+IND.1.A14 Strong Authentication for OT Components (H)

IND.1.A14 Strong Authentication for OT Components (H)

A central directory service SHOULD be set up for the secure authorisation of privileged users in the control systems at hand (see module ORP.4 Identity and Access Management). Authentication SHOULD be secured further using several factors, such as knowledge, ownership, or biometrics.

During planning, it SHOULD be ensured that any resulting dependencies in user authentication are known and taken into consideration when implementing a corresponding solution.

It SHOULD be ensured that operationally required technical accounts can be authorised in emergencies.

1. Vue d’ensemble

1.1 Références

1.2 Exigences identifiées

1.3 Réglementations associées

2. Exigences identifiées

Exigences

3. Réglementations associées

Réglementations

Tickets liés

Liens
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.32 Misuse of Authorisation
blocks G 0.36 Identity theft