For various reasons, people may deny having performed certain acts, for example because these acts violate instructions, security policies or even laws. However, they could also deny having received a notification, for example because they have forgotten an appointment or deadline. In the area of information security, the binding nature is therefore often pointed out, a characteristic which is used to ensure that acts that actions taken cannot be denied without justification. In this context, the term "non-repudiation" is used.
In communications, an additional distinction is made as to whether a communications subscriber denies the receipt of messages (repudiation of receipt) or the dispatch of messages (repudiation of origin). Denying the receipt of messages may be relevant, amongst other things, for financial transactions, e.g. if someone denies having received an invoice within the time stipulated. A communications subscriber can also repudiate transmission of a message, e.g. deny having sent an order. Having sent or received a message can be denied in the case of post just as with fax or e-mail.
Example:
An electronic order is placed for an urgently needed spare part. After a week, a complaint about non-delivery of the part was lodged. In the meantime, high costs are incurred by the loss of production. The supplier denies ever having received such an order.
Propojené úkoly
Vazby
Typ vazby
Úkol
is blocked by
ORP.2.A5 Confidentiality Agreements for Third-Party Personnel (B)
is blocked by
ORP.3.A1 Top Management Awareness of Information Security Issues [Supervisor, Top Management] (B)
is blocked by
ORP.3.A3 Training Employees in the Secure Handling of IT [Supervisor, Human Resources Department, IT Operation Department] (B)
is blocked by
ORP.3.A7 Training in the IT-Grundschutz Methodology (S)
is blocked by
ORP.3.A9 Special Training for Exposed Persons and Organisations (H)
is blocked by
ORP.4.A4 Distribution of Tasks and Separation of Roles [IT Operation Department] (B)
is blocked by
ORP.4.A9 Identification and Authentication [IT Operation Department] (B)
is blocked by
ORP.4.A14 Checking the Effectiveness of User Separation in IT Systems or Applications [IT Operation Department] (S)
is blocked by
ORP.4.A24 Dual Control for Administrative Activities [IT Operation Department] (H)
is blocked by
OPS.1.1.2.A4 Termination of IT Administration Duties [Human Resources Department] (B)
is blocked by
OPS.1.1.2.A5 Verifying Administrative Tasks (B)
is blocked by
OPS.1.1.2.A6 Protecting Administrative Tasks (B)
is blocked by
OPS.1.1.2.A11 Documentation of IT Administration Tasks (S)
is blocked by
OPS.1.1.2.A17 Dual Control in IT Administration (H)
is blocked by
OPS.1.1.2.A18 Consistent Logging of Administrative Activities (H)
is blocked by
OPS.1.1.5.A3 Configuring Logging at the System and Network Level (B)
is blocked by
OPS.1.1.5.A4 Time Synchronisation of IT Systems (B)
is blocked by
OPS.1.1.5.A6 Basic Structure of a Centralised Logging Infrastructure (S)
is blocked by
OPS.1.1.5.A11 Increasing the Scope of Logging (H)
is blocked by
OPS.1.1.7.A15 Status Monitoring, Logging, and Alerting of Relevant Events in the System Management Solution and the Systems to be Managed (S)
is blocked by
OPS.1.1.7.A25 Logging and Regulation of System Management Meetings (H)
is blocked by
OPS.1.2.2.A1 Determining Parameters for Electronic Archiving (B)
is blocked by
OPS.1.2.2.A21 Transfer of Paper-based Data to Electronic Archives (H)
is blocked by
OPS.1.2.5.A10 Management of Remote Maintenance Tools (S)
is blocked by
OPS.1.2.5.A22 Redundant Communication Links (H)
is blocked by
DER.1.A15 Central Detection and Real-Time Examination of Event Messages (H)
is blocked by
DER.2.2.A8 Selection and Order of Evidence to Be Secured [Process Owner] (S)
is blocked by
DER.2.2.A9 Pre-Selection of Forensically Relevant Data [Process Owner] (S)
is blocked by
DER.2.2.A10 Forensic Securing of IT Evidence [Process Owner] (S)
is blocked by
DER.2.2.A11 Documentation of Securing Evidence [Process Owner] (S)
is blocked by
DER.2.2.A12 Secure Storage of Original Storage Media and Evidence [Process Owner] (S)
is blocked by
DER.2.2.A14 Specifying Standard Procedures for Securing Evidence (H)
is blocked by
DER.2.2.A15 Conducting Drills on Securing Evidence (H)
is blocked by
APP.1.1.A14 Protection Against Subsequent Changes to Documents [User] (S)
is blocked by
APP.1.1.A15 Use of Encryption and Digital Signatures (H)
is blocked by
APP.2.1.A12 Monitoring Directory Services (S)
is blocked by
APP.2.2.A5 Hardening Active Directory (B)
is blocked by
APP.2.2.A6 Maintaining the Operational Continuity of Active Directory (B)
is blocked by
APP.2.2.A11 Monitoring Active Directory Infrastructure (S)
is blocked by
APP.2.2.A12 Backups for Domain Controllers (S)
is blocked by
APP.2.2.A14 Use of Dedicated Privileged Administration Systems (H)
is blocked by
APP.2.2.A15 Separation of Administration and Production Environments (H)
is blocked by
APP.4.4.A2 Planning Automation with CI/CD (B)
is blocked by
APP.4.4.A3 Identity and Access Management for Kubernetes (B)
is blocked by
SYS.1.1.A10 Logging (B)
is blocked by
SYS.1.1.A21 Operational Documentation for Servers (S)
is blocked by
SYS.1.2.2.A2 Secure Installation of Windows Server 2012 (B)
is blocked by
SYS.1.2.2.A3 Secure Administration of Windows Server 2012 (B)
is blocked by
SYS.1.2.2.A4 Secure Configuration of Windows Server 2012 (S)
is blocked by
SYS.1.2.2.A5 Protection Against Malware on Windows Server 2012 (S)
is blocked by
SYS.1.2.2.A6 Secure Authentication and Authorisation in Windows Server 2012 (S)
is blocked by
SYS.1.2.2.A8 Protection of System Integrity (S)
is blocked by
SYS.1.2.2.A14 Shutting Down Encrypted Servers and Virtual Machines (H)
is blocked by
SYS.1.5.A6 Logging in the Virtual Infrastructure (B)
is blocked by
SYS.1.5.A7 Time Synchronisation in Virtual IT Systems (B)
is blocked by
SYS.1.6.A3 Secure Use of Containerised IT Systems (B)
is blocked by
SYS.1.6.A6 Use of Secure Images (B)
is blocked by
SYS.1.6.A7 Persistence of Container Logging Data (B)
is blocked by
SYS.1.6.A10 Policy for Images and Container Operation (S)
is blocked by
SYS.1.6.A12 Distribution of Secure Images (S)
is blocked by
SYS.1.6.A13 Release of Images (S)
is blocked by
SYS.1.6.A14 Updating Images (S)
is blocked by
SYS.1.6.A20 Protection of Configuration Data (S)
is blocked by
SYS.1.6.A22 Provision for Investigations (H)
is blocked by
SYS.1.7.A1 Use of Restrictive z/OS IDs (B)
is blocked by
SYS.1.7.A2 Protection of Security-Critical z/OS Utilities (B)
is blocked by
SYS.1.7.A7 Restrictive Authorisation in z/OS (B)
is blocked by
SYS.1.7.A8 Use of the z/OS Security System RACF (B)
is blocked by
SYS.1.7.A9 Multi-Client Capability in z/OS (B)
is blocked by
SYS.1.7.A11 Protection of Session Data (B)
is blocked by
SYS.1.7.A14 Reporting on the Secure Operation of z/OS (S)
is blocked by
SYS.1.7.A16 Monitoring of z/OS Systems (S)
is blocked by
SYS.1.7.A19 Protection of z/OS Transaction Monitors (S)
is blocked by
SYS.1.7.A22 Protection of the Operating Functions of z/OS (S)
is blocked by
SYS.1.7.A23 Protection of z/VM (S)
is blocked by
SYS.1.7.A24 Administration of Storage Media in z/OS Systems (S)
is blocked by
SYS.1.7.A26 Workload Management for z/OS Systems (S)
is blocked by
SYS.1.7.A29 Protection of Unix System Services on z/OS Systems (S)
is blocked by
SYS.1.7.A30 Protection of the z/OS Trace Functions (S)
is blocked by
SYS.1.7.A33 Separation of Test and Production Systems in z/OS (H)
is blocked by
SYS.1.7.A34 Batch Job Planning for z/OS Systems (H)
is blocked by
SYS.1.7.A35 Use of RACF Exits (H)
is blocked by
SYS.1.7.A36 Internal Communication Between Operating Systems (H)
is blocked by
SYS.2.2.3.A24 Activation of the Last Access Time Stamp (H)
is blocked by
SYS.2.2.3.A25 Handling Remote Access Features of Connected User Experience and Telemetry (H)
is blocked by
SYS.3.2.2.A6 Logging the Device Status (S)
is blocked by
SYS.3.2.2.A17 Monitoring the Use of Mobile Devices (H)
is blocked by
SYS.3.2.3.A1 Strategy for Using iOS Devices (B)
is blocked by
SYS.3.2.3.A7 Preventing Unauthorised Deletion of Configuration Profiles (B)
is blocked by
SYS.3.2.3.A12 Using Apple IDs (S)
is blocked by
SYS.3.2.3.A13 Using the “iOS Restrictions” Configuration Option (S)
is blocked by
SYS.4.3.A3 Logging Security-Relevant Events in Embedded Systems (B)
is blocked by
IND.1.A18 Logging [OT Operations)] (B)
is blocked by
IND.1.A19 Creating Backups [Employee, OT Operations] (B)
is blocked by
IND.1.A6 Change Management in OT Operations (S)
is blocked by
IND.1.A7 Establishing Comprehensive Authorisation Management Across OT and Office IT (S)
is blocked by
IND.1.A10 Monitoring, Logging, and Detection [OT Operations] (S)
is blocked by
IND.1.A20 System Documentation [Employee, OT Operations] (S)
is blocked by
IND.1.A22 Central System Logging and System Monitoring [OT Operations] (S)
is blocked by
IND.2.1.A17 Use of Secure Protocols for the Transmission of Measurement and Control Data [OT Operations] (S)
is blocked by
IND.2.7.A4 Making Information Security an Integral Part of Functional Safety Management [ICS Information Security Officer] (S)
is blocked by
IND.3.2.A7 Technical Decoupling of Access (S) [Planner]
is blocked by
IND.3.2.A9 Secure Exchange of Files Involved in OT Remote Maintenance (S) [Planner, IT Operation Department]
is blocked by
IND.3.2.A10 Observation and Control of OT Remote Maintenance Sessions (S) [Employee]
is blocked by
IND.3.2.A13 Logging of Contents of Remote Maintenance Access in OT (H) [Planner, Data Protection Officer]
is blocked by
IND.3.2.A14 Technical Control of Remote Maintenance Sessions (H) [Planner, Data Protection Officer]
is blocked by
NET.1.2.A7 Basic Logging of Events (B)
is blocked by
NET.1.2.A8 Time Synchronisation (B)
is blocked by
NET.1.2.A26 Alarming and Logging (S)
is blocked by
NET.3.1.A6 Emergency Access to Routers and Switches (B)
is blocked by
NET.3.1.A8 Regular Backups (B)
is blocked by
NET.3.1.A12 Drawing Up a Configuration Checklist for Routers and Switches (S)
is blocked by
NET.3.1.A26 High Availability (H)
is blocked by
INF.12.A3 Proper Installation [IT Operation Department, Building Services] (B)
is blocked by
INF.12.A8 Removing and Disabling Cables No Longer Required [IT Operation Department, Building Services] (S)
is blocked by
INF.12.A10 Documentation and Labelling of Cabling [IT Operation Department, Building Services] (S)
is blocked by
INF.13.A21 Logging in TBM (S)
is blocked by
INF.14.A26 Logging in BACS (S)