+SYS.2.1.A15 Secure Installation and Configuration of Clients (S)

SYS.2.1.A15 Secure Installation and Configuration of Clients (S)

Operating system components, specialised applications, and other tools to be installed SHOULD be specified. The installation and configuration of IT systems SHOULD only be performed by authorised persons (administrators or service providers bound by contract) according to a defined installation process in a specific installation environment. After installation and configuration have been completed, the basic settings SHOULD be checked. Provided that the installation and configuration meet the requirements of the security policy at hand, the clients SHOULD then be put into operation in the respective production environment. All installation and configuration steps SHOULD be documented in such a way that they can be understood and repeated by a competent third party.

1. Vue d’ensemble

1.1 Références

1.2 Exigences identifiées

1.3 Réglementations associées

2. Exigences identifiées

Exigences

3. Réglementations associées

Réglementations

Tickets liés

Liens
blocks G 0.21 Manipulation with Hardware or Software
blocks G 0.22 Manipulation of Information
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.40 Denial of Service
blocks G 0.45 Data Loss