+INF.14.A6 Separation of BACS Networks (B) [Planner, IT Operation Department]

INF.14.A6 Separation of BACS Networks (B) [Planner, IT Operation Department]

BACS networks MUST be at least logically separated from office networks and other networks of the organisation at hand. Any communication between BACS and other IT systems MUST be controlled and regulated. For this purpose, appropriate components with security functions (a firewall function at minimum) MUST be provided at all the transitions in such segmentation.

If BACS are set up centrally for a building complex or property, the BACS communication across buildings via LAN, WLAN, WAN, radio networks, or Internet connections MUST also be separated at the network level.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
blocks G 0.9 Failure or Disruption of Communication Networks
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.40 Denial of Service
blocks G 0.43 Attack with Specially Crafted Messages