+SYS.3.2.1.A4 Use of an Access Control Mechanism [User] (B)
|
SYS.3.2.1.A4 Use of an Access Control Mechanism [User] (B)
Smartphones and tablets MUST be protected with an appropriately complex device lock code. Screen locking MUST be used. The display of confidential information on lock screens MUST be disabled. All mobile devices MUST automatically activate their screen lock after a reasonably short period of time. This time period MUST be related to the required level of protection. After each failed attempt to unlock a device, the user SHOULD be required to wait longer before trying again. The number of device lock codes after which a code may be repeated SHOULD be specified. After several failed attempts to unlock a mobile device's screen, the device SHOULD perform a factory reset. The data or encryption keys at hand SHOULD be deleted securely in this process. When changing their passwords, users SHOULD avoid choosing a new password that they have used recently.
1. Pregled
1.1 Reference
1.2 Utvrđeni zahtjevi
1.3 Povezani propisi
2. Utvrđeni zahtjevi
3. Povezani propisi
Povezani zadaci
|