|
is blocked by
|
ORP.1.A1 Specification of Responsibilities and Provisions [Top Management] |
|
is blocked by
|
ORP.1.A2 Assigning Responsibilities [Top Management] (B) |
|
is blocked by
|
ORP.1.A15 Contact Persons for Information Security Issues (B) |
|
is blocked by
|
ORP.1.A13 Security During Relocation [IT Operation Department, Building Services] (S) |
|
is blocked by
|
ORP.1.A16 Policy for Secure IT Use [User] (S) |
|
is blocked by
|
ORP.2.A1 Well-Regulated Orientation of New Employees [Supervisor] (B) |
|
is blocked by
|
ORP.2.A2 Regulated Procedure for Employees Leaving the Organisation [Supervisor, IT Operation Department] (B) |
|
is blocked by
|
ORP.2.A4 Defining Procedures for Using Third-Party Personnel (B) |
|
is blocked by
|
ORP.2.A5 Confidentiality Agreements for Third-Party Personnel (B) |
|
is blocked by
|
ORP.2.A14 Tasks and Responsibilities of Employees [Supervisor] (B) |
|
is blocked by
|
ORP.2.A15 Qualifications of Personnel [Supervisor] (B) |
|
is blocked by
|
ORP.2.A7 Verifying the Trustworthiness of Employees (S) |
|
is blocked by
|
ORP.3.A1 Top Management Awareness of Information Security Issues [Supervisor, Top Management] (B) |
|
is blocked by
|
ORP.3.A3 Training Employees in the Secure Handling of IT [Supervisor, Human Resources Department, IT Operation Department] (B) |
|
is blocked by
|
ORP.3.A9 Special Training for Exposed Persons and Organisations (H) |
|
is blocked by
|
ORP.4.A9 Identification and Authentication [IT Operation Department] (B) |
|
is blocked by
|
CON.1.A2 Backups When Using Cryptographic Methods [IT Operation Department] (B) |
|
is blocked by
|
CON.1.A6 Identifying the Need for Cryptographic Methods and Products [IT Operation Department, Process Owner] (S) |
|
is blocked by
|
CON.1.A13 Operating System Security Requirements When Using Crypto Modules (H) |
|
is blocked by
|
CON.3.A12 Secure Storage of Backup Media [IT Operation Department] (B) |
|
is blocked by
|
CON.3.A13 Using Cryptographic Methods for Backups [IT Operation Department] (H) |
|
is blocked by
|
CON.7.A3 Identification of Country-Specific Regulations, Travel Conditions and Environmental Conditions [Human Resource Department] |
|
is blocked by
|
CON.7.A10 Encryption of Portable IT Systems and Storage Media [User, IT Operation Department] (B) |
|
is blocked by
|
CON.7.A13 Transporting Necessary Data and Storage Media [User] (S) |
|
is blocked by
|
CON.7.A14 Cryptographically Secured E-Mail Communication [User, IT Operation Department] (S) |
|
is blocked by
|
CON.7.A16 Protecting Integrity Using Checksums or Digital Signatures [User] (H) |
|
is blocked by
|
CON.8.A5 Secure System Design (B) |
|
is blocked by
|
CON.8.A11 Drawing Up a Policy for Software Development (S) |
|
is blocked by
|
CON.8.A16 Appropriate Control of Software Development (S) |
|
is blocked by
|
CON.8.A17 Selection of Trusted Development Tools (H) |
|
is blocked by
|
OPS.1.1.3.A10 Assuring the Integrity and Authenticity of Software Packages (S) |
|
is blocked by
|
OPS.1.1.4.A1 Creating a Malware Protection Concept (B) |
|
is blocked by
|
OPS.1.1.4.A2 Using System-Specific Protection Mechanisms (B) |
|
is blocked by
|
OPS.1.1.4.A3 Selection of a Virus Protection Program (B) |
|
is blocked by
|
OPS.1.1.4.A5 Operation and Configuration of Virus Protection Programs (B) |
|
is blocked by
|
OPS.1.1.4.A6 Regular Updating of Virus Protection Programs and Signatures (B) |
|
is blocked by
|
OPS.1.1.4.A7 User Awareness and Obligations [User] (B) |
|
is blocked by
|
OPS.1.1.4.A9 Reporting Malware Infections [User] (S) |
|
is blocked by
|
OPS.1.1.4.A10 Using Special Analysis Environments (H) |
|
is blocked by
|
OPS.1.1.4.A11 Using Several Scan Engines (H) |
|
is blocked by
|
OPS.1.1.4.A12 Using Storage Media Locks (H) |
|
is blocked by
|
OPS.1.1.4.A13 Handling Untrusted Files (H) |
|
is blocked by
|
OPS.1.1.4.A14 Selecting and Using Cyber Security Products to Thwart Targeted Attacks (H) |
|
is blocked by
|
OPS.1.1.5.A5 Complying with Legal Framework Conditions (B) |
|
is blocked by
|
OPS.1.1.5.A9 Providing Log Data for Assessment (S) |
|
is blocked by
|
OPS.1.1.5.A12 Encryption of Log Data (H) |
|
is blocked by
|
OPS.1.1.6.A13 Separating the Test Environment from the Production Environment (S) |
|
is blocked by
|
OPS.1.2.2.A6 Protection of the Integrity of the Index Database of Archive Systems [IT Operation Department] (B) |
|
is blocked by
|
OPS.1.2.2.A7 Regular Backups of System and Archive Data [IT Operation Department] (B) |
|
is blocked by
|
OPS.1.2.2.A9 Selection of Suitable Data Formats for Archiving Documents [IT Operation Department] (B) |
|
is blocked by
|
OPS.1.2.2.A12 Monitoring of Storage Resources for Archive Media [IT Operation Department] (S) |
|
is blocked by
|
OPS.1.2.2.A15 Regular Processing of Cryptographically Secured Data During Archiving [IT Operation Department] (S) |
|
is blocked by
|
OPS.1.2.2.A16 Regular Renewal of Technical Archive System Components [IT Operation Department] (S) |
|
is blocked by
|
OPS.1.2.2.A20 Appropriate Use of Cryptographic Methods for Archiving [IT Operation Department] (H) |
|
is blocked by
|
OPS.1.2.4.A1 Rules on Teleworking [Supervisor, Human Resources Department] (B) |
|
is blocked by
|
OPS.1.2.4.A2 Security-Related Requirements for Teleworking Computers (B) |
|
is blocked by
|
OPS.1.2.4.A5 Employee Awareness and Training (B) |
|
is blocked by
|
OPS.1.2.4.A7 Regulations on Using Communication Capabilities for Teleworking [IT Operation Department, Employee] (S) |
|
is blocked by
|
OPS.1.2.4.A8 Flow of Information Between Employees and Organisations [Supervisor, Employee] (S) |
|
is blocked by
|
OPS.1.2.4.A9 Support and Maintenance Concept for Teleworking Locations [IT Operation Department, Employee] (S) |
|
is blocked by
|
OPS.1.2.6.A3 Secure Configuration of NTP Servers (B) |
|
is blocked by
|
OPS.1.2.6.A5 Use of Client-Server Mode for NTP (S) |
|
is blocked by
|
OPS.1.2.6.A7 Secure Configuration of NTP Clients (S) |
|
is blocked by
|
OPS.1.2.6.A8 Use of Secure Time Synchronisation Protocols (S) |
|
is blocked by
|
OPS.1.2.6.A9 Sufficient Availability of Accurate Time Sources (H) |
|
is blocked by
|
OPS.3.1.A3 Creating a Security Concept for the Outsourcing Project (S) |
|
is blocked by
|
OPS.3.1.A4 Definition of Possible Communication Partners [Central Administration, Data Protection Officer] (S) |
|
is blocked by
|
OPS.3.1.A7 Creation of a Client Separation Concept by an Outsourcing Service Provider (S) |
|
is blocked by
|
OPS.3.1.A9 Agreement on the Exchange of Data Between Outsourcing Partners (S) |
|
is blocked by
|
OPS.3.1.A10 Planning and Maintaining Information Security During Ongoing Outsourcing Operations (S) |
|
is blocked by
|
OPS.3.1.A13 Secure Migration in Outsourcing Projects (S) |
|
is blocked by
|
OPS.3.1.A15 Orderly Termination of an Outsourcing Relationship [Top Management] (S) |
|
is blocked by
|
DER.1.A15 Central Detection and Real-Time Examination of Event Messages (H) |
|
is blocked by
|
DER.1.A16 Use of Detection Systems in Accordance with Protection Requirements (H) |
|
is blocked by
|
DER.1.A18 Performance of Regular Integrity Checks (H) |
|
is blocked by
|
DER.2.1.A6 Recovering the Operating Environment After Security Incidents [IT Operation Department] (B) |
|
is blocked by
|
DER.2.1.A10 Limiting the Effects of Security Incidents [BCM Officer, IT Operation Department] (S) |
|
is blocked by
|
DER.2.1.A12 Specification of Where Security Incident Handling Overlaps with Fault Management [BCM Officer] (S) |
|
is blocked by
|
DER.2.1.A13 Integration into Security and Business Continuity Management [BCM Officer] (S) |
|
is blocked by
|
DER.2.1.A14 Escalation Strategy for Security Incidents [IT Operation Department] (S) |
|
is blocked by
|
DER.2.1.A17 Evaluation of Security Incidents (S) |
|
is blocked by
|
DER.2.1.A18 Further Development of Processes Based on Findings from Security Incidents and Industry Developments [Process Owner] (S) |
|
is blocked by
|
DER.2.1.A19 Specifying Priorities for Handling Security Incidents [Top Management] (H) |
|
is blocked by
|
DER.2.1.A20 Creation of a Dedicated Reporting Office for Security Incidents (H) |
|
is blocked by
|
DER.2.1.A21 Assembling a Team of Experts for Handling Security Incidents (H) |
|
is blocked by
|
DER.2.1.A22 Reviewing Management System Efficiency in Handling Security Incidents (H) |
|
is blocked by
|
DER.2.2.A2 Drawing Up a Guide for Initial Measures in Case of an IT Security Incident (B) |
|
is blocked by
|
DER.2.2.A4 Identifying Common Areas Between IT Forensics and Crisis/Business Continuity Management (S) |
|
is blocked by
|
DER.2.2.A5 Drawing Up a Guide to Securing Evidence in Case of IT Security Incidents (S) |
|
is blocked by
|
DER.2.2.A6 Training Personnel on Forensic Securing of Evidence (S) |
|
is blocked by
|
DER.2.2.A7 Selecting Tools for Forensics (S) |
|
is blocked by
|
DER.2.2.A8 Selection and Order of Evidence to Be Secured [Process Owner] (S) |
|
is blocked by
|
DER.2.2.A9 Pre-Selection of Forensically Relevant Data [Process Owner] (S) |
|
is blocked by
|
DER.2.2.A10 Forensic Securing of IT Evidence [Process Owner] (S) |
|
is blocked by
|
DER.2.2.A11 Documentation of Securing Evidence [Process Owner] (S) |
|
is blocked by
|
DER.2.2.A12 Secure Storage of Original Storage Media and Evidence [Process Owner] (S) |
|
is blocked by
|
DER.2.2.A14 Specifying Standard Procedures for Securing Evidence (H) |
|
is blocked by
|
DER.2.2.A15 Conducting Drills on Securing Evidence (H) |
|
is blocked by
|
DER.2.3.A1 Creation of a Management Committee (B) |
|
is blocked by
|
DER.2.3.A2 Deciding on a Cleaning Strategy (B) |
|
is blocked by
|
DER.2.3.A3 Isolation of Affected Network Segments (B) |
|
is blocked by
|
DER.2.3.A4 Blocking and Changing Access Data and Cryptographic Keys (B) |
|
is blocked by
|
DER.2.3.A7 Targeted System Hardening (S) |
|
is blocked by
|
DER.2.3.A8 Establishing Secure, Independent Communication Channels (S) |
|
is blocked by
|
DER.2.3.A9 Hardware Replacement in Affected IT Systems (H) |
|
is blocked by
|
DER.2.3.A10 Modifications to Help Thwart a Repeat Attack (H) |
|
is blocked by
|
DER.3.1.A1 Definition of Responsibilities [Top Management] (B) |
|
is blocked by
|
DER.3.1.A5 Integration into the Information Security Process (S) |
|
is blocked by
|
DER.3.1.A7 Drawing Up an Audit Program (S) |
|
is blocked by
|
DER.3.1.A8 Creation of a Revision List (S) |
|
is blocked by
|
DER.3.1.A9 Selection of an Appropriate Audit Team or Revision Team (S) |
|
is blocked by
|
DER.3.1.A22 Creation of an Audit Report [Audit Team] (S) |
|
is blocked by
|
DER.3.1.A23 Documentation of Revision Results (S) |
|
is blocked by
|
DER.3.1.A24 Conclusion of the Audit or Revision [Audit Team] (S) |
|
is blocked by
|
DER.3.1.A26 Monitoring and Adapting the Audit Program (S) |
|
is blocked by
|
DER.3.1.A27 Storage and Archiving of Documents on Audits and Revisions (S) |
|
is blocked by
|
DER.3.2.A8 Storage of IS Audit Reports (B) |
|
is blocked by
|
DER.3.2.A10 Communication Coordination (S) |
|
is blocked by
|
DER.3.2.A17 Conducting the On-Site Audit [IS Audit Team] (S) |
|
is blocked by
|
DER.3.2.A21 Creation of an IS Audit Report [IS Audit Team] (S) |
|
is blocked by
|
APP.1.1.A17 Awareness of Specific Office Properties (B) |
|
is blocked by
|
APP.1.1.A6 Testing New Versions of Office Products (S) |
|
is blocked by
|
APP.1.1.A12 No Cloud Storage [User] (S) |
|
is blocked by
|
APP.1.1.A14 Protection Against Subsequent Changes to Documents [User] (S) |
|
is blocked by
|
APP.1.1.A15 Use of Encryption and Digital Signatures (H) |
|
is blocked by
|
APP.1.1.A16 Checking Document Integrity (H) |
|
is blocked by
|
APP.2.1.A2 Planning the Use of Directory Services [Data Protection Officer, Process Owner] (B) |
|
is blocked by
|
APP.2.1.A3 Setting Up Access Authorisations for Directory Services [Process Owner] (B) |
|
is blocked by
|
APP.2.1.A6 Secure Operation of Directory Services (B) |
|
is blocked by
|
APP.2.1.A8 Planning of Partitioning and Replication in the Directory Service (S) |
|
is blocked by
|
APP.2.1.A11 Setting Up Access to Directory Services (S) |
|
is blocked by
|
APP.2.1.A13 Protection of Communications with Directory Services (S) |
|
is blocked by
|
APP.2.2.A1 Planning Active Directory [Process Owner] (B) |
|
is blocked by
|
APP.2.2.A2 Planning of Active Directory Administration [Process Owner] (B) |
|
is blocked by
|
APP.2.2.A3 Planning of Group Policy in Windows (B) |
|
is blocked by
|
APP.2.2.A5 Hardening Active Directory (B) |
|
is blocked by
|
APP.2.2.A6 Maintaining the Operational Continuity of Active Directory (B) |
|
is blocked by
|
APP.2.2.A7 Implementation of Secure Administration Methods for Active Directory [Process Owner] (B) |
|
is blocked by
|
APP.2.2.A8 Configuration of Secure Channel in Windows (S) |
|
is blocked by
|
APP.2.2.A9 Authentication Protection When Using Active Directory (S) |
|
is blocked by
|
APP.2.2.A10 Secure Use of DNS for Active Directory (S) |
|
is blocked by
|
APP.3.1.A11 Secure Integration of Background Systems (S) |
|
is blocked by
|
APP.3.2.A1 Secure Web Server Configuration (B) |
|
is blocked by
|
APP.3.2.A2 Protection of Web Server Files (B) |
|
is blocked by
|
APP.3.2.A14 Integrity Checks and Protection Against Malware (S) |
|
is blocked by
|
APP.3.3.A2 Use of RAID Systems (B) |
|
is blocked by
|
APP.3.3.A7 Selecting a File System (S) |
|
is blocked by
|
APP.3.3.A14 Using Error Correction Codes (S) |
|
is blocked by
|
APP.3.4.A4 Avoiding NTFS File Properties on a Samba Server (S) |
|
is blocked by
|
APP.3.4.A5 Secure Configuration of a Samba Server's Access Controls (S) |
|
is blocked by
|
APP.3.4.A15 Encryption of Data Packets in Samba (H) |
|
is blocked by
|
APP.3.6.A4 Secure Basic Configuration of a DNS Server (B) |
|
is blocked by
|
APP.3.6.A17 Use of DNSSEC (S) |
|
is blocked by
|
APP.3.6.A18 Advanced Securing of Zone Transfers (S) |
|
is blocked by
|
APP.4.2.A1 Secure Configuration of the SAP Java Stack (B) |
|
is blocked by
|
APP.4.2.A2 Secure Configuration of the SAP Java Stack (B) |
|
is blocked by
|
APP.4.2.A4 Protection of Standard SAP User IDs (B) |
|
is blocked by
|
APP.4.2.A5 Configuration and Protection of SAP User Administration (B) |
|
is blocked by
|
APP.4.2.A6 Creation and Implementation of a User and Access Control Policy [Department, Developer] (B) |
|
is blocked by
|
APP.4.2.A7 Protection of SAP Databases (B) |
|
is blocked by
|
APP.4.2.A8 Protection of the SAP RFC Interface (B) |
|
is blocked by
|
APP.4.2.A11 Secure Installation of an SAP ERP System (S) |
|
is blocked by
|
APP.4.2.A12 SAP Authorisation Development [Department, Developer] (S) |
|
is blocked by
|
APP.4.2.A22 Protection of the Spool in the SAP ERP System [Developer] (S) |
|
is blocked by
|
APP.4.2.A23 Protection of SAP Background Processing [Developer] (S) |
|
is blocked by
|
APP.4.2.A26 Protection of Customers' Own Code in the SAP ERP System (S) |
|
is blocked by
|
APP.4.2.A29 Setting Up Emergency Users (S) |
|
is blocked by
|
APP.4.2.A30 Implementation of Continuous Monitoring of Security Settings (S) |
|
is blocked by
|
APP.4.2.A32 Real-Time Detection and Alerts for Irregular Processes (H) |
|
is blocked by
|
APP.4.3.A3 Basic Hardening of Database Management Systems (B) |
|
is blocked by
|
APP.4.3.A4 Controlled Creation of New Databases (B) |
|
is blocked by
|
APP.4.3.A9 Backing Up a Database System (B) |
|
is blocked by
|
APP.4.3.A12 Uniform Configuration Standard for Database Management Systems (S) |
|
is blocked by
|
APP.4.3.A19 Protection Against Malicious Database Scripts [Developer] (S) |
|
is blocked by
|
APP.4.3.A20 Regular Audits (S) |
|
is blocked by
|
APP.4.3.A21 Use of Database Security Tools (H) |
|
is blocked by
|
APP.4.3.A23 Archiving (H) |
|
is blocked by
|
APP.4.3.A24 Data Encryption in Databases (H) |
|
is blocked by
|
APP.4.3.A25 Security Audits of Database Systems (H) |
|
is blocked by
|
APP.4.4.A1 Planning the Separation of the Applications (B) |
|
is blocked by
|
APP.4.4.A2 Planning Automation with CI/CD (B) |
|
is blocked by
|
APP.4.4.A3 Identity and Access Management for Kubernetes (B) |
|
is blocked by
|
APP.4.4.A4 Separation of Pods (B) |
|
is blocked by
|
APP.4.4.A7 Separation of Networks for Kubernetes (S) |
|
is blocked by
|
APP.4.4.A8 Securing Configuration Files on Kubernetes (S) |
|
is blocked by
|
APP.4.4.A12 Securing Infrastructure Applications (S) |
|
is blocked by
|
APP.4.4.A13 Automated Configuration Auditing (H) |
|
is blocked by
|
APP.4.4.A14 Use of Dedicated Nodes (H) |
|
is blocked by
|
APP.4.4.A15 Separation of Applications at Node and Cluster Level (H) |
|
is blocked by
|
APP.4.4.A17 Attestation of Nodes (H) |
|
is blocked by
|
APP.4.4.A18 Use of Micro-Segmentation (H) |
|
is blocked by
|
APP.4.4.A20 Encrypted Data Storage for Pods (H) |
|
is blocked by
|
APP.4.4.A21 Regular Restart of Pods (H) |
|
is blocked by
|
APP.4.6.A1 Protecting Reports with Authorisation Checks (B) |
|
is blocked by
|
APP.4.6.A2 Formally Correct Evaluation of Authorisation Checks (B) |
|
is blocked by
|
APP.4.6.A4 No Proprietary Authorisation Checks (B) |
|
is blocked by
|
APP.4.6.A6 Complete Execution of Authorisation Checks (S) |
|
is blocked by
|
APP.4.6.A7 Authorisation Check During Input Processing (S) |
|
is blocked by
|
APP.4.6.A8 Protection Against Unauthorised or Manipulative Access to the File System (S) |
|
is blocked by
|
APP.4.6.A10 Execution of Operating System Commands (S) |
|
is blocked by
|
APP.4.6.A11 Avoiding Planted Malicious Code (S) |
|
is blocked by
|
APP.4.6.A12 Avoiding Generic Module Execution (S) |
|
is blocked by
|
APP.4.6.A13 Avoiding Generic Access to Table Contents (S) |
|
is blocked by
|
APP.4.6.A14 Avoiding Native SQL Statements (S) |
|
is blocked by
|
APP.4.6.A16 No System-Dependent Execution of Functions (S) |
|
is blocked by
|
APP.4.6.A17 No Client-Dependent Execution of Functions (S) |
|
is blocked by
|
APP.4.6.A18 Avoiding Open SQL Injection Vulnerabilities (S) |
|
is blocked by
|
APP.4.6.A19 Protection Against Cross-Site Scripting (S) |
|
is blocked by
|
APP.4.6.A20 No Access to Data from Another Client (S) |
|
is blocked by
|
APP.4.6.A21 Ban on Hidden ABAP Source Code (S) |
|
is blocked by
|
APP.5.2.A9 Secure Configuration of Exchange Servers (S) |
|
is blocked by
|
APP.6.A2 Drawing Up a Requirements Catalogue for Software [Process Owner] (B) |
|
is blocked by
|
APP.6.A6 Consideration of Recommended Security Requirements (S) |
|
is blocked by
|
SYS.1.1.A34 Hard Disk Encryption (H) |
|
is blocked by
|
SYS.1.1.A38 Hardening of the Host System by Means of a Read-Only File System (H) |
|
is blocked by
|
SYS.1.2.2.A2 Secure Installation of Windows Server 2012 (B) |
|
is blocked by
|
SYS.1.2.2.A3 Secure Administration of Windows Server 2012 (B) |
|
is blocked by
|
SYS.1.2.2.A4 Secure Configuration of Windows Server 2012 (S) |
|
is blocked by
|
SYS.1.2.2.A5 Protection Against Malware on Windows Server 2012 (S) |
|
is blocked by
|
SYS.1.2.2.A6 Secure Authentication and Authorisation in Windows Server 2012 (S) |
|
is blocked by
|
SYS.1.2.2.A8 Protection of System Integrity (S) |
|
is blocked by
|
SYS.1.2.2.A11 Attack Detection in Windows Server 2012 (H) |
|
is blocked by
|
SYS.1.2.2.A14 Shutting Down Encrypted Servers and Virtual Machines (H) |
|
is blocked by
|
SYS.1.3.A2 Careful Allocation of IDs (B) |
|
is blocked by
|
SYS.1.3.A14 Preventing Unauthorised Collection of System and User Information (H) |
|
is blocked by
|
SYS.1.5.A5 Protection of Administration Interfaces (B) |
|
is blocked by
|
SYS.1.5.A11 Administration of the Virtualisation Infrastructure Using a Separate Management Network (S) |
|
is blocked by
|
SYS.1.5.A26 Use of a PKI [Planner] (H) |
|
is blocked by
|
SYS.1.6.A1 Planning Container Use (B) |
|
is blocked by
|
SYS.1.6.A2 Container Management Planning (B) |
|
is blocked by
|
SYS.1.6.A3 Secure Use of Containerised IT Systems (B) |
|
is blocked by
|
SYS.1.6.A5 Separation of Administration and Access Networks for Containers (B) |
|
is blocked by
|
SYS.1.6.A6 Use of Secure Images (B) |
|
is blocked by
|
SYS.1.6.A8 Secure Storage of Container Access Data (B) |
|
is blocked by
|
SYS.1.6.A9 Suitability for Container Operation (S) |
|
is blocked by
|
SYS.1.6.A10 Policy for Images and Container Operation (S) |
|
is blocked by
|
SYS.1.6.A12 Distribution of Secure Images (S) |
|
is blocked by
|
SYS.1.6.A13 Release of Images (S) |
|
is blocked by
|
SYS.1.6.A14 Updating Images (S) |
|
is blocked by
|
SYS.1.6.A16 Administrative Remote Access to Containers (S) |
|
is blocked by
|
SYS.1.6.A17 Running Containers Without Privileges (S) |
|
is blocked by
|
SYS.1.6.A18 Application Services Accounts (S) |
|
is blocked by
|
SYS.1.6.A19 Including Data Stores in Containers (S) |
|
is blocked by
|
SYS.1.6.A21 Extended Security Policies (H) |
|
is blocked by
|
SYS.1.6.A23 Container Immutability (H) |
|
is blocked by
|
SYS.1.6.A24 Host-Based Attack Detection (H) |
|
is blocked by
|
SYS.1.6.A25 High Availability of Containerised Applications (H) |
|
is blocked by
|
SYS.1.7.A1 Use of Restrictive z/OS IDs (B) |
|
is blocked by
|
SYS.1.7.A2 Protection of Security-Critical z/OS Utilities (B) |
|
is blocked by
|
SYS.1.7.A3 Maintenance of Z Systems (B) |
|
is blocked by
|
SYS.1.7.A4 Training z/OS Operators [Supervisor] (B) |
|
is blocked by
|
SYS.1.7.A5 Use and Protection of System-Related z/OS Terminals (B) |
|
is blocked by
|
SYS.1.7.A6 Use and Protection of the Remote Support Facility (B) |
|
is blocked by
|
SYS.1.7.A7 Restrictive Authorisation in z/OS (B) |
|
is blocked by
|
SYS.1.7.A8 Use of the z/OS Security System RACF (B) |
|
is blocked by
|
SYS.1.7.A9 Multi-Client Capability in z/OS (B) |
|
is blocked by
|
SYS.1.7.A14 Reporting on the Secure Operation of z/OS (S) |
|
is blocked by
|
SYS.1.7.A16 Monitoring of z/OS Systems (S) |
|
is blocked by
|
SYS.1.7.A19 Protection of z/OS Transaction Monitors (S) |
|
is blocked by
|
SYS.1.7.A22 Protection of the Operating Functions of z/OS (S) |
|
is blocked by
|
SYS.1.7.A23 Protection of z/VM (S) |
|
is blocked by
|
SYS.1.7.A24 Administration of Storage Media in z/OS Systems (S) |
|
is blocked by
|
SYS.1.7.A26 Workload Management for z/OS Systems (S) |
|
is blocked by
|
SYS.1.7.A27 Character Set Conversion in z/OS Systems (S) |
|
is blocked by
|
SYS.1.7.A29 Protection of Unix System Services on z/OS Systems (S) |
|
is blocked by
|
SYS.1.7.A33 Separation of Test and Production Systems in z/OS (H) |
|
is blocked by
|
SYS.1.7.A34 Batch Job Planning for z/OS Systems (H) |
|
is blocked by
|
SYS.1.7.A35 Use of RACF Exits (H) |
|
is blocked by
|
SYS.1.7.A36 Internal Communication Between Operating Systems (H) |
|
is blocked by
|
SYS.1.7.A38 Use of the VTAM Session Management Exit in z/OS (H) |
|
is blocked by
|
SYS.1.8.A23 Use of Encryption for Storage Solutions (H) |
|
is blocked by
|
SYS.1.8.A24 Ensuring the Integrity of the SAN Fabric (H) |
|
is blocked by
|
SYS.2.1.A42 Use of Cloud and Online Functions [User] (B) |
|
is blocked by
|
SYS.2.1.A18 Using Encrypted Communication (S) |
|
is blocked by
|
SYS.2.2.2.A2 Defining a Login Procedure for Windows 8.1 (B) |
|
is blocked by
|
SYS.2.2.2.A3 Use of Virus Protection Programs with Windows 8.1 (B) |
|
is blocked by
|
SYS.2.2.2.A5 Local Security Policy for Windows 8.1 (S) |
|
is blocked by
|
SYS.2.2.2.A7 Use of Windows User Account Control (S) |
|
is blocked by
|
SYS.2.2.2.A9 Data Protection and Data Economy in Windows 8.1 Clients [User] (S) |
|
is blocked by
|
SYS.2.2.2.A12 Secure Central Authentication of Windows Networks (S) |
|
is blocked by
|
SYS.2.2.2.A13 Connection of Windows 8.1 to the Microsoft Store (S) |
|
is blocked by
|
SYS.2.2.2.A14 Application Control Using Software Restriction Policies and AppLocker (H) |
|
is blocked by
|
SYS.2.2.2.A15 File System Encryption Using EFS (H) |
|
is blocked by
|
SYS.2.2.2.A20 Security During Remote Access Using RDP (H) |
|
is blocked by
|
SYS.2.2.2.A21 Use of File and Registry Virtualisation (H) |
|
is blocked by
|
SYS.2.3.A9 Secure Use of Passwords in the Command Line [User] (S) |
|
is blocked by
|
SYS.2.3.A11 Preventing the Local Hard Drive From Becoming Overloaded (S) |
|
is blocked by
|
SYS.2.3.A12 Secure Use of Appliances (S) |
|
is blocked by
|
SYS.2.3.A18 Additional Kernel Protection (H) |
|
is blocked by
|
SYS.2.3.A19 Hard Disk or File Encryption (H) |
|
is blocked by
|
SYS.2.4.A1 Planning the Secure Use of macOS (B) |
|
is blocked by
|
SYS.2.4.A12 Firmware Password and Boot Protection on Macs [User] (H) |
|
is blocked by
|
SYS.3.2.1.A9 Restrictive Use of Functional Extensions (S) |
|
is blocked by
|
SYS.3.2.3.A1 Strategy for Using iOS Devices (B) |
|
is blocked by
|
SYS.3.2.3.A2 Planning the Use of Cloud Services (B) |
|
is blocked by
|
SYS.3.2.3.A7 Preventing Unauthorised Deletion of Configuration Profiles (B) |
|
is blocked by
|
SYS.3.2.3.A12 Using Apple IDs (S) |
|
is blocked by
|
SYS.3.2.3.A13 Using the “iOS Restrictions” Configuration Option (S) |
|
is blocked by
|
SYS.3.2.3.A15 Using Continuity Functions (S) |
|
is blocked by
|
SYS.3.2.3.A17 Using the Device Code History (S) |
|
is blocked by
|
SYS.3.2.3.A21 Installation of Apps and Integration of the Apple App Store (S) |
|
is blocked by
|
SYS.3.2.3.A25 Using the Configuration Option for AirPrint (H) |
|
is blocked by
|
SYS.3.2.3.A26 No Connections to Host Systems (H) |
|
is blocked by
|
SYS.3.2.4.A2 Disabling Developer Options (S) |
|
is blocked by
|
SYS.4.3.A8 Using a Secure Operating System for Embedded Systems [Developer, Planner, Procurement Department] (S) |
|
is blocked by
|
SYS.4.3.A9 Use of Cryptographic Processors or Coprocessors in Embedded Systems [Developer, Planner, Procurement Department] (S) |
|
is blocked by
|
SYS.4.3.A13 Use of a Certified Operating System [Developer, Planner, Procurement Department] (H) |
|
is blocked by
|
SYS.4.3.A17 Automatic Monitoring of Assembly Functions [Planner, Procurement Department] (H) |
|
is blocked by
|
SYS.4.3.A18 Resistance of Embedded Systems to Side-Channel Attacks [Developer, Procurement Department] (H) |
|
is blocked by
|
SYS.4.5.A11 Protecting Integrity Using Checksums or Digital Signatures (H) |
|
is blocked by
|
IND.1.A9 Restrictive Use of Removable Media and Mobile Devices in ICS Environments (S) |
|
is blocked by
|
IND.2.1.A1 Restriction of Access to Configuration and Maintenance Interfaces [OT Operations] (B) |
|
is blocked by
|
IND.2.1.A2 Using Secure Transmission Protocols for Configuration and Maintenance [Maintenance Personnel, OT Operations] (B) |
|
is blocked by
|
IND.2.1.A17 Use of Secure Protocols for the Transmission of Measurement and Control Data [OT Operations] (S) |
|
is blocked by
|
IND.2.1.A19 Security Tests [OT Operations] (H) |
|
is blocked by
|
IND.2.7.A1 Recording and Documentation [Planner, Maintenance Personnel] (B) |
|
is blocked by
|
IND.2.7.A2 Specified Use of Hardware and Software Components [Maintenance Personnel] (B) |
|
is blocked by
|
IND.2.7.A3 Changing the Application Program on the Logic System [Maintenance Personnel] (B) |
|
is blocked by
|
IND.2.7.A7 Separation and Independence of the SIS from the Environment [Planner, Maintenance Personnel] (S) |
|
is blocked by
|
IND.2.7.A8 Secure Transfer of Engineering Data to SIS [Planner, Maintenance Personnel, ICS Information Security Officer] (S) |
|
is blocked by
|
IND.2.7.A9 Protection of Data and Signal Connections [Planner, Maintenance Personnel, ICS Information Security Officer] (S) |
|
is blocked by
|
IND.2.7.A11 Dealing with Integrated Systems [Planner, Maintenance Personnel, ICS Information Security Officer] (S) |
|
is blocked by
|
NET.1.1.A7 Protection of Sensitive Information (B) |
|
is blocked by
|
NET.1.1.A9 Basic Protection of Communication with Untrusted Networks (B) |
|
is blocked by
|
NET.1.2.A9 Protection of Network Management Communication and Access to Network Management Tools (B) |
|
is blocked by
|
NET.1.2.A31 Basic Use of Secure Protocols (H) |
|
is blocked by
|
NET.1.2.A35 Specifications for Securing Evidence (H) |
|
is blocked by
|
NET.1.2.A36 Integration of Network Management Logging into an SIEM Solution (H) |
|
is blocked by
|
NET.3.1.A5 Protection Against Fragmentation Attacks (B) |
|
is blocked by
|
NET.3.1.A15 Bogon and Spoofing Filtering (S) |
|
is blocked by
|
NET.3.1.A16 Protection Against “IPv6 Routing Header Type-0” attacks (S) |
|
is blocked by
|
NET.3.1.A17 Protection Against DoS and DDoS Attacks (S) |
|
is blocked by
|
NET.3.1.A18 Configuration of Access Control Lists (S) |
|
is blocked by
|
NET.3.1.A19 Protection of Switch Ports (S) |
|
is blocked by
|
NET.3.1.A28 Use of Certified Products (H) |
|
is blocked by
|
NET.3.2.A2 Definition of Firewall Rules (B) |
|
is blocked by
|
NET.3.2.A3 Configuring Appropriate Filter Rules on the Packet Filter (B) |
|
is blocked by
|
NET.3.2.A4 Secure Firewall Configuration (B) |
|
is blocked by
|
NET.3.2.A6 Protection of Administration Interfaces (B) |
|
is blocked by
|
NET.3.2.A9 Logging (B) |
|
is blocked by
|
NET.3.2.A22 Secure Time Synchronisation (S) |
|
is blocked by
|
NET.3.2.A25 Advanced Integrity Protection for Configuration Files (H) |
|
is blocked by
|
NET.3.2.A28 Central Filtering of Active Content (H) |
|
is blocked by
|
NET.3.3.A7 Planning the Technical VPN Implementation (S) |
|
is blocked by
|
NET.3.3.A10 Secure Operation of a VPN (S) |
|
is blocked by
|
NET.3.3.A13 Integration of VPN Components into a Firewall (S) |
|
is blocked by
|
NET.4.2.A1 Planning the Use of VoIP (B) |
|
is blocked by
|
NET.4.2.A7 Drawing up a Security Policy for VoIP (S) |
|
is blocked by
|
NET.4.2.A8 Encryption of VoIP (S) |
|
is blocked by
|
NET.4.2.A13 Firewall Requirements When Using VoIP (S) |
|
is blocked by
|
NET.4.2.A14 Encryption of Signalling (H) |
|
is blocked by
|
INF.6.A2 Site Access Regulations and Control [Building Services] (B) |
|
is blocked by
|
INF.6.A3 Protection Against Dust and Other Contamination (B) |
|
is blocked by
|
INF.6.A4 Closed Windows and Locked Doors [Employee] (B) |
|
is blocked by
|
INF.6.A8 Secure Doors and Windows [Planner] (S) |
|
is blocked by
|
INF.7.A2 Closed Windows and Locked Doors [Employee, Building Services] (b) |
|
is blocked by
|
INF.7.A5 Workplace Ergonomics [Central Administration, Supervisor] (S) |
|
is blocked by
|
INF.7.A6 Workplace Cleanliness [Employee, Supervisor] (S) |
|
is blocked by
|
INF.7.A7 Suitable Storage of Official Documents and Storage Media [Employee, Building Services] (S) |
|
is blocked by
|
INF.9.A3 Site and Data Access Protection [Central Administration, Employee] (B) |
|
is blocked by
|
INF.9.A4 Working with External IT Systems [IT Operation Department, Employee] (B) |
|
is blocked by
|
INF.9.A6 Disposal of Confidential Information [Employee] (S) |
|
is blocked by
|
INF.9.A8 Security Policy for Mobile Workplaces [IT Operation Department] (S) |
|
is blocked by
|
INF.9.A12 Using a Screen Protector [Employee] (S) |
|
is blocked by
|
INF.14.A3 Secure Connection of Building Services and Building Services Systems (B) |
|
is blocked by
|
INF.14.A12 Use of Secure Transmission Protocols for BACS (S) |
|
is blocked by
|
INF.14.A15 Security of BACS-Specific Networks (S) |
|
is blocked by
|
INF.14.A16 Securing Wireless Communication in BACS Networks (S) [Planner] |
|
is blocked by
|
INF.14.A17 Securing Mobile Communications in BACS Networks (S) [Planner] |
|
is blocked by
|
INF.14.A18 Secure Integration of BACS-External Systems (S) |
|
is blocked by
|
INF.14.A24 Time Synchronisation for BACS (S) |
|
is blocked by
|
INF.14.A28 Physical Separation of BACS (H) [Planner] |
|
is blocked by
|
INF.14.A29 Separation of Individual Building Services Systems (H) |
|
is blocked by
|
INF.14.A30 Provision of a Dedicated BACS Time Server for Time Synchronisation (H) |