+NET.3.1.A10 Creating a Security Policy(S)

NET.3.1.A10 Creating a Security Policy(S)

A specific security policy MUST be drawn up for routers and switches based on the general security policy of the organisation in question. This security policy SHOULD transparently describe the requirements and specifications for the secure operation of routers and switches. The policy SHOULD be known to all administrators and be integral to their work. If the policy is changed or deviations from the agreed requirements are allowed, this SHOULD be coordinated with the CISO and documented. It SHOULD be checked regularly whether the policy is still being properly implemented. The results SHOULD be documented appropriately.

1. Vue d’ensemble

1.1 Références

1.2 Exigences identifiées

1.3 Réglementations associées

2. Exigences identifiées

Exigences

3. Réglementations associées

Réglementations

Tickets liés

Liens
blocks G 0.23 Unauthorised Access to IT Systems