+OPS.1.1.2.A6 Protecting Administrative Tasks (B)

OPS.1.1.2.A6 Protecting Administrative Tasks (B)

Administrators MUST authenticate themselves through appropriate procedures before performing actions with administrative privileges.

Actions and activities that do not require elevated privileges MUST NOT be performed with administrative privileges.

Organisations MUST ensure that only administrators have access to administrative interfaces and functions. In particular, organisations MUST ensure that only administrators can make security-relevant changes to IT systems and applications.

Administration MUST be performed using secure protocols. The option to set up a separate administration network SHOULD be considered.

1. Übersicht

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

Anforderungen

3. Zugehörige Regulierungen

Regulierungen

Verknüpfte Vorgänge

Verknüpfungen
blocks G 0.14 Interception of Information / Espionage
blocks G 0.21 Manipulation with Hardware or Software
blocks G 0.22 Manipulation of Information
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.37 Repudiation of Actions