+OPS.1.1.2.A17 Dual Control in IT Administration (H)

OPS.1.1.2.A17 Dual Control in IT Administration (H)

For particularly security-critical IT systems, access to credentials with administrative authorisations SHOULD be implemented in a way that always requires two employees. In other words, one administrator SHOULD perform the administrative tasks at hand under the supervision of a second administrator.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
blocks G 0.14 Interception of Information / Espionage
blocks G 0.21 Manipulation with Hardware or Software
blocks G 0.22 Manipulation of Information
blocks G 0.27 Lack of Resources
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.31 Incorrect Use or Administration of Devices and Systems
blocks G 0.32 Misuse of Authorisation
blocks G 0.33 Shortage of Personnel
blocks G 0.35 Coercion, Blackmail or Corruption
blocks G 0.37 Repudiation of Actions
blocks G 0.42 Social Engineering