+IND.3.2.A4 Binding Regulation of OT Remote Maintenance by Third Parties (B)

IND.3.2.A4 Binding Regulation of OT Remote Maintenance by Third Parties (B)

Appropriately restrictive regulations for OT remote maintenance must be contractually agreed with all external users (i.e. manufacturers, integrators and maintenance service providers). These contractual arrangements MUST ensure at all times that external users only use OT remote maintenance access in a controlled and coordinated manner.

The activities certain external users are permitted to carry out and the remote maintenance access points they are to use MUST be defined internally. The internal employees who authorise, observe and, if necessary, support the remote maintenance access and activities of external users MUST also be defined.

Especially for safety machines, the internal OT employee in question MUST have both organisational and technical sovereignty over the times at which remote maintenance is carried out. The possibility of establishing an outward VPN tunnel MUST be forbidden by contract.

1. Oversigt

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

Krav

3. Relaterede reguleringer

Reguleringer

Linkede sager

Sagslinks
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.31 Incorrect Use or Administration of Devices and Systems
blocks G 0.32 Misuse of Authorisation