|
is blocked by
|
CON.1.A13 Operating System Security Requirements When Using Crypto Modules (H) |
|
is blocked by
|
CON.1.A16 Physical Protection of Crypto Modules [IT Operation Department] (H) |
|
is blocked by
|
OPS.1.1.2.A3 Controlled Hiring of IT Administrators (B) |
|
is blocked by
|
OPS.1.1.2.A4 Termination of IT Administration Duties [Human Resources Department] (B) |
|
is blocked by
|
OPS.1.1.2.A5 Verifying Administrative Tasks (B) |
|
is blocked by
|
OPS.1.1.2.A6 Protecting Administrative Tasks (B) |
|
is blocked by
|
OPS.1.1.2.A7 Regulation of IT Administration Tasks (S) |
|
is blocked by
|
OPS.1.1.2.A12 Provisions for Maintenance and Repairs (S) |
|
is blocked by
|
OPS.1.1.2.A14 Security Vetting of Administrators [Human Resources Department] (H) |
|
is blocked by
|
OPS.1.1.2.A15 Division of Administrative Activities (H) |
|
is blocked by
|
OPS.1.1.2.A16 Access Restrictions for Administrative Access (H) |
|
is blocked by
|
OPS.1.1.2.A17 Dual Control in IT Administration (H) |
|
is blocked by
|
OPS.1.1.2.A18 Consistent Logging of Administrative Activities (H) |
|
is blocked by
|
OPS.1.1.7.A3 Time Synchronisation for System Management (B) |
|
is blocked by
|
OPS.1.1.7.A4 Protection of System Management Communication (B) |
|
is blocked by
|
OPS.1.1.7.A5 Mutual Authentication Between the System Management Solution and Systems to be Managed (B) |
|
is blocked by
|
OPS.1.1.7.A6 Securing Access to the System Management Solution (B) |
|
is blocked by
|
OPS.1.1.7.A7 Definition of a Security Policy for System Management (S) |
|
is blocked by
|
OPS.1.1.7.A10 Concept for Secure Operation of the System Management Solution (S) |
|
is blocked by
|
OPS.1.1.7.A11 Regular Gap Analysis Within the Framework of System Management (S) |
|
is blocked by
|
OPS.1.1.7.A12 Triggering Actions by the Central Components of the System Management Solution (S) |
|
is blocked by
|
OPS.1.1.7.A13 Commitment to the Use of Designated Interfaces for System Management (S) |
|
is blocked by
|
OPS.1.1.7.A15 Status Monitoring, Logging, and Alerting of Relevant Events in the System Management Solution and the Systems to be Managed (S) |
|
is blocked by
|
OPS.1.1.7.A17 Control of System Management Communication (S) |
|
is blocked by
|
OPS.1.1.7.A18 System State Verification (S) |
|
is blocked by
|
OPS.1.1.7.A19 Securing System Management Communications Between the System Management Solution and the Systems Being Managed (S) |
|
is blocked by
|
OPS.1.1.7.A21 Physical Separation of the Central System Management Network (H) |
|
is blocked by
|
OPS.1.1.7.A22 Integration of System Management into Automated Detection Systems (S) |
|
is blocked by
|
OPS.1.1.7.A23 Cross-Site Time Synchronisation for System Management (H) |
|
is blocked by
|
OPS.1.1.7.A24 Automated Checking of Security-Relevant Configurations by Suitable Detection Systems (H) |
|
is blocked by
|
OPS.1.1.7.A25 Logging and Regulation of System Management Meetings (H) |
|
is blocked by
|
OPS.1.1.7.A26 Decoupling of Access to the System Management Solution (H) |
|
is blocked by
|
OPS.1.2.4.A1 Rules on Teleworking [Supervisor, Human Resources Department] (B) |
|
is blocked by
|
OPS.1.2.4.A2 Security-Related Requirements for Teleworking Computers (B) |
|
is blocked by
|
OPS.1.2.4.A5 Employee Awareness and Training (B) |
|
is blocked by
|
OPS.1.2.4.A7 Regulations on Using Communication Capabilities for Teleworking [IT Operation Department, Employee] (S) |
|
is blocked by
|
OPS.1.2.5.A17 Authentication Mechanisms for Remote Maintenance (S) |
|
is blocked by
|
OPS.1.2.5.A19 Remote Maintenance by Third Parties (S) |
|
is blocked by
|
OPS.1.2.5.A14 Dedicated Clients for Remote Maintenance (H) |
|
is blocked by
|
DER.1.A16 Use of Detection Systems in Accordance with Protection Requirements (H) |
|
is blocked by
|
DER.2.3.A2 Deciding on a Cleaning Strategy (B) |
|
is blocked by
|
DER.2.3.A4 Blocking and Changing Access Data and Cryptographic Keys (B) |
|
is blocked by
|
DER.2.3.A7 Targeted System Hardening (S) |
|
is blocked by
|
DER.2.3.A9 Hardware Replacement in Affected IT Systems (H) |
|
is blocked by
|
DER.2.3.A10 Modifications to Help Thwart a Repeat Attack (H) |
|
is blocked by
|
APP.1.1.A6 Testing New Versions of Office Products (S) |
|
is blocked by
|
APP.1.1.A11 Controlled Use of Extensions for Office Products (S) |
|
is blocked by
|
APP.1.4.A5 Minimising and Checking App Authorisations [Process Owner] (B) |
|
is blocked by
|
APP.1.4.A3 Distributing Sensitive Apps (S) |
|
is blocked by
|
APP.1.4.A15 Performing Penetration Tests for Apps (H) |
|
is blocked by
|
APP.2.1.A2 Planning the Use of Directory Services [Data Protection Officer, Process Owner] (B) |
|
is blocked by
|
APP.2.1.A3 Setting Up Access Authorisations for Directory Services [Process Owner] (B) |
|
is blocked by
|
APP.2.1.A6 Secure Operation of Directory Services (B) |
|
is blocked by
|
APP.2.2.A1 Planning Active Directory [Process Owner] (B) |
|
is blocked by
|
APP.2.2.A2 Planning of Active Directory Administration [Process Owner] (B) |
|
is blocked by
|
APP.2.2.A3 Planning of Group Policy in Windows (B) |
|
is blocked by
|
APP.2.2.A5 Hardening Active Directory (B) |
|
is blocked by
|
APP.2.2.A6 Maintaining the Operational Continuity of Active Directory (B) |
|
is blocked by
|
APP.2.2.A7 Implementation of Secure Administration Methods for Active Directory [Process Owner] (B) |
|
is blocked by
|
APP.2.2.A8 Configuration of Secure Channel in Windows (S) |
|
is blocked by
|
APP.2.2.A9 Authentication Protection When Using Active Directory (S) |
|
is blocked by
|
APP.2.2.A14 Use of Dedicated Privileged Administration Systems (H) |
|
is blocked by
|
APP.2.2.A15 Separation of Administration and Production Environments (H) |
|
is blocked by
|
APP.3.2.A1 Secure Web Server Configuration (B) |
|
is blocked by
|
APP.3.2.A2 Protection of Web Server Files (B) |
|
is blocked by
|
APP.4.2.A26 Protection of Customers' Own Code in the SAP ERP System (S) |
|
is blocked by
|
APP.4.2.A30 Implementation of Continuous Monitoring of Security Settings (S) |
|
is blocked by
|
APP.4.2.A32 Real-Time Detection and Alerts for Irregular Processes (H) |
|
is blocked by
|
APP.4.3.A3 Basic Hardening of Database Management Systems (B) |
|
is blocked by
|
APP.4.3.A4 Controlled Creation of New Databases (B) |
|
is blocked by
|
APP.4.3.A9 Backing Up a Database System (B) |
|
is blocked by
|
APP.4.3.A12 Uniform Configuration Standard for Database Management Systems (S) |
|
is blocked by
|
APP.4.3.A17 Data Transfer or Migration [Process Owner] (S) |
|
is blocked by
|
APP.4.3.A19 Protection Against Malicious Database Scripts [Developer] (S) |
|
is blocked by
|
APP.4.3.A21 Use of Database Security Tools (H) |
|
is blocked by
|
APP.4.3.A23 Archiving (H) |
|
is blocked by
|
APP.4.3.A25 Security Audits of Database Systems (H) |
|
is blocked by
|
APP.4.4.A2 Planning Automation with CI/CD (B) |
|
is blocked by
|
APP.4.4.A4 Separation of Pods (B) |
|
is blocked by
|
APP.4.4.A7 Separation of Networks for Kubernetes (S) |
|
is blocked by
|
APP.4.4.A8 Securing Configuration Files on Kubernetes (S) |
|
is blocked by
|
APP.4.4.A9 Use of Kubernetes Service Accounts (S) |
|
is blocked by
|
APP.4.4.A10 Securing Automation Processes (S) |
|
is blocked by
|
APP.4.4.A12 Securing Infrastructure Applications (S) |
|
is blocked by
|
APP.4.4.A13 Automated Configuration Auditing (H) |
|
is blocked by
|
SYS.1.1.A1 Appropriate Installation (B) |
|
is blocked by
|
SYS.1.1.A5 Protection of Interfaces (B) |
|
is blocked by
|
SYS.1.1.A37 Encapsulation of Security-Critical Applications and Operating System Components (S) |
|
is blocked by
|
SYS.1.1.A27 Host-Based Attack Detection (H) |
|
is blocked by
|
SYS.1.1.A36 Protecting the Boot Process (H) |
|
is blocked by
|
SYS.1.1.A38 Hardening of the Host System by Means of a Read-Only File System (H) |
|
is blocked by
|
SYS.1.2.2.A2 Secure Installation of Windows Server 2012 (B) |
|
is blocked by
|
SYS.1.2.2.A3 Secure Administration of Windows Server 2012 (B) |
|
is blocked by
|
SYS.1.2.2.A4 Secure Configuration of Windows Server 2012 (S) |
|
is blocked by
|
SYS.1.2.2.A5 Protection Against Malware on Windows Server 2012 (S) |
|
is blocked by
|
SYS.1.2.2.A6 Secure Authentication and Authorisation in Windows Server 2012 (S) |
|
is blocked by
|
SYS.1.2.2.A8 Protection of System Integrity (S) |
|
is blocked by
|
SYS.1.2.2.A11 Attack Detection in Windows Server 2012 (H) |
|
is blocked by
|
SYS.1.2.2.A14 Shutting Down Encrypted Servers and Virtual Machines (H) |
|
is blocked by
|
SYS.1.3.A3 No Automatic Integration of Removable Drives (B) |
|
is blocked by
|
SYS.1.3.A6 Managing Users and Groups (S) |
|
is blocked by
|
SYS.1.5.A27 Use of Certified Virtualisation Software (H) |
|
is blocked by
|
SYS.1.6.A1 Planning Container Use (B) |
|
is blocked by
|
SYS.1.6.A2 Container Management Planning (B) |
|
is blocked by
|
SYS.1.6.A3 Secure Use of Containerised IT Systems (B) |
|
is blocked by
|
SYS.1.6.A4 Planning the Provision and Distribution of Images (B) |
|
is blocked by
|
SYS.1.6.A6 Use of Secure Images (B) |
|
is blocked by
|
SYS.1.6.A9 Suitability for Container Operation (S) |
|
is blocked by
|
SYS.1.6.A10 Policy for Images and Container Operation (S) |
|
is blocked by
|
SYS.1.6.A12 Distribution of Secure Images (S) |
|
is blocked by
|
SYS.1.6.A13 Release of Images (S) |
|
is blocked by
|
SYS.1.6.A14 Updating Images (S) |
|
is blocked by
|
SYS.1.6.A16 Administrative Remote Access to Containers (S) |
|
is blocked by
|
SYS.1.6.A19 Including Data Stores in Containers (S) |
|
is blocked by
|
SYS.1.6.A20 Protection of Configuration Data (S) |
|
is blocked by
|
SYS.1.6.A25 High Availability of Containerised Applications (H) |
|
is blocked by
|
SYS.1.7.A1 Use of Restrictive z/OS IDs (B) |
|
is blocked by
|
SYS.1.7.A2 Protection of Security-Critical z/OS Utilities (B) |
|
is blocked by
|
SYS.1.7.A3 Maintenance of Z Systems (B) |
|
is blocked by
|
SYS.1.7.A5 Use and Protection of System-Related z/OS Terminals (B) |
|
is blocked by
|
SYS.1.7.A6 Use and Protection of the Remote Support Facility (B) |
|
is blocked by
|
SYS.1.7.A7 Restrictive Authorisation in z/OS (B) |
|
is blocked by
|
SYS.1.7.A8 Use of the z/OS Security System RACF (B) |
|
is blocked by
|
SYS.1.7.A9 Multi-Client Capability in z/OS (B) |
|
is blocked by
|
SYS.1.7.A14 Reporting on the Secure Operation of z/OS (S) |
|
is blocked by
|
SYS.1.7.A16 Monitoring of z/OS Systems (S) |
|
is blocked by
|
SYS.1.7.A19 Protection of z/OS Transaction Monitors (S) |
|
is blocked by
|
SYS.1.7.A22 Protection of the Operating Functions of z/OS (S) |
|
is blocked by
|
SYS.1.7.A23 Protection of z/VM (S) |
|
is blocked by
|
SYS.1.7.A24 Administration of Storage Media in z/OS Systems (S) |
|
is blocked by
|
SYS.1.7.A26 Workload Management for z/OS Systems (S) |
|
is blocked by
|
SYS.1.7.A29 Protection of Unix System Services on z/OS Systems (S) |
|
is blocked by
|
SYS.1.7.A33 Separation of Test and Production Systems in z/OS (H) |
|
is blocked by
|
SYS.1.7.A34 Batch Job Planning for z/OS Systems (H) |
|
is blocked by
|
SYS.1.7.A35 Use of RACF Exits (H) |
|
is blocked by
|
SYS.2.1.A6 Using Malware Protection Programs (B) |
|
is blocked by
|
SYS.2.1.A8 Protecting the Boot Process (B) |
|
is blocked by
|
SYS.2.1.A13 Access to Runtime Environments with Unmonitored Code Execution (S) |
|
is blocked by
|
SYS.2.1.A14 Updates and Patches for Firmware, Operating Systems, and Applications (S) |
|
is blocked by
|
SYS.2.1.A15 Secure Installation and Configuration of Clients (S) |
|
is blocked by
|
SYS.2.1.A20 Protecting the Administration Process for Clients (S) |
|
is blocked by
|
SYS.2.1.A23 Preferences for Client-Server Services (S) |
|
is blocked by
|
SYS.2.1.A26 Protection Against Exploitation of Vulnerabilities in Applications (S) |
|
is blocked by
|
SYS.2.1.A34 Encapsulation of Security-Critical Applications and Operating System Components (H) |
|
is blocked by
|
SYS.2.1.A29 System and Client Monitoring (S) |
|
is blocked by
|
SYS.2.1.A30 Setting Up a Reference Environment for Clients (H) |
|
is blocked by
|
SYS.2.1.A32 Use of Additional Safeguards to Protect Against Exploits (H) |
|
is blocked by
|
SYS.2.1.A33 Using Execution Control (H) |
|
is blocked by
|
SYS.2.1.A36 Self-Managed Use of SecureBoot and TPM (H) |
|
is blocked by
|
SYS.2.1.A40 Operational Documentation (H) |
|
is blocked by
|
SYS.2.3.A2 Selection of an Appropriate Distribution (B) |
|
is blocked by
|
SYS.2.3.A4 Kernel Updates on Unix-Like Systems (B) |
|
is blocked by
|
SYS.2.3.A5 Secure Installation of Software Packages (B) |
|
is blocked by
|
SYS.2.3.A6 No Automatic Integration of Removable Drives [User] (S) |
|
is blocked by
|
SYS.2.3.A7 Restrictive Granting of Access Rights for Files and Directories (S) |
|
is blocked by
|
SYS.2.3.A8 Use of Techniques to Restrict the Rights of Applications (S) |
|
is blocked by
|
SYS.2.3.A9 Secure Use of Passwords in the Command Line [User] (S) |
|
is blocked by
|
SYS.2.3.A12 Secure Use of Appliances (S) |
|
is blocked by
|
SYS.2.3.A14 Protection Against the Use of Unauthorised Peripheral Devices (H) |
|
is blocked by
|
SYS.2.3.A15 Additional Protection Prior to Executing Undesired Files (H) |
|
is blocked by
|
SYS.2.3.A17 Additional Prevention of Further Intrusion When Vulnerabilities Are Exploited (H) |
|
is blocked by
|
SYS.2.3.A18 Additional Kernel Protection (H) |
|
is blocked by
|
SYS.2.4.A2 Using the Security Functions Integrated into macOS (B) |
|
is blocked by
|
SYS.2.4.A5 Disabling Security-Critical Functions in macOS (S) |
|
is blocked by
|
SYS.2.4.A9 Using Additional Protection Programs in macOS (S) |
|
is blocked by
|
SYS.2.4.A12 Firmware Password and Boot Protection on Macs [User] (H) |
|
is blocked by
|
SYS.3.2.2.A4 Distribution of the Basic Configuration to Mobile Devices (B) |
|
is blocked by
|
SYS.3.2.2.A5 Installing the MDM Client (B) |
|
is blocked by
|
SYS.3.2.2.A20 Regular Review of the MDM System (B) |
|
is blocked by
|
SYS.3.2.2.A7 Installation of Apps (S) |
|
is blocked by
|
SYS.3.2.2.A23 Enforcing Compliance Requirements (H) |
|
is blocked by
|
SYS.3.2.3.A1 Strategy for Using iOS Devices (B) |
|
is blocked by
|
SYS.3.2.3.A7 Preventing Unauthorised Deletion of Configuration Profiles (B) |
|
is blocked by
|
SYS.3.2.3.A13 Using the “iOS Restrictions” Configuration Option (S) |
|
is blocked by
|
SYS.3.2.3.A17 Using the Device Code History (S) |
|
is blocked by
|
SYS.3.2.3.A21 Installation of Apps and Integration of the Apple App Store (S) |
|
is blocked by
|
SYS.3.2.3.A26 No Connections to Host Systems (H) |
|
is blocked by
|
SYS.3.2.4.A2 Disabling Developer Options (S) |
|
is blocked by
|
SYS.4.1.A2 Suitable Siting and Access to Printers, Copiers, and All-in-One Devices (B) |
|
is blocked by
|
SYS.4.1.A21 Extended Protection of Printers, Copiers, and All-in-One Devices (H) |
|
is blocked by
|
SYS.4.3.A3 Logging Security-Relevant Events in Embedded Systems (B) |
|
is blocked by
|
SYS.4.3.A7 Hardware Realisation of the Features of Embedded Systems [Developer, Planner, Procurement Department] (S) |
|
is blocked by
|
SYS.4.3.A8 Using a Secure Operating System for Embedded Systems [Developer, Planner, Procurement Department] (S) |
|
is blocked by
|
SYS.4.3.A9 Use of Cryptographic Processors or Coprocessors in Embedded Systems [Developer, Planner, Procurement Department] (S) |
|
is blocked by
|
SYS.4.3.A12 Selection of a Trustworthy Supplier and Logistics Chain and a Qualified Manufacturer for Embedded Systems [Procurement Department] (H) |
|
is blocked by
|
SYS.4.3.A13 Use of a Certified Operating System [Developer, Planner, Procurement Department] (H) |
|
is blocked by
|
SYS.4.3.A14 Secured and Authenticated Boot Process for Embedded Systems [Developer, Planner, Procurement Department] (H) |
|
is blocked by
|
SYS.4.3.A15 Storage Protection in Embedded Systems [Developer, Planner, Procurement Department] (H) |
|
is blocked by
|
SYS.4.3.A16 Tamper Protection for Embedded Systems [Planner] (H) |
|
is blocked by
|
SYS.4.3.A17 Automatic Monitoring of Assembly Functions [Planner, Procurement Department] (H) |
|
is blocked by
|
SYS.4.3.A18 Resistance of Embedded Systems to Side-Channel Attacks [Developer, Procurement Department] (H) |
|
is blocked by
|
SYS.4.4.A2 Authentication (B) |
|
is blocked by
|
SYS.4.4.A5 Restriction of Network Access (B) |
|
is blocked by
|
SYS.4.4.A6 Integration of IoT Devices into Organisation Security Policies (S) |
|
is blocked by
|
SYS.4.4.A7 Planning the Use of IoT Devices (S) |
|
is blocked by
|
SYS.4.4.A9 Controlling the Use of IoT Devices (S) |
|
is blocked by
|
SYS.4.4.A10 Secure Installation and Configuration of IoT Devices (S) |
|
is blocked by
|
SYS.4.4.A13 Deactivation and Uninstallation of Unnecessary Components (S) |
|
is blocked by
|
SYS.4.4.A15 Restrictive Granting of Access Rights (S) |
|
is blocked by
|
SYS.4.4.A17 Monitoring Network Traffic on IoT Devices (S) |
|
is blocked by
|
SYS.4.4.A18 Logging Security-Relevant Events on IoT Devices (S) |
|
is blocked by
|
SYS.4.4.A19 Protection of Administration Interfaces (S) |
|
is blocked by
|
SYS.4.4.A22 System Monitoring (H) |
|
is blocked by
|
SYS.4.4.A23 Auditing of IoT Devices (H) |
|
is blocked by
|
SYS.4.5.A1 Raising Staff Awareness of Secure Handling of Removable Media (B) |
|
is blocked by
|
SYS.4.5.A2 Reporting Losses / Tampering [User] (B) |
|
is blocked by
|
IND.1.A18 Logging [OT Operations)] (B) |
|
is blocked by
|
IND.1.A4 Documentation of OT Infrastructure (S) |
|
is blocked by
|
IND.1.A8 Secure Administration [IT Operation Department] (S) |
|
is blocked by
|
IND.1.A22 Central System Logging and System Monitoring [OT Operations] (S) |
|
is blocked by
|
IND.2.1.A1 Restriction of Access to Configuration and Maintenance Interfaces [OT Operations] (B) |
|
is blocked by
|
IND.2.1.A2 Using Secure Transmission Protocols for Configuration and Maintenance [Maintenance Personnel, OT Operations] (B) |
|
is blocked by
|
IND.2.1.A4 Disabling or Uninstalling Unused Services, Functions, and Interfaces [Maintenance Personnel, OT Operations] (B) |
|
is blocked by
|
IND.2.1.A6 Network Segmentation [OT Operations, Planner] (B) |
|
is blocked by
|
IND.2.1.A8 Protection Against Malware [OT Operations] (S) |
|
is blocked by
|
IND.2.1.A11 Maintenance of ICS Components [Employee, OT Operations, Maintenance Personnel] (S) |
|
is blocked by
|
IND.2.1.A13 Appropriate Commissioning of ICS Components [OT Operations] (S) |
|
is blocked by
|
IND.2.1.A16 Protecting External Interfaces [OT Operations] (S) |
|
is blocked by
|
IND.2.1.A17 Use of Secure Protocols for the Transmission of Measurement and Control Data [OT Operations] (S) |
|
is blocked by
|
IND.2.1.A19 Security Tests [OT Operations] (H) |
|
is blocked by
|
IND.2.1.A20 Trustworthy Code [OT Operations] (H) |
|
is blocked by
|
IND.2.2.A1 Extended System Documentation for Programmable Logic Controllers [OT Operations] (S) |
|
is blocked by
|
IND.2.2.A3 Time Synchronisation [OT Operations] (S) |
|
is blocked by
|
IND.2.3.A2 Calibration of Sensors [Maintenance Personnel] (S) |
|
is blocked by
|
IND.2.3.A3 Wireless Communication (H) |
|
is blocked by
|
IND.2.4.A1 Remote Maintenance by Mechanical and System Engineers [OT Operations] (B) |
|
is blocked by
|
IND.2.4.A2 Operation After End of Warranty [OT Operations] (B) |
|
is blocked by
|
IND.2.7.A1 Recording and Documentation [Planner, Maintenance Personnel] (B) |
|
is blocked by
|
IND.2.7.A2 Specified Use of Hardware and Software Components [Maintenance Personnel] (B) |
|
is blocked by
|
IND.2.7.A3 Changing the Application Program on the Logic System [Maintenance Personnel] (B) |
|
is blocked by
|
IND.2.7.A4 Making Information Security an Integral Part of Functional Safety Management [ICS Information Security Officer] (S) |
|
is blocked by
|
IND.2.7.A6 Secure Planning and Specification of SIS [Planner, Maintenance Personnel, ICS Information Security Officer] (S) |
|
is blocked by
|
IND.2.7.A7 Separation and Independence of the SIS from the Environment [Planner, Maintenance Personnel] (S) |
|
is blocked by
|
IND.2.7.A8 Secure Transfer of Engineering Data to SIS [Planner, Maintenance Personnel, ICS Information Security Officer] (S) |
|
is blocked by
|
IND.2.7.A9 Protection of Data and Signal Connections [Planner, Maintenance Personnel, ICS Information Security Officer] (S) |
|
is blocked by
|
IND.2.7.A11 Dealing with Integrated Systems [Planner, Maintenance Personnel, ICS Information Security Officer] (S) |
|
is blocked by
|
IND.2.7.A12 Ensuring the Integrity and Authenticity of Application Programs and Configuration Data [Planner] (H) |
|
is blocked by
|
NET.3.1.A1 Secure Basic Configuration of a Router or Switch (B) |
|
is blocked by
|
NET.3.1.A5 Protection Against Fragmentation Attacks (B) |
|
is blocked by
|
NET.3.1.A25 Advanced Integrity Protection for Configuration Files (H) |
|
is blocked by
|
NET.3.1.A27 Bandwidth Management for Critical Applications and Services (H) |
|
is blocked by
|
NET.3.2.A4 Secure Firewall Configuration (B) |
|
is blocked by
|
NET.3.2.A6 Protection of Administration Interfaces (B) |
|
is blocked by
|
NET.3.2.A9 Logging (B) |
|
is blocked by
|
NET.3.2.A22 Secure Time Synchronisation (S) |
|
is blocked by
|
NET.3.2.A24 Audits and Penetration Tests (S) |
|
is blocked by
|
NET.3.2.A25 Advanced Integrity Protection for Configuration Files (H) |
|
is blocked by
|
NET.3.2.A27 Use of Different Firewall Operating Systems and Products in Multi-Layer Firewall Architecture (H) |
|
is blocked by
|
NET.4.1.A7 Suitable Installation of the Telecommunications System (S) |
|
is blocked by
|
NET.4.1.A16 Securing End Devices in Openly Accessible Rooms (S) |
|
is blocked by
|
NET.4.1.A17 Maintenance of Telecommunications Systems (S) |
|
is blocked by
|
NET.4.1.A18 Increased Access Protection (H) |
|
is blocked by
|
NET.4.2.A3 Secure Administration and Configuration of VoIP End Devices (B) |
|
is blocked by
|
NET.4.2.A5 Secure Configuration of VoIP Middleware (B) |
|
is blocked by
|
INF.6.A2 Site Access Regulations and Control [Building Services] (B) |
|
is blocked by
|
INF.6.A3 Protection Against Dust and Other Contamination (B) |
|
is blocked by
|
INF.6.A4 Closed Windows and Locked Doors [Employee] (B) |
|
is blocked by
|
INF.6.A8 Secure Doors and Windows [Planner] (S) |
|
is blocked by
|
INF.7.A7 Suitable Storage of Official Documents and Storage Media [Employee, Building Services] (S) |
|
is blocked by
|
INF.9.A1 Appropriate Selection and Usage of a Mobile Workplace [IT Operation Department] (B) |
|
is blocked by
|
INF.9.A2 Regulations for Mobile Workplaces [Human Resources Department] (B) |
|
is blocked by
|
INF.9.A3 Site and Data Access Protection [Central Administration, Employee] (B) |
|
is blocked by
|
INF.9.A8 Security Policy for Mobile Workplaces [IT Operation Department] (S) |
|
is blocked by
|
INF.10.A1 Secure Use of Meeting, Event, and Training Rooms [Building Services, IT Operation Department] (B) |
|
is blocked by
|
INF.10.A3 Closed Windows and Doors [Employee] (B) |
|
is blocked by
|
INF.10.A7 Secure Configuration of Training and Presentation Computers [IT Operation Department] (S) |
|
is blocked by
|
INF.12.A2 Planning Cable Routing [IT Operation Department, Building Services] (B) |
|
is blocked by
|
INF.12.A3 Proper Installation [IT Operation Department, Building Services] (B) |
|
is blocked by
|
INF.12.A6 Cabling Approval [IT Operation Department, Building Services] (S) |
|
is blocked by
|
INF.12.A9 Fire Prevention in Trays [Building Services] (S) |
|
is blocked by
|
INF.12.A12 Inspection of Electrical Installations and Existing Connections [IT Operation Department, Building Services] (S) |
|
is blocked by
|
INF.12.A15 Material Protection of Cabling [IT Operation Department, Building Services] (H) |
|
is blocked by
|
INF.12.A16 Use of Cabinet Systems [Building Services] (H) |
|
is blocked by
|
INF.13.A11 Adequate Hardening of Systems in TBM (S) |
|
is blocked by
|
INF.13.A12 Secure Configuration of TBM Systems (S) |
|
is blocked by
|
INF.13.A13 Secure Connection of Restricted Trusted Systems in TBM (S) [Planner] |
|
is blocked by
|
INF.13.A26 Securing BIM (H) [Planner] |