+IND.3.2.A6 Securing All Remote Maintenance Access to OT (B) [IT Operation Department]

IND.3.2.A6 Securing All Remote Maintenance Access to OT (B) [IT Operation Department]

In industry, OT MUST be able to control any access to an IT system that provides a remote maintenance service to the OT. For this purpose, access MUST be secured by at least one security component under the responsibility of the OT.

All types of remote maintenance access SHOULD be standardised. All access SHOULD be controlled and explicitly allowed using central authentication components.

If OT remote maintenance access points include decentralised infrastructures or components integrated in package units, the access points MUST be secured by an additional security component that is neither integrated nor part of the decentralised infrastructure.

1. Forbhreathnú

1.1 Tagairtí

1.2 Ceanglais aitheanta

1.3 Rialacháin ghaolmhara

2. Ceanglais aitheanta

Ceanglais

3. Rialacháin ghaolmhara

Rialacháin

Saincheisteanna nasctha

Naisc
blocks G 0.20 Information or Products from an Unreliable Source
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems