+OPS.1.1.7.A6 Securing Access to the System Management Solution (B)

OPS.1.1.7.A6 Securing Access to the System Management Solution (B)

User access to a system management solution MUST be secured through:

  • Secure and appropriate authentication and authorisation of the user
  • Secure encryption of transmitted data

An appropriate authentication method MUST be selected. The selection process MUST be documented. The strength of the cryptographic methods and keys used MUST be regularly reviewed and adjusted as needed.

The system management solution MUST use an authorisation component to ensure that users can only perform actions for which they are authorised.

1. Vue d’ensemble

1.1 Références

1.2 Exigences identifiées

1.3 Réglementations associées

2. Exigences identifiées

Exigences

3. Réglementations associées

Réglementations

Tickets liés

Liens
blocks G 0.15 Eavesdropping
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.21 Manipulation with Hardware or Software
blocks G 0.22 Manipulation of Information
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.31 Incorrect Use or Administration of Devices and Systems
blocks G 0.43 Attack with Specially Crafted Messages