+APP.4.3.A20 Regular Audits (S)

APP.4.3.A20 Regular Audits (S)

All the components of a database system SHOULD be checked regularly in terms of whether all the specified security safeguards have been implemented and are configured correctly. This SHOULD include checks of whether the documented status corresponds to the actual status and whether the configuration of the database management system corresponds to the documented standard configuration. In addition, it SHOULD be determined whether all the database scripts at hand are actually needed. Whether they meet the quality standards of the respective organisation SHOULD also be checked. Furthermore, the log files of the database system and the operating system SHOULD be checked for irregularities (see DER.1 Detecting Security-Relevant Events). The audit results SHOULD be documented in a transparent manner. They SHOULD be compared against the target status. Deviations SHOULD be investigated.

1. Vue d’ensemble

1.1 Références

1.2 Exigences identifiées

1.3 Réglementations associées

2. Exigences identifiées

Exigences

3. Réglementations associées

Réglementations

Tickets liés

Liens
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.22 Manipulation of Information
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.26 Malfunction of Devices or Systems
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.46 Loss of Integrity of Sensitive Information