+SYS.1.8.A6 Creation of a Security Policy for Storage Solutions (S)

SYS.1.8.A6 Creation of a Security Policy for Storage Solutions (S)

Based on an organisation's general security policy, a specific policy SHOULD be drawn up for storage solutions. This policy SHOULD transparently describe specifications as to how storage solutions may be planned, administered, installed, configured, and operated securely.

The policy SHOULD be known to all administrators in charge of storage solutions and be integral to their work. If the policy is changed or deviations from its specifications are allowed, this SHOULD be coordinated with the CISO and documented. It SHOULD be checked regularly whether the policy is still being properly implemented. It SHOULD be updated as required. The results SHOULD be appropriately documented.

1. Yleiskatsaus

Otsikko Standardi

1.1 Viittaukset

1.2 Tunnistetut vaatimukset

1.3 Liittyvät säädökset

2. Tunnistetut vaatimukset

Vaatimukset
Lähde Vaatimus

3. Liittyvät säädökset

Säädökset
Lähde Sääntely

Linkitetyt tehtävät

Linkit
Linkin tyyppi Tehtävä
blocks G 0.29 Violations of Laws or Regulations