.2.1.A12 Use of a Suitable WLAN Management Solution (S)
is blocked by NET.2.1.A15 Using a VPN to Secure WLANs (H)
is blocked by NET.2.2.A1 Creating a User Policy for WLAN [IT Operation Department] (B)
is blocked by NET.2.2.A2 Awareness and Training of WLAN Users [Supervisor, IT Operation Department] (B)
is blocked by NET.3.1.A4 Protection of Administration Interfaces (B)
is blocked by NET.3.1.A5 Protection Against Fragmentation Attacks (B)
is blocked by NET.3.1.A11 Procurement of a Router or Switch (S)
is blocked by NET.3.1.A12 Drawing Up a Configuration Checklist for Routers and Switches (S)
is blocked by NET.3.1.A13 Administration Using a Separate Management Network (S)
is blocked by NET.3.1.A23 Audits and Penetration Tests (S)
is blocked by NET.3.1.A24 Use of Network Access Controls (H)
is blocked by NET.3.2.A9 Logging (B)
is blocked by NET.3.2.A22 Secure Time Synchronisation (S)
is blocked by NET.4.1.A5 Logging for Telecommunications Systems (B)
is blocked by NET.4.1.A6 Creating a Security Policy for Telecommunications Systems [IT Operation Department] (S)
is blocked by NET.4.1.A8 Limitation and Blocking of Unnecessary or Security-Critical Features (S)
is blocked by NET.4.1.A9 Training on the Secure Use of Telecommunications Systems [Supervisor] (S)
is blocked by NET.4.2.A5 Secure Configuration of VoIP Middleware (B)
is blocked by NET.4.2.A7 Drawing up a Security Policy for VoIP (S)
is blocked by NET.4.3.A2 Information for Employees on Using Fax Machines (B)
is blocked by NET.4.3.A3 Secure Operation of a Fax Server [IT Operation Department] (B)
is blocked by NET.4.3.A4 Drawing Up a Security Policy for Fax Use (S)
is blocked by NET.4.3.A11 Preventing Fax Machine Overload [IT Operation Department] (H)
is blocked by NET.4.3.A14 Producing Copies of Incoming Fax Messages [User] (H)
is blocked by INF.2.A11 Automatic Monitoring of Infrastructure [Building Services] (B)
is blocked by INF.2.A13 Planning and Installation of Alarm Systems [Building Services] (S)
is blocked by INF.2.A28 Use of Higher-Level Alarm Systems [Planner] (H)
is blocked by INF.9.A2 Regulations for Mobile Workplaces [Human Resources Department] (B)
is blocked by INF.9.A4 Working with External IT Systems [IT Operation Department, Employee] (B)
is blocked by INF.9.A8 Security Policy for Mobile Workplaces [IT Operation Department] (S)
is blocked by INF.9.A12 Using a Screen Protector [Employee] (S)
is blocked by INF.9.A10 Use of Anti-Theft Devices [Employee] (H)