+CON.1.A12 Secure Separation of Roles When Using Crypto Modules [IT Operation Department] (H)

CON.1.A12 Secure Separation of Roles When Using Crypto Modules [IT Operation Department] (H)

User roles SHOULD be defined when configuring a crypto module. Access control and authentication mechanisms SHOULD be used in order to verify whether an employee is actually allowed to use the desired service. The crypto module SHOULD be configured such that the authentication information has to be re-entered every time there is a role change or a specified period of inactivity as passed.

1. Pregled

1.1 Reference

1.2 Utvrđeni zahtjevi

1.3 Povezani propisi

2. Utvrđeni zahtjevi

Zahtjevi

3. Povezani propisi

Propisi

Povezani zadaci

Poveznice
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.45 Data Loss