+CON.7.A7 Secure Remote Access to an Organisation's Network [IT Operation Department, User] (B)

CON.7.A7 Secure Remote Access to an Organisation's Network [IT Operation Department, User] (B)

In order to allow secure remote access to an organisation’s network for employees on trips abroad, the IT Operation Department MUST set up secure remote access (e.g. via a virtual private network, VPN) in advance. VPN access MUST be cryptographically secured. In addition, users MUST have sufficiently secure access data to successfully authenticate themselves on their end devices and their organisation's network. Employees MUST use secure remote access for all communications which are possible in this context. Care MUST be taken to ensure that only authorised persons can access IT systems which have remote access. To the greatest extent possible, mobile IT systems MUST be protected against direct access to the Internet by a restrictively configured personal firewall.

1. Übersicht

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

Anforderungen

3. Zugehörige Regulierungen

Regulierungen

Verknüpfte Vorgänge

Verknüpfungen
blocks G 0.14 Interception of Information / Espionage
blocks G 0.15 Eavesdropping
blocks G 0.20 Information or Products from an Unreliable Source
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems