+IND.3.2.A14 Technical Control of Remote Maintenance Sessions (H) [Planner, Data Protection Officer]

IND.3.2.A14 Technical Control of Remote Maintenance Sessions (H) [Planner, Data Protection Officer]

Supplementary to IND.3.2.A10 Observation and Control of OT Remote Maintenance Sessions, OT remote maintenance sessions SHOULD be continuously regulated by a technical solution. In this context, command-level activities (i.e. manual and automated commands) SHOULD be technically monitored and automatically prevented where necessary.

In addition, sessions SHOULD be monitored across components. If technical monitoring is used, an alarm SHOULD be triggered for anomalies in user behaviour and for specific rule violations (e.g. as soon as a sudden increase in communication volume is detected).

1. Forbhreathnú

1.1 Tagairtí

1.2 Ceanglais aitheanta

1.3 Rialacháin ghaolmhara

2. Ceanglais aitheanta

Ceanglais

3. Rialacháin ghaolmhara

Rialacháin

Saincheisteanna nasctha

Naisc
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.31 Incorrect Use or Administration of Devices and Systems
blocks G 0.32 Misuse of Authorisation
blocks G 0.37 Repudiation of Actions