+OPS.1.2.6.A3 Secure Configuration of NTP Servers (B)

OPS.1.2.6.A3 Secure Configuration of NTP Servers (B)

The IT Operation Department MUST configure the NTP server in such a way that clients can only change NTP server settings if this is explicitly intended. Furthermore, it MUST be ensured that only trusted clients can request status information.

If the respective organisation's internal NTP servers do not use sufficiently accurate time sources themselves, the IT Operation Department MUST configure these NTP servers to regularly request accurate time information from external NTP servers.

1. Oversigt

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

Krav

3. Relaterede reguleringer

Reguleringer

Linkede sager

Sagslinks
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.46 Loss of Integrity of Sensitive Information