There are a number of ways in which information can be manipulated, e.g. by collecting data incorrectly or in an intentionally false manner, modifying the contents of database fields or business correspondence. In principle, it is not only possible to manipulate digital information, but also documents in paper form, for example. However, perpetrators can only manipulate the information to which they have access. The more access rights a person has to the files and directories of the IT systems and the more ways this person has to access information, the more serious the manipulations they will be able to make. If such manipulations are not detected in time, then the smooth operation of business processes and specialised tasks may be seriously disrupted.

The sensitive information in archived documents usually requires protection. Manipulation of such documents is especially serious because the manipulation can go unnoticed for years, and even when discovered, it may no longer be possible to properly investigate the incident.

Example:

Susietos užduotys

Saitai
is blocked by ORP.1.A1 Specification of Responsibilities and Provisions [Top Management]
is blocked by ORP.1.A2 Assigning Responsibilities [Top Management] (B)
is blocked by ORP.1.A3 Supervising or Escorting External Individuals [Employee] (B)
is blocked by ORP.1.A4 Separation of Roles Between Incompatible Tasks (B)
is blocked by ORP.1.A13 Security During Relocation [IT Operation Department, Building Services] (S)
is blocked by ORP.2.A5 Confidentiality Agreements for Third-Party Personnel (B)
is blocked by ORP.2.A14 Tasks and Responsibilities of Employees [Supervisor] (B)
is blocked by ORP.4.A4 Distribution of Tasks and Separation of Roles [IT Operation Department] (B)
is blocked by ORP.4.A9 Identification and Authentication [IT Operation Department] (B)
is blocked by ORP.4.A24 Dual Control for Administrative Activities [IT Operation Department] (H)
is blocked by CON.1.A3 Encryption of Communication Links (S)
is blocked by CON.1.A13 Operating System Security Requirements When Using Crypto Modules (H)
is blocked by CON.1.A16 Physical Protection of Crypto Modules [IT Operation Department] (H)
is blocked by CON.3.A14 Protection of Backups [IT Operation Department] (B)
is blocked by CON.3.A13 Using Cryptographic Methods for Backups [IT Operation Department] (H)
is blocked by CON.8.A6 Use of External Libraries from Trusted Sources (B)
is blocked by CON.8.A18 Periodic Security Audits of the Development Environment (H)
is blocked by CON.9.A8 Encryption and Digital Signatures (S)
is blocked by OPS.1.1.2.A3 Controlled Hiring of IT Administrators (B)
is blocked by OPS.1.1.2.A4 Termination of IT Administration Duties [Human Resources Department] (B)
is blocked by OPS.1.1.2.A5 Verifying Administrative Tasks (B)
is blocked by OPS.1.1.2.A6 Protecting Administrative Tasks (B)
is blocked by OPS.1.1.2.A7 Regulation of IT Administration Tasks (S)
is blocked by OPS.1.1.2.A11 Documentation of IT Administration Tasks (S)
is blocked by OPS.1.1.2.A12 Provisions for Maintenance and Repairs (S)
is blocked by OPS.1.1.2.A20 Administration and Commissioning of Devices (S)
is blocked by OPS.1.1.2.A14 Security Vetting of Administrators [Human Resources Department] (H)
is blocked by OPS.1.1.2.A15 Division of Administrative Activities (H)
is blocked by OPS.1.1.2.A16 Access Restrictions for Administrative Access (H)
is blocked by OPS.1.1.2.A17 Dual Control in IT Administration (H)
is blocked by OPS.1.1.2.A18 Consistent Logging of Administrative Activities (H)
is blocked by OPS.1.1.5.A10 Access Protection for Log Data (S)
is blocked by OPS.1.1.5.A12 Encryption of Log Data (H)
is blocked by OPS.1.1.7.A3 Time Synchronisation for System Management (B)
is blocked by OPS.1.1.7.A4 Protection of System Management Communication (B)
is blocked by OPS.1.1.7.A5 Mutual Authentication Between the System Management Solution and Systems to be Managed (B)
is blocked by OPS.1.1.7.A6 Securing Access to the System Management Solution (B)
is blocked by OPS.1.1.7.A7 Definition of a Security Policy for System Management (S)
is blocked by OPS.1.1.7.A10 Concept for Secure Operation of the System Management Solution (S)
is blocked by OPS.1.1.7.A11 Regular Gap Analysis Within the Framework of System Management (S)
is blocked by OPS.1.1.7.A12 Triggering Actions by the Central Components of the System Management Solution (S)
is blocked by OPS.1.1.7.A13 Commitment to the Use of Designated Interfaces for System Management (S)
is blocked by OPS.1.1.7.A15 Status Monitoring, Logging, and Alerting of Relevant Events in the System Management Solution and the Systems to be Managed (S)
is blocked by OPS.1.1.7.A17 Control of System Management Communication (S)
is blocked by OPS.1.1.7.A18 System State Verification (S)
is blocked by OPS.1.1.7.A19 Securing System Management Communications Between the System Management Solution and the Systems Being Managed (S)
is blocked by OPS.1.1.7.A21 Physical Separation of the Central System Management Network (H)
is blocked by OPS.1.1.7.A22 Integration of System Management into Automated Detection Systems (S)
is blocked by OPS.1.1.7.A23 Cross-Site Time Synchronisation for System Management (H)
is blocked by OPS.1.1.7.A24 Automated Checking of Security-Relevant Configurations by Suitable Detection Systems (H)
is blocked by OPS.1.1.7.A25 Logging and Regulation of System Management Meetings (H)
is blocked by OPS.1.1.7.A26 Decoupling of Access to the System Management Solution (H)
is blocked by OPS.1.2.2.A8 Logging Archival Access [IT Operation Department] (B)
is blocked by OPS.1.2.4.A1 Rules on Teleworking [Supervisor, Human Resources Department] (B)
is blocked by OPS.1.2.4.A2 Security-Related Requirements for Teleworking Computers (B)
is blocked by OPS.1.2.4.A5 Employee Awareness and Training (B)
is blocked by OPS.1.2.4.A7 Regulations on Using Communication Capabilities for Teleworking [IT Operation Department, Employee] (S)
is blocked by OPS.1.2.5.A8 Secure Protocols for Remote Maintenance (S)
is blocked by OPS.1.2.5.A14 Dedicated Clients for Remote Maintenance (H)
is blocked by OPS.1.2.5.A22 Redundant Communication Links (H)
is blocked by OPS.1.2.6.A4 Failure to Account for Unsolicited Time Information (B)
is blocked by OPS.1.2.6.A5 Use of Client-Server Mode for NTP (S)
is blocked by OPS.1.2.6.A6 Monitoring of IT Systems Using NTP (S)
is blocked by OPS.1.2.6.A8 Use of Secure Time Synchronisation Protocols (S)
is blocked by OPS.1.2.6.A10 Internal NTP Servers Only (H)
is blocked by OPS.1.2.6.A12 NTP Servers with Authenticated Information (H)
is blocked by OPS.2.1.A6 Drawing up a Security Concept for the Outsourcing Project [Process Owner] (S)
is blocked by OPS.2.1.A10 Agreement on the Exchange of Data Between Outsourcing Partners (S)
is blocked by OPS.3.1.A9 Agreement on the Exchange of Data Between Outsourcing Partners (S)
is blocked by DER.1.A6 Continuous Monitoring and Analysis of Log Data (S)
is blocked by DER.2.1.A9 Definition of Reporting Paths for Security Incidents (S)
is blocked by DER.2.1.A14 Escalation Strategy for Security Incidents [IT Operation Department] (S)
is blocked by DER.2.1.A17 Evaluation of Security Incidents (S)
is blocked by DER.2.1.A20 Creation of a Dedicated Reporting Office for Security Incidents (H)
is blocked by DER.2.1.A22 Reviewing Management System Efficiency in Handling Security Incidents (H)
is blocked by DER.2.2.A2 Drawing Up a Guide for Initial Measures in Case of an IT Security Incident (B)
is blocked by DER.2.2.A5 Drawing Up a Guide to Securing Evidence in Case of IT Security Incidents (S)
is blocked by DER.2.2.A8 Selection and Order of Evidence to Be Secured [Process Owner] (S)
is blocked by DER.2.2.A9 Pre-Selection of Forensically Relevant Data [Process Owner] (S)
is blocked by DER.2.2.A10 Forensic Securing of IT Evidence [Process Owner] (S)
is blocked by DER.2.2.A11 Documentation of Securing Evidence [Process Owner] (S)
is blocked by DER.2.2.A12 Secure Storage of Original Storage Media and Evidence [Process Owner] (S)
is blocked by DER.2.2.A14 Specifying Standard Procedures for Securing Evidence (H)
is blocked by DER.2.2.A15 Conducting Drills on Securing Evidence (H)
is blocked by DER.2.3.A2 Deciding on a Cleaning Strategy (B)
is blocked by DER.2.3.A3 Isolation of Affected Network Segments (B)
is blocked by DER.2.3.A4 Blocking and Changing Access Data and Cryptographic Keys (B)
is blocked by DER.2.3.A7 Targeted System Hardening (S)
is blocked by DER.2.3.A8 Establishing Secure, Independent Communication Channels (S)
is blocked by DER.2.3.A9 Hardware Replacement in Affected IT Systems (H)
is blocked by DER.2.3.A10 Modifications to Help Thwart a Repeat Attack (H)
is blocked by APP.1.1.A2 Limiting Active Content (B)
is blocked by APP.1.1.A14 Protection Against Subsequent Changes to Documents [User] (S)
is blocked by APP.1.1.A15 Use of Encryption and Digital Signatures (H)
is blocked by APP.1.1.A16 Checking Document Integrity (H)
is blocked by APP.1.2.A2 Support for Secure Communication Encryption (B)
is blocked by APP.1.2.A3 Use of Trusted Certificates (B)
is blocked by APP.1.2.A13 Use of DNS over HTTPS (B)
is blocked by APP.2.1.A3 Setting Up Access Authorisations for Directory Services [Process Owner] (B)
is blocked by APP.2.1.A6 Secure Operation of Directory Services (B)
is blocked by APP.2.2.A2 Planning of Active Directory Administration [Process Owner] (B)
is blocked by APP.2.2.A5 Hardening Active Directory (B)
is blocked by APP.2.2.A6 Maintaining the Operational Continuity of Active Directory (B)
is blocked by APP.2.2.A7 Implementation of Secure Administration Methods for Active Directory [Process Owner] (B)
is blocked by APP.2.2.A8 Configuration of Secure Channel in Windows (S)
is blocked by APP.2.2.A9 Authentication Protection When Using Active Directory (S)
is blocked by APP.2.2.A14 Use of Dedicated Privileged Administration Systems (H)
is blocked by APP.2.2.A15 Separation of Administration and Production Environments (H)
is blocked by APP.2.3.A4 Configuration of the Database Used by OpenLDAP (B)
is blocked by APP.2.3.A5 Secure Assignment of Access Rights to OpenLDAP (B)
is blocked by APP.3.2.A1 Secure Web Server Configuration (B)
is blocked by APP.3.2.A2 Protection of Web Server Files (B)
is blocked by APP.3.2.A5 Authentication (B)
is blocked by APP.3.2.A16 Penetration Testing and Auditing (S)
is blocked by APP.3.6.A3 Use of Separate DNS Servers for Internal and External Requests (B)
is blocked by APP.3.6.A4 Secure Basic Configuration of a DNS Server (B)
is blocked by APP.3.6.A6 Securing Dynamic DNS Updates (B)
is blocked by APP.3.6.A14 Location of Name Servers (S)
is blocked by APP.3.6.A15 Analysis of Log Data (S)
is blocked by APP.3.6.A16 Integrating a DNS Server into a “P-A-P” Structure (S)
is blocked by APP.3.6.A17 Use of DNSSEC (S)
is blocked by APP.3.6.A18 Advanced Securing of Zone Transfers (S)
is blocked by APP.3.6.A21 Hidden Master (H)
is blocked by APP.4.2.A4 Protection of Standard SAP User IDs (B)
is blocked by APP.4.2.A5 Configuration and Protection of SAP User Administration (B)
is blocked by APP.4.2.A6 Creation and Implementation of a User and Access Control Policy [Department, Developer] (B)
is blocked by APP.4.2.A7 Protection of SAP Databases (B)
is blocked by APP.4.2.A8 Protection of the SAP RFC Interface (B)
is blocked by APP.4.2.A12 SAP Authorisation Development [Department, Developer] (S)
is blocked by APP.4.2.A14 Identification of Critical SAP Authorisations [Department] (S)
is blocked by APP.4.2.A22 Protection of the Spool in the SAP ERP System [Developer] (S)
is blocked by APP.4.2.A23 Protection of SAP Background Processing [Developer] (S)
is blocked by APP.4.2.A26 Protection of Customers' Own Code in the SAP ERP System (S)
is blocked by APP.4.2.A27 Auditing the SAP ERP System [Department] (S)
is blocked by APP.4.2.A30 Implementation of Continuous Monitoring of Security Settings (S)
is blocked by APP.4.2.A32 Real-Time Detection and Alerts for Irregular Processes (H)
is blocked by APP.4.3.A3 Basic Hardening of Database Management Systems (B)
is blocked by APP.4.3.A4 Controlled Creation of New Databases (B)
is blocked by APP.4.3.A9 Backing Up a Database System (B)
is blocked by APP.4.3.A12 Uniform Configuration Standard for Database Management Systems (S)
is blocked by APP.4.3.A13 Restrictive Utilisation of Database Links (S)
is blocked by APP.4.3.A17 Data Transfer or Migration [Process Owner] (S)
is blocked by APP.4.3.A19 Protection Against Malicious Database Scripts [Developer] (S)
is blocked by APP.4.3.A20 Regular Audits (S)
is blocked by APP.4.3.A23 Archiving (H)
is blocked by APP.4.3.A24 Data Encryption in Databases (H)
is blocked by APP.4.3.A25 Security Audits of Database Systems (H)
is blocked by APP.4.6.A1 Protecting Reports with Authorisation Checks (B)
is blocked by APP.4.6.A2 Formally Correct Evaluation of Authorisation Checks (B)
is blocked by APP.4.6.A4 No Proprietary Authorisation Checks (B)
is blocked by APP.4.6.A8 Protection Against Unauthorised or Manipulative Access to the File System (S)
is blocked by APP.4.6.A10 Execution of Operating System Commands (S)
is blocked by APP.4.6.A11 Avoiding Planted Malicious Code (S)
is blocked by APP.4.6.A12 Avoiding Generic Module Execution (S)
is blocked by APP.4.6.A13 Avoiding Generic Access to Table Contents (S)
is blocked by APP.4.6.A14 Avoiding Native SQL Statements (S)
is blocked by APP.4.6.A16 No System-Dependent Execution of Functions (S)
is blocked by APP.4.6.A17 No Client-Dependent Execution of Functions (S)
is blocked by APP.4.6.A18 Avoiding Open SQL Injection Vulnerabilities (S)
is blocked by APP.4.6.A19 Protection Against Cross-Site Scripting (S)
is blocked by APP.4.6.A20 No Access to Data from Another Client (S)
is blocked by APP.4.6.A21 Ban on Hidden ABAP Source Code (S)
is blocked by APP.5.2.A11 Protection of Communications Between Exchange Systems (S)
is blocked by APP.5.2.A12 Using Outlook Anywhere, MAPI over HTTP, and Outlook on the Web (S)
is blocked by APP.6.A2 Drawing Up a Requirements Catalogue for Software [Process Owner] (B)
is blocked by APP.7.A2 Defining Security Requirements for the Software Development Process (B)
is blocked by SYS.1.1.A2 User Authentication on Servers (B)
is blocked by SYS.1.1.A21 Operational Documentation for Servers (S)
is blocked by SYS.1.1.A27 Host-Based Attack Detection (H)
is blocked by SYS.1.1.A34 Hard Disk Encryption (H)
is blocked by SYS.1.2.2.A2 Secure Installation of Windows Server 2012 (B)
is blocked by SYS.1.2.2.A3 Secure Administration of Windows Server 2012 (B)
is blocked by SYS.1.2.2.A4 Secure Configuration of Windows Server 2012 (S)
is blocked by SYS.1.2.2.A5 Protection Against Malware on Windows Server 2012 (S)
is blocked by SYS.1.2.2.A6 Secure Authentication and Authorisation in Windows Server 2012 (S)
is blocked by SYS.1.2.2.A8 Protection of System Integrity (S)
is blocked by SYS.1.2.2.A11 Attack Detection in Windows Server 2012 (H)
is blocked by SYS.1.2.2.A14 Shutting Down Encrypted Servers and Virtual Machines (H)
is blocked by SYS.1.3.A2 Careful Allocation of IDs (B)
is blocked by SYS.1.3.A4 Protection from Exploitation of Vulnerabilities in Applications (B)
is blocked by SYS.1.3.A16 Additional Prevention of Further Intrusion When Vulnerabilities Are Exploited (H)
is blocked by SYS.1.3.A17 Additional Kernel Protection (H)
is blocked by SYS.1.5.A5 Protection of Administration Interfaces (B)
is blocked by SYS.1.5.A15 Operation of Guest Operating Systems with Different Protection Needs (S)
is blocked by SYS.1.5.A16 Encapsulation of Virtual Machines (S)
is blocked by SYS.1.5.A22 Hardening of the Virtualisation Server (H)
is blocked by SYS.1.5.A23 Restriction of Rights of Virtual Machines (H)
is blocked by SYS.1.5.A24 Disabling Snapshots of Virtual IT Systems (H)
is blocked by SYS.1.5.A26 Use of a PKI [Planner] (H)
is blocked by SYS.1.5.A27 Use of Certified Virtualisation Software (H)
is blocked by SYS.1.6.A1 Planning Container Use (B)
is blocked by SYS.1.6.A2 Container Management Planning (B)
is blocked by SYS.1.6.A3 Secure Use of Containerised IT Systems (B)
is blocked by SYS.1.6.A4 Planning the Provision and Distribution of Images (B)
is blocked by SYS.1.6.A5 Separation of Administration and Access Networks for Containers (B)
is blocked by SYS.1.6.A12 Distribution of Secure Images (S)
is blocked by SYS.1.6.A13 Release of Images (S)
is blocked by SYS.1.6.A19 Including Data Stores in Containers (S)
is blocked by SYS.1.6.A20 Protection of Configuration Data (S)
is blocked by SYS.1.6.A23 Container Immutability (H)
is blocked by SYS.1.6.A24 Host-Based Attack Detection (H)
is blocked by SYS.1.6.A25 High Availability of Containerised Applications (H)
is blocked by SYS.1.7.A1 Use of Restrictive z/OS IDs (B)
is blocked by SYS.1.7.A2 Protection of Security-Critical z/OS Utilities (B)
is blocked by SYS.1.7.A3 Maintenance of Z Systems (B)
is blocked by SYS.1.7.A5 Use and Protection of System-Related z/OS Terminals (B)
is blocked by SYS.1.7.A6 Use and Protection of the Remote Support Facility (B)
is blocked by SYS.1.7.A7 Restrictive Authorisation in z/OS (B)
is blocked by SYS.1.7.A8 Use of the z/OS Security System RACF (B)
is blocked by SYS.1.7.A9 Multi-Client Capability in z/OS (B)
is blocked by SYS.1.7.A14 Reporting on the Secure Operation of z/OS (S)
is blocked by SYS.1.7.A16 Monitoring of z/OS Systems (S)
is blocked by SYS.1.7.A19 Protection of z/OS Transaction Monitors (S)
is blocked by SYS.1.7.A22 Protection of the Operating Functions of z/OS (S)
is blocked by SYS.1.7.A23 Protection of z/VM (S)
is blocked by SYS.1.7.A24 Administration of Storage Media in z/OS Systems (S)
is blocked by SYS.1.7.A26 Workload Management for z/OS Systems (S)
is blocked by SYS.1.7.A29 Protection of Unix System Services on z/OS Systems (S)
is blocked by SYS.1.7.A33 Separation of Test and Production Systems in z/OS (H)
is blocked by SYS.1.7.A34 Batch Job Planning for z/OS Systems (H)
is blocked by SYS.1.7.A35 Use of RACF Exits (H)
is blocked by SYS.1.7.A36 Internal Communication Between Operating Systems (H)
is blocked by SYS.1.7.A38 Use of the VTAM Session Management Exit in z/OS (H)
is blocked by SYS.1.8.A14 Protection of an SAN Through Segmentation (S)
is blocked by SYS.1.8.A15 Secure Separation of Clients in Storage Solutions (S)
is blocked by SYS.1.8.A21 Use of Storage Pools in Client Separation (H)
is blocked by SYS.1.8.A26 Securing a SAN with Hard Zoning (H)
is blocked by SYS.2.1.A1 Secure User Authorisation (B)
is blocked by SYS.2.1.A6 Using Malware Protection Programs (B)
is blocked by SYS.2.1.A8 Protecting the Boot Process (B)
is blocked by SYS.2.1.A42 Use of Cloud and Online Functions [User] (B)
is blocked by SYS.2.1.A10 Planning the Use of Clients (S)
is blocked by SYS.2.1.A15 Secure Installation and Configuration of Clients (S)
is blocked by SYS.2.1.A23 Preferences for Client-Server Services (S)
is blocked by SYS.2.1.A32 Use of Additional Safeguards to Protect Against Exploits (H)
is blocked by SYS.2.2.2.A1 Selecting a Suitable Windows 8.1 Version (B)
is blocked by SYS.2.2.2.A2 Defining a Login Procedure for Windows 8.1 (B)
is blocked by SYS.2.2.2.A5 Local Security Policy for Windows 8.1 (S)
is blocked by SYS.2.2.2.A7 Use of Windows User Account Control (S)
is blocked by SYS.2.2.2.A9 Data Protection and Data Economy in Windows 8.1 Clients [User] (S)
is blocked by SYS.2.2.2.A10 Integration of Online Accounts into the Operating System [User] (S)
is blocked by SYS.2.2.2.A11 Configuration of Synchronisation Mechanisms in Windows 8.1 (S)
is blocked by SYS.2.2.2.A13 Connection of Windows 8.1 to the Microsoft Store (S)
is blocked by SYS.2.2.2.A14 Application Control Using Software Restriction Policies and AppLocker (H)
is blocked by SYS.2.2.2.A16 Use of Windows PowerShell (H)
is blocked by SYS.2.2.2.A18 Activation of the Last Access Time Stamp (H)
is blocked by SYS.2.2.2.A21 Use of File and Registry Virtualisation (H)
is blocked by SYS.2.2.3.A12 File and Share Authorisation in Windows 10 (S)
is blocked by SYS.2.2.3.A22 Use of Windows PowerShell (H)
is blocked by SYS.2.2.3.A23 Advanced Protection of Login Information in Windows 10 (H)
is blocked by SYS.2.3.A6 No Automatic Integration of Removable Drives [User] (S)
is blocked by SYS.2.3.A7 Restrictive Granting of Access Rights for Files and Directories (S)
is blocked by SYS.2.3.A8 Use of Techniques to Restrict the Rights of Applications (S)
is blocked by SYS.2.3.A9 Secure Use of Passwords in the Command Line [User] (S)
is blocked by SYS.2.3.A12 Secure Use of Appliances (S)
is blocked by SYS.2.3.A14 Protection Against the Use of Unauthorised Peripheral Devices (H)
is blocked by SYS.2.3.A15 Additional Protection Prior to Executing Undesired Files (H)
is blocked by SYS.2.3.A18 Additional Kernel Protection (H)
is blocked by SYS.2.3.A19 Hard Disk or File Encryption (H)
is blocked by SYS.3.1.A1 Rules for Mobile Laptop Use (B)
is blocked by SYS.3.1.A6 Security Guidelines for Laptops (S)
is blocked by SYS.3.1.A13 Encryption of Laptops (S)
is blocked by SYS.3.1.A14 Suitable Storage of Laptops [User] (S)
is blocked by SYS.3.2.1.A22 Integrating Mobile Devices into Internal Infrastructure via VPN (S)
is blocked by SYS.3.2.1.A34 Configuration of the DNS Server Used (S)
is blocked by SYS.3.2.1.A26 Use of PIM Containers (H)
is blocked by SYS.3.2.2.A4 Distribution of the Basic Configuration to Mobile Devices (B)
is blocked by SYS.3.2.2.A5 Installing the MDM Client (B)
is blocked by SYS.3.2.2.A7 Installation of Apps (S)
is blocked by SYS.3.2.2.A21 Administration of Certificates (S)
is blocked by SYS.3.2.2.A14 Use of External Reputation Services for Apps (H)
is blocked by SYS.3.2.2.A23 Enforcing Compliance Requirements (H)
is blocked by SYS.3.2.3.A1 Strategy for Using iOS Devices (B)
is blocked by SYS.3.2.3.A7 Preventing Unauthorised Deletion of Configuration Profiles (B)
is blocked by SYS.3.2.3.A13 Using the “iOS Restrictions” Configuration Option (S)
is blocked by SYS.3.2.3.A17 Using the Device Code History (S)
is blocked by SYS.3.2.3.A26 No Connections to Host Systems (H)
is blocked by SYS.3.3.A1 Security Guidelines and Rules for the Use of Mobile Phones (B)
is blocked by SYS.3.3.A2 Blocking Lost Mobile Telephones [User] (B)
is blocked by SYS.3.3.A5 Use of the Security Mechanisms of Mobile Telephones [User] (S)
is blocked by SYS.3.3.A8 Use of the Wireless Interfaces of Mobile Telephones [User] (S)
is blocked by SYS.3.3.A10 Secure Data Transmission via Mobile Phones [User] (S)
is blocked by SYS.4.1.A15 Encryption of Information for Printers, Copiers, and All-in-One Devices (S)
is blocked by SYS.4.1.A18 Configuration of Printers, Copiers, and All-in-One Devices (S)
is blocked by SYS.4.3.A3 Logging Security-Relevant Events in Embedded Systems (B)
is blocked by SYS.4.3.A7 Hardware Realisation of the Features of Embedded Systems [Developer, Planner, Procurement Department] (S)
is blocked by SYS.4.3.A8 Using a Secure Operating System for Embedded Systems [Developer, Planner, Procurement Department] (S)
is blocked by SYS.4.3.A9 Use of Cryptographic Processors or Coprocessors in Embedded Systems [Developer, Planner, Procurement Department] (S)
is blocked by SYS.4.3.A12 Selection of a Trustworthy Supplier and Logistics Chain and a Qualified Manufacturer for Embedded Systems [Procurement Department] (H)
is blocked by SYS.4.3.A13 Use of a Certified Operating System [Developer, Planner, Procurement Department] (H)
is blocked by SYS.4.3.A14 Secured and Authenticated Boot Process for Embedded Systems [Developer, Planner, Procurement Department] (H)
is blocked by SYS.4.3.A15 Storage Protection in Embedded Systems [Developer, Planner, Procurement Department] (H)
is blocked by SYS.4.3.A16 Tamper Protection for Embedded Systems [Planner] (H)
is blocked by SYS.4.3.A17 Automatic Monitoring of Assembly Functions [Planner, Procurement Department] (H)
is blocked by SYS.4.5.A1 Raising Staff Awareness of Secure Handling of Removable Media (B)
is blocked by SYS.4.5.A4 Drawing Up a Policy for the Secure Handling of Removable Media (S)
is blocked by SYS.4.5.A11 Protecting Integrity Using Checksums or Digital Signatures (H)
is blocked by IND.1.A18 Logging [OT Operations)] (B)
is blocked by IND.1.A22 Central System Logging and System Monitoring [OT Operations] (S)
is blocked by IND.2.1.A4 Disabling or Uninstalling Unused Services, Functions, and Interfaces [Maintenance Personnel, OT Operations] (B)
is blocked by IND.2.1.A6 Network Segmentation [OT Operations, Planner] (B)
is blocked by IND.2.1.A8 Protection Against Malware [OT Operations] (S)
is blocked by IND.2.1.A16 Protecting External Interfaces [OT Operations] (S)
is blocked by IND.2.1.A17 Use of Secure Protocols for the Transmission of Measurement and Control Data [OT Operations] (S)
is blocked by IND.2.2.A1 Extended System Documentation for Programmable Logic Controllers [OT Operations] (S)
is blocked by IND.2.2.A3 Time Synchronisation [OT Operations] (S)
is blocked by IND.2.4.A1 Remote Maintenance by Mechanical and System Engineers [OT Operations] (B)
is blocked by NET.1.1.A4 Network Separation into Zones (B)
is blocked by NET.1.1.A5 Client-Server Segmentation (B)
is blocked by NET.1.1.A6 End Device Segmentation in the Internal Network (B)
is blocked by NET.1.1.A10 DMZ Segmentation for Access from the Internet (B)
is blocked by NET.1.1.A11 Protection of Communications Entering the Internal Network from the Internet (B)
is blocked by NET.1.1.A14 Implementation of Network Planning (B)
is blocked by NET.1.1.A18 P-A-P Structure for the Internet Connection (S)
is blocked by NET.1.1.A19 Separation of Infrastructure Services (S)
is blocked by NET.1.1.A21 Separation of the Management Area (S)
is blocked by NET.1.1.A22 Specification of the Segmentation Concept (S)
is blocked by NET.1.1.A23 Separation of Network Segments (S)
is blocked by NET.1.1.A24 Secure Logical Separation using VLAN (S)
is blocked by NET.1.1.A25 Detailed and Implementation Planning of Network Architecture and Design (S)
is blocked by NET.1.1.A31 Physical Separation of Network Segments (H)
is blocked by NET.1.1.A32 Physical Separation of Management Network Segments (H)
is blocked by NET.1.1.A33 Micro-Segmentation of the Network (H)
is blocked by NET.1.2.A28 Location of Management Clients for In-Band Management (S)
is blocked by NET.1.2.A29 Using VLANS in the Management Network (S)
is blocked by NET.1.2.A31 Basic Use of Secure Protocols (H)
is blocked by NET.1.2.A32 Physical Separation of the Management Network [Planner] (H)
is blocked by NET.1.2.A33 Physical Separation of Management Segments [Planner] (H)
is blocked by NET.1.2.A35 Specifications for Securing Evidence (H)
is blocked by NET.1.2.A36 Integration of Network Management Logging into an SIEM Solution (H)
is blocked by NET.3.1.A1 Secure Basic Configuration of a Router or Switch (B)
is blocked by NET.3.1.A5 Protection Against Fragmentation Attacks (B)
is blocked by NET.3.1.A25 Advanced Integrity Protection for Configuration Files (H)
is blocked by NET.3.1.A27 Bandwidth Management for Critical Applications and Services (H)
is blocked by NET.3.2.A4 Secure Firewall Configuration (B)
is blocked by NET.3.2.A6 Protection of Administration Interfaces (B)
is blocked by NET.3.2.A8 Prevention of Dynamic Routing (B)
is blocked by NET.3.2.A9 Logging (B)
is blocked by NET.3.2.A16 Creation of a “P-A-P” structure (S)
is blocked by NET.3.2.A21 Temporary Decryption of Data Traffic (S)
is blocked by NET.3.2.A22 Secure Time Synchronisation (S)
is blocked by NET.3.2.A24 Audits and Penetration Tests (S)
is blocked by NET.3.2.A25 Advanced Integrity Protection for Configuration Files (H)
is blocked by NET.3.3.A4 Secure Configuration of a VPN (B)
is blocked by NET.3.3.A7 Planning the Technical VPN Implementation (S)
is blocked by NET.3.3.A10 Secure Operation of a VPN (S)
is blocked by NET.3.3.A13 Integration of VPN Components into a Firewall (S)
is blocked by NET.4.3.A4 Drawing Up a Security Policy for Fax Use (S)
is blocked by NET.4.3.A6 Procurement of Suitable Fax Machines and Servers [Procurement Department] (S)
is blocked by NET.4.3.A10 Control of Programmable Destination Addresses, Logs, and Distribution Lists (S)
is blocked by NET.4.3.A11 Preventing Fax Machine Overload [IT Operation Department] (H)
is blocked by INF.7.A2 Closed Windows and Locked Doors [Employee, Building Services] (b)
is blocked by INF.7.A5 Workplace Ergonomics [Central Administration, Supervisor] (S)
is blocked by INF.7.A6 Workplace Cleanliness [Employee, Supervisor] (S)
is blocked by INF.7.A7 Suitable Storage of Official Documents and Storage Media [Employee, Building Services] (S)
is blocked by INF.8.A1 Securing Official Documents at the Home Workplace (B)
is blocked by INF.8.A2 Transporting Working Material to the Home Workplace (B)
is blocked by INF.8.A4 Suitable Configuration of the Home Workplace (S)
is blocked by INF.8.A6 Handling Official Documents with Increased Protection Needs at the Home Workplace (H)
is blocked by INF.9.A1 Appropriate Selection and Usage of a Mobile Workplace [IT Operation Department] (B)
is blocked by INF.9.A2 Regulations for Mobile Workplaces [Human Resources Department] (B)
is blocked by INF.9.A3 Site and Data Access Protection [Central Administration, Employee] (B)
is blocked by INF.9.A4 Working with External IT Systems [IT Operation Department, Employee] (B)
is blocked by INF.9.A8 Security Policy for Mobile Workplaces [IT Operation Department] (S)
is blocked by INF.9.A9 Encryption of Portable IT Systems and Storage Media [IT Operation Department] (S)
is blocked by INF.9.A12 Using a Screen Protector [Employee] (S)
is blocked by INF.11.A14 Protection of Sensitive Information from Unauthorised Access and Disclosure [IT Operation Department, Process Owner] (H)
is blocked by INF.13.A11 Adequate Hardening of Systems in TBM (S)
is blocked by INF.13.A12 Secure Configuration of TBM Systems (S)
is blocked by INF.13.A13 Secure Connection of Restricted Trusted Systems in TBM (S) [Planner]
is blocked by INF.13.A26 Securing BIM (H) [Planner]
is blocked by INF.14.A3 Secure Connection of Building Services and Building Services Systems (B)
is blocked by INF.14.A11 Securing Freely Accessible Ports and Access Points in BACS (S) [Planner]
is blocked by INF.14.A12 Use of Secure Transmission Protocols for BACS (S)
is blocked by INF.14.A15 Security of BACS-Specific Networks (S)
is blocked by INF.14.A16 Securing Wireless Communication in BACS Networks (S) [Planner]
is blocked by INF.14.A17 Securing Mobile Communications in BACS Networks (S) [Planner]
is blocked by INF.14.A18 Secure Integration of BACS-External Systems (S)
is blocked by INF.14.A28 Physical Separation of BACS (H) [Planner]
is blocked by INF.14.A29 Separation of Individual Building Services Systems (H)