+OPS.1.2.5.A19 Remote Maintenance by Third Parties (S)

OPS.1.2.5.A19 Remote Maintenance by Third Parties (S)

If remote maintenance is carried out by external parties, all related activities SHOULD be supervised by internal staff. All remote maintenance processes performed by third parties SHOULD be recorded. Contractual arrangements MUST be made with external maintenance personnel regarding the security of the IT systems and information concerned. If a service provider performs remote maintenance for several clients, it MUST be ensured that the networks of its clients are not connected. The duties and qualifications of external maintenance personnel SHOULD be specified in a contract.

Remote maintenance interfaces SHOULD be configured in such a way that it is only possible for the service provider to access the IT systems and network segments needed for their work.

1. Áttekintés

1.1 Hivatkozások

1.2 Azonosított követelmények

1.3 Kapcsolódó szabályozások

2. Azonosított követelmények

Követelmények

3. Kapcsolódó szabályozások

Szabályozások

Kapcsolt feladatok

Kapcsolatok
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.21 Manipulation with Hardware or Software
blocks G 0.39 Malware