+APP.6.A6 Consideration of Recommended Security Requirements (S)

APP.6.A6 Consideration of Recommended Security Requirements (S)

An organisation SHOULD consider the following security requirements in the requirements catalogue for the software at hand:

  • The software SHOULD include general security functions that are required in the application context in question, such as logging and authentication.
  • The software SHOULD make it possible to use the hardening functions of the operational environment. In particular, the hardening capabilities of the intended operating system and execution environment SHOULD be considered.
  • If the software transmits information over unsecured public networks, it SHOULD use secure encryption functions that reflect the current state of the art. In addition, the transmitted data SHOULD be checked for integrity using checksums or digital signatures.
  • If the software uses certificates, it SHOULD offer the option to display the certificates transparently. It SHOULD also be possible to block certificates, withdraw trust from them, or add an organisation's own certificates.

The functions of the software that pertain to the security requirements at hand SHOULD be used in actual operations.

1. Pregled

1.1 Reference

1.2 Utvrđeni zahtjevi

1.3 Povezani propisi

2. Utvrđeni zahtjevi

Zahtjevi

3. Povezani propisi

Propisi

Povezani zadaci

Poveznice
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.46 Loss of Integrity of Sensitive Information