+SYS.1.8.A14 Protection of an SAN Through Segmentation (S)

SYS.1.8.A14 Protection of an SAN Through Segmentation (S)

An SAN SHOULD be segmented. A concept SHOULD be drawn up that assigns SAN resources to the respective servers. To this end, a decision SHOULD be taken as to which segmentation should be used in each implementation (e.g. FC SANs or iSCSI storage networks) based on the security requirements at hand and the administration effort required. The current resource allocation SHOULD be easily and clearly identifiable with the help of the administration tools. Furthermore, the current zoning configuration SHOULD be documented. The documentation SHOULD also be available in case of emergency.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.22 Manipulation of Information
blocks G 0.27 Lack of Resources
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems