+OPS.1.2.5.A24 Securing Integrated Remote Maintenance Systems (S)

OPS.1.2.5.A24 Securing Integrated Remote Maintenance Systems (S)

When procuring new IT systems, it SHOULD be checked whether these IT systems or their individual components have functions for remote maintenance. If these functions are not used, they SHOULD be disabled. The functions SHOULD also be disabled if they are compromised by known security vulnerabilities.

If remote maintenance functions integrated into the firmware of individual components are used, their functions and access to them SHOULD be restricted to the greatest extent possible. The remote maintenance functions SHOULD only be accessible from a separate management network.

1. Panoramica

1.1 Riferimenti

1.2 Requisiti identificati

1.3 Regolamentazioni correlate

2. Requisiti identificati

Requisiti

3. Regolamentazioni correlate

Regolamentazioni

Ticket collegati

Collegamenti
blocks G 0.20 Information or Products from an Unreliable Source
blocks G 0.25 Failure of Devices or Systems
blocks G 0.31 Incorrect Use or Administration of Devices and Systems