+SYS.1.1.A33 Active Administration of Root Certificates (H)

SYS.1.1.A33 Active Administration of Root Certificates (H)

As part of the procurement and installation of a server, the root certificates that are required to operate the server SHOULD be documented. Only the previously documented root certificates required for operation SHOULD be present on the server. Regular checks SHOULD be performed as to whether existing root certificates still comply with the respective organisation’s requirements. All certificate stores on the IT system at hand SHOULD be included in these checks.

1. Übersicht

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

Anforderungen

3. Zugehörige Regulierungen

Regulierungen

Verknüpfte Vorgänge

Verknüpfungen
blocks G 0.14 Interception of Information / Espionage
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.23 Unauthorised Access to IT Systems