+SYS.3.2.1.A6 Privacy Settings and Authorisations (B)

SYS.3.2.1.A6 Privacy Settings and Authorisations (B)

App and operating system access to data and interfaces MUST be restricted appropriately. The related data protection settings MUST be configured as restrictively as possible. In particular, access to camera, microphone, location, and health/fitness data MUST be checked for compliance with an organisation's internal data protection and security requirements. This access MUST be configured restrictively or disabled.

Security-relevant authorisation settings MUST be set so that they cannot be changed by users or apps. If this is not technically possible, the authorisation settings MUST be regularly checked and reset. In particular, this MUST be done after updates are installed.

1. Oversigt

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

Krav

3. Relaterede reguleringer

Reguleringer

Linkede sager

Sagslinks
blocks G 0.14 Interception of Information / Espionage
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems