SOV-4-05-C

All software updates and operational data affecting the cloud service MUST be received, authorized and validated in a secured network area managed and controlled by the cloud service provider.

The cloud service provider MUST verify and check updates for known vulnerabilities.

Updates MUST include documentation satisfying the needs of the cloud service provider.

The update process MUST be based on a controlled change management processes.

1. Přehled

1.1 Odkazy

1.2 Identifikované požadavky

1.3 Související regulace

2. Identifikované požadavky

3. Související regulace

• BSI -

  Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)