+OPS.1.2.5.A24 Securing Integrated Remote Maintenance Systems (S)

OPS.1.2.5.A24 Securing Integrated Remote Maintenance Systems (S)

When procuring new IT systems, it SHOULD be checked whether these IT systems or their individual components have functions for remote maintenance. If these functions are not used, they SHOULD be disabled. The functions SHOULD also be disabled if they are compromised by known security vulnerabilities.

If remote maintenance functions integrated into the firmware of individual components are used, their functions and access to them SHOULD be restricted to the greatest extent possible. The remote maintenance functions SHOULD only be accessible from a separate management network.

1. Übersicht

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

Anforderungen

3. Zugehörige Regulierungen

Regulierungen

Verknüpfte Vorgänge

Verknüpfungen
blocks G 0.20 Information or Products from an Unreliable Source
blocks G 0.25 Failure of Devices or Systems
blocks G 0.31 Incorrect Use or Administration of Devices and Systems