+OPS.1.2.5.A24 Securing Integrated Remote Maintenance Systems (S)

OPS.1.2.5.A24 Securing Integrated Remote Maintenance Systems (S)

When procuring new IT systems, it SHOULD be checked whether these IT systems or their individual components have functions for remote maintenance. If these functions are not used, they SHOULD be disabled. The functions SHOULD also be disabled if they are compromised by known security vulnerabilities.

If remote maintenance functions integrated into the firmware of individual components are used, their functions and access to them SHOULD be restricted to the greatest extent possible. The remote maintenance functions SHOULD only be accessible from a separate management network.

1. Vue d’ensemble

1.1 Références

1.2 Exigences identifiées

1.3 Réglementations associées

2. Exigences identifiées

Exigences

3. Réglementations associées

Réglementations

Tickets liés

Liens
blocks G 0.20 Information or Products from an Unreliable Source
blocks G 0.25 Failure of Devices or Systems
blocks G 0.31 Incorrect Use or Administration of Devices and Systems