+SYS.2.1.A8 Protecting the Boot Process (B)

SYS.2.1.A8 Protecting the Boot Process (B)

The start-up procedure (boot process) of IT systems MUST be protected against manipulation. The media that can be used to boot a given system MUST be defined. A decision SHOULD be taken as to whether and how the boot process is to be protected cryptographically. It MUST be ensured that only administrators can boot clients from anything other than the default drive, or from an external storage medium. The ability to boot IT systems from removable or external storage media MUST be restricted to administrators. The ability to change the configuration settings of boot processes MUST also be restricted to administrators. All unused functions in firmware MUST be disabled.

1. Vue d’ensemble

1.1 Références

1.2 Exigences identifiées

1.3 Réglementations associées

2. Exigences identifiées

Exigences

3. Réglementations associées

Réglementations

Tickets liés

Liens
blocks G 0.21 Manipulation with Hardware or Software
blocks G 0.22 Manipulation of Information
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.31 Incorrect Use or Administration of Devices and Systems
blocks G 0.45 Data Loss