+APP.4.3.A1 Creation of a Security Policy for Database Systems (B)

APP.4.3.A1 Creation of a Security Policy for Database Systems (B)

Based on its general security policy, an organisation MUST draw up a security policy specific to database systems. This MUST describe requirements and specifications for the secure operation of database systems in a comprehensible manner. The guideline MUST be familiar to all employees responsible for database systems. It MUST be integral to their work. If the policy is changed or deviations from the requirements are allowed, this MUST be coordinated with the CISO and documented. The correct implementation of the policy MUST be reviewed on a regular basis. The results MUST be documented in an appropriate manner.

1. Oversigt

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

Krav

3. Relaterede reguleringer

Reguleringer

Linkede sager

Sagslinks
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.27 Lack of Resources
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems