+NET.3.2.A1 Creating a Security Policy (B)

NET.3.2.A1 Creating a Security Policy (B)

A specific security policy for firewalls MUST be drawn up based on the general security policy of the organisation in question. The specific policy MUST transparently describe the requirements and specifications for securely operating firewalls. The policy MUST be known to all employees in charge in firewalls and be integral to their work. If the policy is changed or deviations from the requirements are allowed, this MUST be coordinated with the CISO and documented. The correct implementation of the policy MUST be regularly reviewed. The results MUST be documented in an appropriate manner.

1. Oversigt

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

Krav

3. Relaterede reguleringer

Reguleringer

Linkede sager

Sagslinks
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.27 Lack of Resources