+SYS.1.6.A6 Use of Secure Images (B)

SYS.1.6.A6 Use of Secure Images (B)

It MUST be ensured that all images used originate from trusted sources. The creator of each image MUST be clearly identifiable.

Sources MUST be selected on the basis of whether the creator of a given image regularly checks the included software for security problems, fixes and documents them, and provides corresponding guarantees to customers.

The utilised version of base images MUST NOT be deprecated. Unique version numbers MUST be provided. If an image with a newer version number is available, a patch and change management process MUST check whether and how it can be rolled out.

1. Panoramica

1.1 Riferimenti

1.2 Requisiti identificati

1.3 Regolamentazioni correlate

2. Requisiti identificati

Requisiti

3. Regolamentazioni correlate

Regolamentazioni

Ticket collegati

Collegamenti
blocks G 0.14 Interception of Information / Espionage
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.20 Information or Products from an Unreliable Source
blocks G 0.21 Manipulation with Hardware or Software
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.25 Failure of Devices or Systems
blocks G 0.27 Lack of Resources
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.31 Incorrect Use or Administration of Devices and Systems
blocks G 0.32 Misuse of Authorisation
blocks G 0.37 Repudiation of Actions
blocks G 0.39 Malware
blocks G 0.40 Denial of Service
blocks G 0.46 Loss of Integrity of Sensitive Information