+OPS.1.1.3.A10 Assuring the Integrity and Authenticity of Software Packages (S)

OPS.1.1.3.A10 Assuring the Integrity and Authenticity of Software Packages (S)

The authenticity and integrity of software packages SHOULD be ensured throughout the patch or change process. To this end, it SHOULD be checked whether checksums or digital signatures are available for the software packages used. If there are, these SHOULD be checked before a package is installed. Furthermore, it SHOULD be ensured that the programs required for checking are available.

As a matter of principle, software and updates SHOULD only be obtained from trustworthy sources.

1. Panoramica

1.1 Riferimenti

1.2 Requisiti identificati

1.3 Regolamentazioni correlate

2. Requisiti identificati

Requisiti

3. Regolamentazioni correlate

Regolamentazioni

Ticket collegati

Collegamenti
blocks G 0.20 Information or Products from an Unreliable Source
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.28 Software Vulnerabilities or Errors
blocks G 0.39 Malware
blocks G 0.46 Loss of Integrity of Sensitive Information