+SYS.1.7.A6 Use and Protection of the Remote Support Facility (B)

SYS.1.7.A6 Use and Protection of the Remote Support Facility (B)

The head of the IT Operation Department MUST decide whether and how RSF is to be used. Such use MUST be governed by a corresponding maintenance contract and coordinated with hardware support staff. It MUST be ensured that the RSF configuration can only be changed by authorised persons. Maintenance access for firmware modifications by the manufacturer MUST be explicitly approved by the operator and disabled again after these modifications are completed. RSF communication MUST take place via a proxy server and also using secure connections (such as TLS).

1. Oversigt

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

Krav

3. Relaterede reguleringer

Reguleringer

Linkede sager

Sagslinks
blocks G 0.14 Interception of Information / Espionage
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.20 Information or Products from an Unreliable Source
blocks G 0.21 Manipulation with Hardware or Software
blocks G 0.22 Manipulation of Information
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.36 Identity theft
blocks G 0.43 Attack with Specially Crafted Messages
blocks G 0.45 Data Loss
blocks G 0.46 Loss of Integrity of Sensitive Information