+SYS.1.1.A11 Defining a Security Policy for Servers (S)

SYS.1.1.A11 Defining a Security Policy for Servers (S)

Based on the general security policy of the organisation in question, the requirements for servers SHOULD be specified in a separate security policy. This policy SHOULD be known to all administrators and other persons involved in the procurement and operation of servers and be integral to their work. The implementation of the policy's requirements SHOULD be checked at regular intervals. The results SHOULD be appropriately documented.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.31 Incorrect Use or Administration of Devices and Systems