+SYS.3.2.2.A23 Enforcing Compliance Requirements (H)

SYS.3.2.2.A23 Enforcing Compliance Requirements (H)

Violations of an organisation's regulations and manipulation of device operating systems SHOULD be detected by a suitable solution. The following actions SHOULD be taken if violations of regulations or OS manipulations are suspected. The solution SHOULD provide corresponding functions, including:

  • automated warnings
  • autonomous locking of devices
  • deletion of the organisation’s confidential information
  • deletion of the entire device
  • prevention of access to company apps
  • prevention of access to the organisation’s systems and information

If a violation or manipulation is suspected, an alert SHOULD be sent to the administrators in charge and the organisation's security management personnel.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
blocks G 0.16 Theft of Devices, Storage Media and Documents
blocks G 0.21 Manipulation with Hardware or Software
blocks G 0.22 Manipulation of Information
blocks G 0.29 Violations of Laws or Regulations