+IND.2.1.A1 Restriction of Access to Configuration and Maintenance Interfaces [OT Operations] (B)

IND.2.1.A1 Restriction of Access to Configuration and Maintenance Interfaces [OT Operations] (B)

Passwords set by default or by the manufacturer MUST be changed (see ORP.4 Identity and Access Management). These changes MUST be documented. Passwords MUST be stored securely.

It MUST be ensured that only authorised employees are allowed to access the configuration and maintenance interfaces of ICS components. The configuration of an ICS component MUST ONLY be changed after the approval or authentication of the person in charge.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
blocks G 0.14 Interception of Information / Espionage
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.21 Manipulation with Hardware or Software
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.32 Misuse of Authorisation
blocks G 0.41 Sabotage
blocks G 0.43 Attack with Specially Crafted Messages
blocks G 0.45 Data Loss
blocks G 0.46 Loss of Integrity of Sensitive Information