+APP.2.1.A13 Protection of Communications with Directory Services (S)

APP.2.1.A13 Protection of Communications with Directory Services (S)

All communications with a directory service SHOULD be encrypted using SSL/TLS. The communication endpoint of the directory service server SHOULD NOT be reachable from the Internet.

Exchanges of data between clients and the directory service server SHOULD be secured. The data that may be accessed SHOULD be defined. To protect the service entries in a service registry in the case of a service-oriented architecture (SOA), all requests sent to the registry SHOULD be checked to see if the user is valid.

1. Panoramica

1.1 Riferimenti

1.2 Requisiti identificati

1.3 Regolamentazioni correlate

2. Requisiti identificati

Requisiti

3. Regolamentazioni correlate

Regolamentazioni

Ticket collegati

Collegamenti
blocks G 0.14 Interception of Information / Espionage
blocks G 0.15 Eavesdropping
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.31 Incorrect Use or Administration of Devices and Systems
blocks G 0.36 Identity theft
blocks G 0.38 Misuse of Personal Information
blocks G 0.45 Data Loss
blocks G 0.46 Loss of Integrity of Sensitive Information