+DER.2.3.A7 Targeted System Hardening (S)

DER.2.3.A7 Targeted System Hardening (S)

After an APT attack, all the IT systems affected SHOULD be hardened. This SHOULD be based on the results of forensic examinations. In addition, there SHOULD be a further check on whether the affected environment is still secure.

If possible, IT systems SHOULD already be hardened as they are being cleaned. Safeguards that cannot be performed on short notice SHOULD be added to an action plan and implemented in the medium term. The CISO SHOULD draw up the plan and check that it has been implemented properly.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
blocks G 0.14 Interception of Information / Espionage
blocks G 0.15 Eavesdropping
blocks G 0.16 Theft of Devices, Storage Media and Documents
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.20 Information or Products from an Unreliable Source
blocks G 0.21 Manipulation with Hardware or Software
blocks G 0.22 Manipulation of Information
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.24 Destruction of Devices or Storage Media
blocks G 0.28 Software Vulnerabilities or Errors
blocks G 0.32 Misuse of Authorisation
blocks G 0.39 Malware
blocks G 0.40 Denial of Service
blocks G 0.41 Sabotage
blocks G 0.43 Attack with Specially Crafted Messages
blocks G 0.45 Data Loss
blocks G 0.46 Loss of Integrity of Sensitive Information