+OPS.1.1.2.A6 Protecting Administrative Tasks (B)

OPS.1.1.2.A6 Protecting Administrative Tasks (B)

Administrators MUST authenticate themselves through appropriate procedures before performing actions with administrative privileges.

Actions and activities that do not require elevated privileges MUST NOT be performed with administrative privileges.

Organisations MUST ensure that only administrators have access to administrative interfaces and functions. In particular, organisations MUST ensure that only administrators can make security-relevant changes to IT systems and applications.

Administration MUST be performed using secure protocols. The option to set up a separate administration network SHOULD be considered.

1. Vue d’ensemble

1.1 Références

1.2 Exigences identifiées

1.3 Réglementations associées

2. Exigences identifiées

Exigences

3. Réglementations associées

Réglementations

Tickets liés

Liens
blocks G 0.14 Interception of Information / Espionage
blocks G 0.21 Manipulation with Hardware or Software
blocks G 0.22 Manipulation of Information
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.37 Repudiation of Actions