+OPS.1.1.7.A8 Drawing Up a System Management Concept (S)

OPS.1.1.7.A8 Drawing Up a System Management Concept (S)

Based on the security policy drawn up for system management, a system management concept SHOULD be established and continually maintained. In doing so, the following minimum aspects SHOULD be taken into account as required:

  • Methods, techniques, and tools for system management
  • Protection of access and communication
  • Protection at the network level, in particular the assignment of system management components to security zones
  • Scope of monitoring and alerting for each system to be managed
  • Logging
  • Automation, in particular the central distribution of configuration files to the systems to be managed
  • Specifications for the development and testing of automation functions
  • Reporting chains in the event of malfunctions and security incidents
  • Provisioning of system management information for other areas of the organisation in question
  • Integration of system management into contingency planning
  • Required network transmission capacity of the system management solution

1. Übersicht

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

Anforderungen

3. Zugehörige Regulierungen

Regulierungen

Verknüpfte Vorgänge

Verknüpfungen
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.25 Failure of Devices or Systems
blocks G 0.26 Malfunction of Devices or Systems
blocks G 0.27 Lack of Resources
blocks G 0.29 Violations of Laws or Regulations
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.31 Incorrect Use or Administration of Devices and Systems