+OPS.1.2.5.A3 Securing Interfaces for Remote Maintenance (B)

OPS.1.2.5.A3 Securing Interfaces for Remote Maintenance (B)

The possible access and communication connections for remote maintenance MUST be restricted to those required. All remote maintenance connections MUST be disconnected after remote access.

It MUST be ensured that remote maintenance software is only installed on IT systems where it is needed.

Remote maintenance connections via untrusted networks MUST be encrypted. All other remote maintenance connections SHOULD be encrypted.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
blocks G 0.14 Interception of Information / Espionage
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.25 Failure of Devices or Systems
blocks G 0.31 Incorrect Use or Administration of Devices and Systems