+OPS.1.1.3.A10 Assuring the Integrity and Authenticity of Software Packages (S)

OPS.1.1.3.A10 Assuring the Integrity and Authenticity of Software Packages (S)

The authenticity and integrity of software packages SHOULD be ensured throughout the patch or change process. To this end, it SHOULD be checked whether checksums or digital signatures are available for the software packages used. If there are, these SHOULD be checked before a package is installed. Furthermore, it SHOULD be ensured that the programs required for checking are available.

As a matter of principle, software and updates SHOULD only be obtained from trustworthy sources.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
blocks G 0.20 Information or Products from an Unreliable Source
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.28 Software Vulnerabilities or Errors
blocks G 0.39 Malware
blocks G 0.46 Loss of Integrity of Sensitive Information