+SYS.1.8.A14 Protection of an SAN Through Segmentation (S)

SYS.1.8.A14 Protection of an SAN Through Segmentation (S)

An SAN SHOULD be segmented. A concept SHOULD be drawn up that assigns SAN resources to the respective servers. To this end, a decision SHOULD be taken as to which segmentation should be used in each implementation (e.g. FC SANs or iSCSI storage networks) based on the security requirements at hand and the administration effort required. The current resource allocation SHOULD be easily and clearly identifiable with the help of the administration tools. Furthermore, the current zoning configuration SHOULD be documented. The documentation SHOULD also be available in case of emergency.

1. Vue d’ensemble

1.1 Références

1.2 Exigences identifiées

1.3 Réglementations associées

2. Exigences identifiées

Exigences

3. Réglementations associées

Réglementations

Tickets liés

Liens
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.22 Manipulation of Information
blocks G 0.27 Lack of Resources
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems