+ORP.4.A24 Dual Control for Administrative Activities [IT Operation Department] (H)

ORP.4.A24 Dual Control for Administrative Activities [IT Operation Department] (H)

Administrative activities SHOULD require the involvement of two persons. If multi-factor authentication is required, the factors SHOULD be distributed between the two persons. Passwords SHOULD be split into two parts and issued to each of the two persons.

1. Vue d’ensemble

1.1 Références

1.2 Exigences identifiées

1.3 Réglementations associées

2. Exigences identifiées

Exigences

3. Réglementations associées

Réglementations

Tickets liés

Liens
blocks G 0.14 Interception of Information / Espionage
blocks G 0.22 Manipulation of Information
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.31 Incorrect Use or Administration of Devices and Systems
blocks G 0.32 Misuse of Authorisation
blocks G 0.37 Repudiation of Actions