+IND.3.2.A8 Explicit Approval of Every OT Remote Maintenance Session (S) [Employee]

IND.3.2.A8 Explicit Approval of Every OT Remote Maintenance Session (S) [Employee]

Each remote maintenance session SHOULD be pre-approved by an OT employee of the operator organisation responsible for the target system of the session. This responsible OT employee SHOULD only enable the remote maintenance access following this approval. Explicit approval SHOULD be required both for unscheduled cases of need and during coordinated maintenance windows. Approval SHOULD only be valid for a limited period of time so that the responsible OT employee retains sovereignty over the time of remote maintenance (see requirement IND.3.2.A3 Regular Checks and Exceptions for Existing OT Remote Maintenance Access).

Furthermore, external remote maintenance access SHOULD be established exclusively from the inside out (i.e. from the OT network). In particular, open ports for remote maintenance MUST NOT be accessible from the outside (i.e. from untrusted networks).

1. Επισκόπηση

1.1 Παραπομπές

1.2 Εντοπισμένες απαιτήσεις

1.3 Σχετικοί κανονισμοί

2. Εντοπισμένες απαιτήσεις

Απαιτήσεις

3. Σχετικοί κανονισμοί

Κανονισμοί

Συνδεδεμένα ζητήματα

Συνδέσεις
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.32 Misuse of Authorisation