+NET.2.2.A3 Safeguarding WLAN Usage in Hotspots [IT Operation Department] (B)

NET.2.2.A3 Safeguarding WLAN Usage in Hotspots [IT Operation Department] (B)

If the use of external hotspots is permitted, the following MUST be implemented:

  • Every user of a hotspot MUST know the security requirements and then decide if and under which conditions hotspot usage is allowed.
  • If hotspots are used, it SHOULD be ensured that the connection between the hotspot access point and the user’s IT system is cryptographically secured according to the state of the art.
  • WLANs that are only used sporadically SHOULD be deleted from users' histories.
  • The option to log into WLANs automatically SHOULD be disabled.
  • If possible, separate user accounts with a secure basic configuration and restrictive authorisations SHOULD be used.
  • It SHOULD be ensured that users with administrator authorisations can never log into external WLANs from their clients.
  • In order to transmit sensitive data, all the necessary security safeguards (especially appropriate encryption) MUST be activated on the clients involved.
  • If a WLAN interface is not used over an extended period of time, it MUST be disabled.
  • When using publicly available WLANs, users MUST use a virtual private network (VPN) to access internal resources of their organisation.

1. Übersicht

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

Anforderungen

3. Zugehörige Regulierungen

Regulierungen

Verknüpfte Vorgänge

Verknüpfungen
blocks G 0.15 Eavesdropping
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.43 Attack with Specially Crafted Messages