+4.22 Secure recovery and ownership life cycle
|
4.22 Secure recovery and ownership life cycle
| Principle (secure by default) | Provide secure, guided recovery and ownership transfer mechanisms by default. Recovery, reset and transfer processes must be easy for users, operators and administrators to follow, while remaining resistant to abuse, account takeover and social engineering. | | Objective | To enable users and administrators to recover access, reset systems or transfer ownership safely. |
Checklist | Define supported recovery and transfer actions | - Identify supported recovery actions such as credential reset, account recovery, secure factory reset and ownership transfer, clearly defining who is allowed to initiate each action and under what conditions
| | Verify identity before recovery or transfer | - Require strong identity verification before allowing recovery, reset or ownership transfer actions.
| | Protect recovery paths from abuse | - Ensure that recovery mechanisms cannot be used to bypass normal authentication or authorisation controls.
- Apply monitoring and rate limiting to recovery and reset workflows.
| | Ensure secure reset and ownership transfer | - Ensure that factory reset and ownership transfer fully remove previous user access, credentials and secrets.
| | Provide guided, secure workflows | - Offer clear recovery and transfer processes that reduce user error
|
Minimum evidence - Recovery and transfer actions are defined: documentation identifies supported recovery, reset and ownership transfer processes.
- Strong verification is enforced: configuration or test evidence shows that recovery and transfer actions require a verified identity.
- Abuse protections are applied: configuration, logs or test evidence shows that rate limiting and monitoring of recovery workflows are in place.
- Secure reset and transfer is verified: test evidence confirms that factory reset and ownership transfer remove prior credentials and access.
- Guided workflows are available: screenshots, CLI commands or documentation demonstrates that recovery and transfer processes are guided.
Release gate - Supported recovery and ownership transfer actions are defined
- Recovery and transfer actions require strong identity verification
- Recovery mechanisms cannot bypass normal access controls
- Factory reset and ownership transfer fully remove prior access
- Clear guidance is provided on recovery and transfer workflows
1. Oversigt
1.1 Referencer
1.2 Identificerede krav
1.3 Relaterede reguleringer
2. Identificerede krav
3. Relaterede reguleringer
Reguleringer
| Kilde |
Regulering |
- ENISA -
EN: Publications of the European Union Agency for Cybersecurity (ENISA), https://www.enisa.europa.eu/. © European Union Agency for Cybersecurity (ENISA). Unless otherwise noted, licensed under CC BY 4.0. Changes: divided into sections, converted into the GRCA format and linked to the EU legal acts they refer to; images and material of third parties are not reproduced. Only the versions published by ENISA are authoritative.
DE: Veröffentlichungen der Agentur der Europäischen Union für Cybersicherheit (ENISA), https://www.enisa.europa.eu/. © European Union Agency for Cybersecurity (ENISA). Soweit nicht anders vermerkt, lizenziert unter CC BY 4.0. Änderungen: in Abschnitte aufgeteilt, in das GRCA-Format umgewandelt und mit den EU-Rechtsakten verknüpft, auf die sie sich beziehen; Bilder und Material Dritter werden nicht wiedergegeben. Maßgeblich sind allein die von der ENISA veröffentlichten Fassungen.
|