+INF.14.A11 Securing Freely Accessible Ports and Access Points in BACS (S) [Planner]

INF.14.A11 Securing Freely Accessible Ports and Access Points in BACS (S) [Planner]

The connection of components (especially unauthorised, unknown components and third-party devices) SHOULD be controlled and restricted, particularly in the case of freely accessible Ethernet ports, USB ports, and other BACS interfaces.

Connections of unauthorised or unknown components SHOULD be included in corresponding event logging. Direct IP-based communication from such components to BACS SHOULD be prevented (see INF.14.A13).

For freely accessible LAN or WLAN connections, network access control in line with IEEE 802.1X or comparable security mechanisms SHOULD be used. This SHOULD include locating insufficiently authenticated and authorised components in separate network segments.

Freely accessible interfaces used for temporary maintenance purposes (such as USB ports on BACS components) SHOULD only be activated when required.

1. Pregled

1.1 Reference

1.2 Utvrđeni zahtjevi

1.3 Povezani propisi

2. Utvrđeni zahtjevi

Zahtjevi

3. Povezani propisi

Propisi

Povezani zadaci

Poveznice
blocks G 0.14 Interception of Information / Espionage
blocks G 0.15 Eavesdropping
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.22 Manipulation of Information
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.40 Denial of Service
blocks G 0.43 Attack with Specially Crafted Messages