+INF.13.A6 Drawing Up a TBM Concept (S) [Planner]

INF.13.A6 Drawing Up a TBM Concept (S) [Planner]

Based on the security policy drawn up for TBM, a TBM concept SHOULD be established and consistently maintained. In doing so, the following minimum aspects SHOULD be taken into account as required:

  • Methods, techniques, and tools for TBM
  • Protection of access and communication
  • Protection at the network level; in particular, the assignment of TBM components to network segments
  • Scope of monitoring and alerts
  • Logging of events and administrative access
  • Reporting chains in the event of malfunctions and security incidents
  • Processes required for TBM
  • Provisioning of TBM information for other areas of the organisation
  • Integration of TBM into contingency planning

The TBM concept SHOULD be reviewed both regularly and whenever required and updated as necessary to reflect the current state of the art and include new findings.

In addition, a gap analysis of the specifications of the concept and the current state SHOULD be carried out on a regular basis. In particular, whether the systems are configured according to the specifications SHOULD be checked. The results SHOULD be documented in a transparent manner. Deviations SHOULD be eliminated.

1. Übersicht

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

Anforderungen

3. Zugehörige Regulierungen

Regulierungen

Verknüpfte Vorgänge

Verknüpfungen
blocks G 0.9 Failure or Disruption of Communication Networks
blocks G 0.10 Failure or Disruption of Supply Networks
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.25 Failure of Devices or Systems
blocks G 0.33 Shortage of Personnel