+SYS.4.4.A6 Integration of IoT Devices into Organisation Security Policies (S)

SYS.4.4.A6 Integration of IoT Devices into Organisation Security Policies (S)

Requirements for IoT devices SHOULD be specified in organisations' general security policies. This policy SHOULD be known to all persons who procure and operate IoT devices and be integral to their work. The implementation of the rules required by the policy SHOULD be reviewed regularly and the results documented in a sensible way.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
blocks G 0.2 Unfavourable Climatic Conditions
blocks G 0.4 Pollution, Dust, Corrosion
blocks G 0.8 Failure or Disruption of the Power Supply
blocks G 0.9 Failure or Disruption of Communication Networks
blocks G 0.14 Interception of Information / Espionage
blocks G 0.16 Theft of Devices, Storage Media and Documents
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.20 Information or Products from an Unreliable Source
blocks G 0.21 Manipulation with Hardware or Software
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.24 Destruction of Devices or Storage Media
blocks G 0.25 Failure of Devices or Systems
blocks G 0.26 Malfunction of Devices or Systems
blocks G 0.28 Software Vulnerabilities or Errors
blocks G 0.29 Violations of Laws or Regulations
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.38 Misuse of Personal Information
blocks G 0.39 Malware
blocks G 0.40 Denial of Service