+APP.4.3.A1 Creation of a Security Policy for Database Systems (B)

APP.4.3.A1 Creation of a Security Policy for Database Systems (B)

Based on its general security policy, an organisation MUST draw up a security policy specific to database systems. This MUST describe requirements and specifications for the secure operation of database systems in a comprehensible manner. The guideline MUST be familiar to all employees responsible for database systems. It MUST be integral to their work. If the policy is changed or deviations from the requirements are allowed, this MUST be coordinated with the CISO and documented. The correct implementation of the policy MUST be reviewed on a regular basis. The results MUST be documented in an appropriate manner.

1. Übersicht

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

Anforderungen

3. Zugehörige Regulierungen

Regulierungen

Verknüpfte Vorgänge

Verknüpfungen
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.27 Lack of Resources
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems