+SYS.2.1.A9 Defining a Security Policy for Clients (S)

SYS.2.1.A9 Defining a Security Policy for Clients (S)

On the basis of an organisation's general security policy, requirements for general clients SHOULD be specified. The policy SHOULD be known to all users and all persons involved in the procurement and operation of clients and be integral to their work. The implementation of the policy's requirements SHOULD be checked at regular intervals. The results SHOULD be documented in a transparent manner.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.31 Incorrect Use or Administration of Devices and Systems
blocks G 0.43 Attack with Specially Crafted Messages