+NET.3.2.A1 Creating a Security Policy (B)

NET.3.2.A1 Creating a Security Policy (B)

A specific security policy for firewalls MUST be drawn up based on the general security policy of the organisation in question. The specific policy MUST transparently describe the requirements and specifications for securely operating firewalls. The policy MUST be known to all employees in charge in firewalls and be integral to their work. If the policy is changed or deviations from the requirements are allowed, this MUST be coordinated with the CISO and documented. The correct implementation of the policy MUST be regularly reviewed. The results MUST be documented in an appropriate manner.

1. Επισκόπηση

Τίτλος Πρότυπο

1.1 Παραπομπές

1.2 Εντοπισμένες απαιτήσεις

1.3 Σχετικοί κανονισμοί

2. Εντοπισμένες απαιτήσεις

Απαιτήσεις
Πηγή Απαίτηση

3. Σχετικοί κανονισμοί

Κανονισμοί
Πηγή Κανονισμός

Συνδεδεμένα ζητήματα

Συνδέσεις
Τύπος σύνδεσης Ζήτημα
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.27 Lack of Resources