+NET.2.2.A1 Creating a User Policy for WLAN [IT Operation Department] (B)

NET.2.2.A1 Creating a User Policy for WLAN [IT Operation Department] (B)

The essential core aspects of secure WLAN usage MUST be specified in a WLAN user policy based on the general security policy of the organisation in question. This user policy MUST describe the particularities of WLAN usage, such as whether, how, and with what devices hotspots may be used.

The policy MUST contain information on which data may be used and transmitted over a WLAN and which may not.

It MUST describe how to handle client-side security solutions. The user policy MUST contain a clearly stated ban on connecting unauthorised access points to the network of the respective organisation. Moreover, the policy MUST state that WLAN interfaces must be disabled if they are not used for a longer period.

There MUST be regular checks to ensure that the policy's requirements have been implemented correctly. If this is not the case, there MUST be an appropriate response. The results SHOULD be appropriately documented.

1. Übersicht

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

Anforderungen

3. Zugehörige Regulierungen

Regulierungen

Verknüpfte Vorgänge

Verknüpfungen
blocks G 0.15 Eavesdropping
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.31 Incorrect Use or Administration of Devices and Systems
blocks G 0.43 Attack with Specially Crafted Messages