+SYS.4.4.A10 Secure Installation and Configuration of IoT Devices (S)

SYS.4.4.A10 Secure Installation and Configuration of IoT Devices (S)

The framework conditions applicable to the installation and configuration of IoT devices SHOULD be defined. IoT devices SHOULD only be installed and configured by authorised persons (persons in charge of IoT devices, administrators, or service providers bound by contracts) in accordance with a defined process. All installation and configuration steps SHOULD be documented such that they can be understood and repeated by a qualified third party based on the documentation.

The basic settings of IoT devices SHOULD be checked and, where necessary, adapted to the specifications of the security policy in question. If possible, IoT devices SHOULD only be connected to data networks after installation and configuration are complete.

1. Resumen

1.1 Referencias

1.2 Requisitos identificados

1.3 Regulaciones relacionadas

2. Requisitos identificados

Requisitos

3. Regulaciones relacionadas

Regulaciones

Incidencias vinculadas

Vínculos
blocks G 0.14 Interception of Information / Espionage
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.21 Manipulation with Hardware or Software
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.25 Failure of Devices or Systems
blocks G 0.28 Software Vulnerabilities or Errors
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.38 Misuse of Personal Information
blocks G 0.39 Malware
blocks G 0.40 Denial of Service