+SYS.2.2.2.A21 Use of File and Registry Virtualisation (H)

SYS.2.2.2.A21 Use of File and Registry Virtualisation (H)

It SHOULD be checked whether the operation of legacy applications that require write privileges for critical system folders or registry keys or have to be executed with administrator rights is still required. If this is the case, a strategy SHOULD be developed to replace the legacy applications that are still needed with secure alternatives. Until the legacy applications are replaced, it SHOULD be examined whether the Windows techniques “File Virtualisation” and “Registry Virtualisation” can be used to secure these applications. Registry virtualisation SHOULD only be able to access the necessary registry keys.

1. Oversigt

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

Krav

3. Relaterede reguleringer

Reguleringer

Linkede sager

Sagslinks
blocks G 0.22 Manipulation of Information
blocks G 0.31 Incorrect Use or Administration of Devices and Systems
blocks G 0.46 Loss of Integrity of Sensitive Information