+OPS.1.1.2.A17 Dual Control in IT Administration (H)

OPS.1.1.2.A17 Dual Control in IT Administration (H)

For particularly security-critical IT systems, access to credentials with administrative authorisations SHOULD be implemented in a way that always requires two employees. In other words, one administrator SHOULD perform the administrative tasks at hand under the supervision of a second administrator.

1. Panoramica

1.1 Riferimenti

1.2 Requisiti identificati

1.3 Regolamentazioni correlate

2. Requisiti identificati

Requisiti

3. Regolamentazioni correlate

Regolamentazioni

Ticket collegati

Collegamenti
blocks G 0.14 Interception of Information / Espionage
blocks G 0.21 Manipulation with Hardware or Software
blocks G 0.22 Manipulation of Information
blocks G 0.27 Lack of Resources
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.31 Incorrect Use or Administration of Devices and Systems
blocks G 0.32 Misuse of Authorisation
blocks G 0.33 Shortage of Personnel
blocks G 0.35 Coercion, Blackmail or Corruption
blocks G 0.37 Repudiation of Actions
blocks G 0.42 Social Engineering