+INF.13.A11 Adequate Hardening of Systems in TBM (S)

INF.13.A11 Adequate Hardening of Systems in TBM (S)

All systems in TBM and the systems operated by TBM SHOULD be adequately hardened. These hardening measures SHOULD be documented, reviewed both regularly and whenever required, and adjusted if necessary.

For all systems in TBM and the systems operated by TBM, it SHOULD be ensured during procurement that they can be hardened appropriately and, in particular, that security-relevant updates will be provided for the systems' planned service life.

Systems that do not receive security-relevant updates SHOULD not be used if corresponding vulnerabilities are exposed. If this is not possible, the affected systems SHOULD be separated by network segmentation and their communication controlled and regulated.

1. Übersicht

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

Anforderungen

3. Zugehörige Regulierungen

Regulierungen

Verknüpfte Vorgänge

Verknüpfungen
blocks G 0.14 Interception of Information / Espionage
blocks G 0.15 Eavesdropping
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.21 Manipulation with Hardware or Software
blocks G 0.22 Manipulation of Information
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.24 Destruction of Devices or Storage Media
blocks G 0.25 Failure of Devices or Systems
blocks G 0.28 Software Vulnerabilities or Errors
blocks G 0.39 Malware
blocks G 0.41 Sabotage
blocks G 0.43 Attack with Specially Crafted Messages
blocks G 0.47 Harmful Side Effects of IT-Supported Attacks