+IND.3.2.A9 Secure Exchange of Files Involved in OT Remote Maintenance (S) [Planner, IT Operation Department]

IND.3.2.A9 Secure Exchange of Files Involved in OT Remote Maintenance (S) [Planner, IT Operation Department]

A secure procedure SHOULD be established for exchanging files involved in OT remote maintenance (e.g. configuration files, updates, or manuals). At minimum, this MUST include a check for malware.

Establishing a connection between a data exchange system and file source SHOULD not be automated; it should be initiated and authenticated by an organisation's OT prior to any file exchange. File exchanges SHOULD always be logged.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
blocks G 0.37 Repudiation of Actions
blocks G 0.39 Malware
blocks G 0.43 Attack with Specially Crafted Messages