The loss of data is an event which means that a database can no longer be used as required (loss of availability). A frequent form of data loss is that data is deleted accidentally or without authorisation, for example due to improper use, malfunctions, power failures, soiling or malware.

However, data may also be lost when devices or storage media are damaged, lost or stolen. This risk is often particularly high for portable terminal devices and mobile storage media.

Furthermore, it must be noted that many mobile IT systems are not always online. Therefore, the data stored on these systems is not always up to date. When databases between mobile IT systems and stationary IT systems are synchronised, data may be lost due to carelessness or malfunction.

Examples:

Susietos užduotys

Saitai
Saito tipas Užduotis
is blocked by ORP.1.A15 Contact Persons for Information Security Issues (B)
is blocked by ORP.1.A16 Policy for Secure IT Use [User] (S)
is blocked by ORP.2.A1 Well-Regulated Orientation of New Employees [Supervisor] (B)
is blocked by ORP.2.A2 Regulated Procedure for Employees Leaving the Organisation [Supervisor, IT Operation Department] (B)
is blocked by ORP.2.A4 Defining Procedures for Using Third-Party Personnel (B)
is blocked by ORP.2.A5 Confidentiality Agreements for Third-Party Personnel (B)
is blocked by ORP.2.A7 Verifying the Trustworthiness of Employees (S)
is blocked by ORP.3.A1 Top Management Awareness of Information Security Issues [Supervisor, Top Management] (B)
is blocked by ORP.3.A3 Training Employees in the Secure Handling of IT [Supervisor, Human Resources Department, IT Operation Department] (B)
is blocked by ORP.3.A7 Training in the IT-Grundschutz Methodology (S)
is blocked by ORP.3.A9 Special Training for Exposed Persons and Organisations (H)
is blocked by CON.1.A2 Backups When Using Cryptographic Methods [IT Operation Department] (B)
is blocked by CON.1.A4 Appropriate Key Management (S)
is blocked by CON.1.A12 Secure Separation of Roles When Using Crypto Modules [IT Operation Department] (H)
is blocked by CON.3.A5 Regular Backups [IT Operation Department] (B)
is blocked by CON.3.A12 Secure Storage of Backup Media [IT Operation Department] (B)
is blocked by CON.3.A14 Protection of Backups [IT Operation Department] (B)
is blocked by CON.7.A3 Identification of Country-Specific Regulations, Travel Conditions and Environmental Conditions [Human Resource Department]
is blocked by CON.7.A11 Use of Anti-Theft Devices [User] (S)
is blocked by CON.7.A13 Transporting Necessary Data and Storage Media [User] (S)
is blocked by CON.7.A16 Protecting Integrity Using Checksums or Digital Signatures [User] (H)
is blocked by CON.7.A17 Use of Dedicated Travel Hardware [IT Operation Department] (H)
is blocked by CON.9.A7 Backup Copies of Transferred Data [User] (S)
is blocked by OPS.1.1.6.A13 Separating the Test Environment from the Production Environment (S)
is blocked by OPS.1.1.7.A14 Central Configuration Management for Systems to be Managed (S)
is blocked by OPS.1.1.7.A24 Automated Checking of Security-Relevant Configurations by Suitable Detection Systems (H)
is blocked by OPS.1.2.2.A7 Regular Backups of System and Archive Data [IT Operation Department] (B)
is blocked by OPS.1.2.2.A9 Selection of Suitable Data Formats for Archiving Documents [IT Operation Department] (B)
is blocked by OPS.1.2.2.A12 Monitoring of Storage Resources for Archive Media [IT Operation Department] (S)
is blocked by OPS.1.2.2.A20 Appropriate Use of Cryptographic Methods for Archiving [IT Operation Department] (H)
is blocked by OPS.1.2.4.A1 Rules on Teleworking [Supervisor, Human Resources Department] (B)
is blocked by OPS.1.2.4.A2 Security-Related Requirements for Teleworking Computers (B)
is blocked by OPS.1.2.4.A6 Creating a Security Concept for Teleworking (S)
is blocked by OPS.2.2.A7 Drawing Up a Security Concept for Cloud Usage (S)
is blocked by OPS.2.2.A11 Drawing Up a Contingency Concept for a Cloud Service (S)
is blocked by OPS.2.2.A15 Ensuring the Portability of Cloud Services [Process Owner] (H)
is blocked by OPS.2.2.A16 Implementing In-House Backups [Process Owner] (H)
is blocked by OPS.3.1.A3 Creating a Security Concept for the Outsourcing Project (S)
is blocked by OPS.3.1.A8 Agreements on Connecting to Outsourcing Partner Networks (S)
is blocked by OPS.3.1.A13 Secure Migration in Outsourcing Projects (S)
is blocked by OPS.3.1.A14 Contingency Planning for Outsourcing [BCM Officer] (S)
is blocked by OPS.3.1.A15 Orderly Termination of an Outsourcing Relationship [Top Management] (S)
is blocked by DER.2.1.A6 Recovering the Operating Environment After Security Incidents [IT Operation Department] (B)
is blocked by DER.2.1.A10 Limiting the Effects of Security Incidents [BCM Officer, IT Operation Department] (S)
is blocked by DER.2.1.A17 Evaluation of Security Incidents (S)
is blocked by DER.2.1.A18 Further Development of Processes Based on Findings from Security Incidents and Industry Developments [Process Owner] (S)
is blocked by DER.2.1.A19 Specifying Priorities for Handling Security Incidents [Top Management] (H)
is blocked by DER.2.1.A20 Creation of a Dedicated Reporting Office for Security Incidents (H)
is blocked by DER.2.1.A21 Assembling a Team of Experts for Handling Security Incidents (H)
is blocked by DER.2.1.A22 Reviewing Management System Efficiency in Handling Security Incidents (H)
is blocked by DER.2.2.A1 Examination of Legal and Regulatory Framework Conditions for Acquisition and Evaluation [Data Protection Officer, Top Management] (B)
is blocked by DER.2.2.A2 Drawing Up a Guide for Initial Measures in Case of an IT Security Incident (B)
is blocked by DER.2.2.A3 Pre-Selection of Forensic Service Providers (B)
is blocked by DER.2.2.A4 Identifying Common Areas Between IT Forensics and Crisis/Business Continuity Management (S)
is blocked by DER.2.2.A5 Drawing Up a Guide to Securing Evidence in Case of IT Security Incidents (S)
is blocked by DER.2.2.A6 Training Personnel on Forensic Securing of Evidence (S)
is blocked by DER.2.2.A7 Selecting Tools for Forensics (S)
is blocked by DER.2.2.A8 Selection and Order of Evidence to Be Secured [Process Owner] (S)
is blocked by DER.2.2.A9 Pre-Selection of Forensically Relevant Data [Process Owner] (S)
is blocked by DER.2.2.A10 Forensic Securing of IT Evidence [Process Owner] (S)
is blocked by DER.2.2.A11 Documentation of Securing Evidence [Process Owner] (S)
is blocked by DER.2.2.A12 Secure Storage of Original Storage Media and Evidence [Process Owner] (S)
is blocked by DER.2.2.A13 Framework Agreements with External Service Providers (H)
is blocked by DER.2.2.A14 Specifying Standard Procedures for Securing Evidence (H)
is blocked by DER.2.2.A15 Conducting Drills on Securing Evidence (H)
is blocked by DER.2.3.A1 Creation of a Management Committee (B)
is blocked by DER.2.3.A2 Deciding on a Cleaning Strategy (B)
is blocked by DER.2.3.A3 Isolation of Affected Network Segments (B)
is blocked by DER.2.3.A4 Blocking and Changing Access Data and Cryptographic Keys (B)
is blocked by DER.2.3.A7 Targeted System Hardening (S)
is blocked by DER.2.3.A8 Establishing Secure, Independent Communication Channels (S)
is blocked by APP.1.1.A6 Testing New Versions of Office Products (S)
is blocked by APP.1.1.A11 Controlled Use of Extensions for Office Products (S)
is blocked by APP.2.1.A2 Planning the Use of Directory Services [Data Protection Officer, Process Owner] (B)
is blocked by APP.2.1.A3 Setting Up Access Authorisations for Directory Services [Process Owner] (B)
is blocked by APP.2.1.A6 Secure Operation of Directory Services (B)
is blocked by APP.2.1.A11 Setting Up Access to Directory Services (S)
is blocked by APP.2.1.A13 Protection of Communications with Directory Services (S)
is blocked by APP.2.1.A14 Orderly Decommissioning of a Directory Service [Process Owner] (S)
is blocked by APP.2.1.A15 Migration of Directory Services (S)
is blocked by APP.2.2.A1 Planning Active Directory [Process Owner] (B)
is blocked by APP.2.2.A5 Hardening Active Directory (B)
is blocked by APP.2.2.A6 Maintaining the Operational Continuity of Active Directory (B)
is blocked by APP.2.2.A10 Secure Use of DNS for Active Directory (S)
is blocked by APP.2.2.A12 Backups for Domain Controllers (S)
is blocked by APP.2.3.A4 Configuration of the Database Used by OpenLDAP (B)
is blocked by APP.2.3.A8 Restrictions on Attributes in OpenLDAP (S)
is blocked by APP.3.3.A7 Selecting a File System (S)
is blocked by APP.3.3.A8 Structured Data Storage [User] (S)
is blocked by APP.3.3.A9 Secure Storage Management (S)
is blocked by APP.3.3.A13 Replicating Between Locations (H)
is blocked by APP.3.4.A4 Avoiding NTFS File Properties on a Samba Server (S)
is blocked by APP.3.4.A13 Regular Backups of Important Samba Server Components (S)
is blocked by APP.3.6.A9 Creation of a Business Continuity Plan for DNS Servers (B)
is blocked by APP.3.6.A20 Feasibility Reviews of Business Continuity Plans (H)
is blocked by APP.4.2.A1 Secure Configuration of the SAP Java Stack (B)
is blocked by APP.4.2.A2 Secure Configuration of the SAP Java Stack (B)
is blocked by APP.4.2.A4 Protection of Standard SAP User IDs (B)
is blocked by APP.4.2.A5 Configuration and Protection of SAP User Administration (B)
is blocked by APP.4.2.A6 Creation and Implementation of a User and Access Control Policy [Department, Developer] (B)
is blocked by APP.4.2.A7 Protection of SAP Databases (B)
is blocked by APP.4.2.A8 Protection of the SAP RFC Interface (B)
is blocked by APP.4.2.A11 Secure Installation of an SAP ERP System (S)
is blocked by APP.4.2.A26 Protection of Customers' Own Code in the SAP ERP System (S)
is blocked by APP.4.2.A29 Setting Up Emergency Users (S)
is blocked by APP.4.2.A30 Implementation of Continuous Monitoring of Security Settings (S)
is blocked by APP.4.2.A32 Real-Time Detection and Alerts for Irregular Processes (H)
is blocked by APP.4.3.A9 Backing Up a Database System (B)
is blocked by APP.4.3.A22 Contingency Planning (H)
is blocked by APP.4.3.A23 Archiving (H)
is blocked by APP.4.4.A2 Planning Automation with CI/CD (B)
is blocked by APP.4.4.A4 Separation of Pods (B)
is blocked by APP.4.4.A5 Backup in the Cluster (B)
is blocked by APP.4.4.A7 Separation of Networks for Kubernetes (S)
is blocked by APP.4.4.A8 Securing Configuration Files on Kubernetes (S)
is blocked by APP.4.4.A12 Securing Infrastructure Applications (S)
is blocked by APP.4.4.A13 Automated Configuration Auditing (H)
is blocked by APP.4.4.A14 Use of Dedicated Nodes (H)
is blocked by APP.4.4.A15 Separation of Applications at Node and Cluster Level (H)
is blocked by APP.4.4.A17 Attestation of Nodes (H)
is blocked by APP.4.4.A18 Use of Micro-Segmentation (H)
is blocked by APP.4.4.A20 Encrypted Data Storage for Pods (H)
is blocked by APP.4.4.A21 Regular Restart of Pods (H)
is blocked by APP.4.6.A1 Protecting Reports with Authorisation Checks (B)
is blocked by APP.4.6.A2 Formally Correct Evaluation of Authorisation Checks (B)
is blocked by APP.4.6.A4 No Proprietary Authorisation Checks (B)
is blocked by APP.4.6.A8 Protection Against Unauthorised or Manipulative Access to the File System (S)
is blocked by APP.4.6.A10 Execution of Operating System Commands (S)
is blocked by APP.4.6.A11 Avoiding Planted Malicious Code (S)
is blocked by APP.4.6.A12 Avoiding Generic Module Execution (S)
is blocked by APP.4.6.A13 Avoiding Generic Access to Table Contents (S)
is blocked by APP.4.6.A14 Avoiding Native SQL Statements (S)
is blocked by APP.4.6.A15 Avoiding Data Leaks (S)
is blocked by APP.4.6.A16 No System-Dependent Execution of Functions (S)
is blocked by APP.4.6.A17 No Client-Dependent Execution of Functions (S)
is blocked by APP.4.6.A18 Avoiding Open SQL Injection Vulnerabilities (S)
is blocked by APP.4.6.A19 Protection Against Cross-Site Scripting (S)
is blocked by APP.4.6.A20 No Access to Data from Another Client (S)
is blocked by APP.4.6.A21 Ban on Hidden ABAP Source Code (S)
is blocked by APP.5.2.A5 Backing Up Exchange (B)
is blocked by APP.5.3.A3 Data Backup and Archiving of E-Mails (B)
is blocked by APP.6.A8 Regulation of the Availability of Installation Files (S)
is blocked by APP.7.A9 Trusted Storage (H)
is blocked by SYS.1.1.A21 Operational Documentation for Servers (S)
is blocked by SYS.1.1.A37 Encapsulation of Security-Critical Applications and Operating System Components (S)
is blocked by SYS.1.2.2.A2 Secure Installation of Windows Server 2012 (B)
is blocked by SYS.1.2.2.A3 Secure Administration of Windows Server 2012 (B)
is blocked by SYS.1.2.2.A4 Secure Configuration of Windows Server 2012 (S)
is blocked by SYS.1.2.2.A5 Protection Against Malware on Windows Server 2012 (S)
is blocked by SYS.1.2.2.A11 Attack Detection in Windows Server 2012 (H)
is blocked by SYS.1.2.2.A12 Redundancy and High Availability in Windows Server 2012 (H)
is blocked by SYS.1.3.A2 Careful Allocation of IDs (B)
is blocked by SYS.1.3.A16 Additional Prevention of Further Intrusion When Vulnerabilities Are Exploited (H)
is blocked by SYS.1.3.A17 Additional Kernel Protection (H)
is blocked by SYS.1.6.A1 Planning Container Use (B)
is blocked by SYS.1.6.A3 Secure Use of Containerised IT Systems (B)
is blocked by SYS.1.6.A7 Persistence of Container Logging Data (B)
is blocked by SYS.1.6.A9 Suitability for Container Operation (S)
is blocked by SYS.1.6.A10 Policy for Images and Container Operation (S)
is blocked by SYS.1.6.A12 Distribution of Secure Images (S)
is blocked by SYS.1.6.A13 Release of Images (S)
is blocked by SYS.1.6.A14 Updating Images (S)
is blocked by SYS.1.6.A18 Application Services Accounts (S)
is blocked by SYS.1.6.A19 Including Data Stores in Containers (S)
is blocked by SYS.1.7.A1 Use of Restrictive z/OS IDs (B)
is blocked by SYS.1.7.A2 Protection of Security-Critical z/OS Utilities (B)
is blocked by SYS.1.7.A3 Maintenance of Z Systems (B)
is blocked by SYS.1.7.A4 Training z/OS Operators [Supervisor] (B)
is blocked by SYS.1.7.A5 Use and Protection of System-Related z/OS Terminals (B)
is blocked by SYS.1.7.A6 Use and Protection of the Remote Support Facility (B)
is blocked by SYS.1.7.A7 Restrictive Authorisation in z/OS (B)
is blocked by SYS.1.7.A8 Use of the z/OS Security System RACF (B)
is blocked by SYS.1.7.A9 Multi-Client Capability in z/OS (B)
is blocked by SYS.1.7.A14 Reporting on the Secure Operation of z/OS (S)
is blocked by SYS.1.7.A16 Monitoring of z/OS Systems (S)
is blocked by SYS.1.7.A17 Synchronisation of z/OS Passwords and RACF Commands (S)
is blocked by SYS.1.7.A19 Protection of z/OS Transaction Monitors (S)
is blocked by SYS.1.7.A22 Protection of the Operating Functions of z/OS (S)
is blocked by SYS.1.7.A23 Protection of z/VM (S)
is blocked by SYS.1.7.A24 Administration of Storage Media in z/OS Systems (S)
is blocked by SYS.1.7.A25 Stipulation of z/OS System Capacity (S)
is blocked by SYS.1.7.A26 Workload Management for z/OS Systems (S)
is blocked by SYS.1.7.A27 Character Set Conversion in z/OS Systems (S)
is blocked by SYS.1.7.A29 Protection of Unix System Services on z/OS Systems (S)
is blocked by SYS.1.7.A31 Contingency Planning for z/OS Systems (S)
is blocked by SYS.1.7.A33 Separation of Test and Production Systems in z/OS (H)
is blocked by SYS.1.7.A34 Batch Job Planning for z/OS Systems (H)
is blocked by SYS.1.7.A35 Use of RACF Exits (H)
is blocked by SYS.1.7.A37 Parallel Sysplex in z/OS (H)
is blocked by SYS.1.7.A38 Use of the VTAM Session Management Exit in z/OS (H)
is blocked by SYS.1.8.A20 Contingency Planning and Emergency Response for Storage Solutions (S)
is blocked by SYS.2.1.A8 Protecting the Boot Process (B)
is blocked by SYS.2.1.A42 Use of Cloud and Online Functions [User] (B)
is blocked by SYS.2.1.A15 Secure Installation and Configuration of Clients (S)
is blocked by SYS.2.1.A16 Disabling and Removing Unnecessary Components and IDs (S)
is blocked by SYS.2.1.A18 Using Encrypted Communication (S)
is blocked by SYS.2.1.A34 Encapsulation of Security-Critical Applications and Operating System Components (H)
is blocked by SYS.2.1.A28 Encryption of Clients (H)
is blocked by SYS.2.1.A32 Use of Additional Safeguards to Protect Against Exploits (H)
is blocked by SYS.2.1.A33 Using Execution Control (H)
is blocked by SYS.2.1.A37 Use of Multi-Factor Authentication (H)
is blocked by SYS.2.2.2.A3 Use of Virus Protection Programs with Windows 8.1 (B)
is blocked by SYS.2.2.2.A8 No Use of the Homegroup Feature [User] (S)
is blocked by SYS.2.2.2.A10 Integration of Online Accounts into the Operating System [User] (S)
is blocked by SYS.2.2.2.A11 Configuration of Synchronisation Mechanisms in Windows 8.1 (S)
is blocked by SYS.2.3.A6 No Automatic Integration of Removable Drives [User] (S)
is blocked by SYS.2.3.A9 Secure Use of Passwords in the Command Line [User] (S)
is blocked by SYS.2.3.A11 Preventing the Local Hard Drive From Becoming Overloaded (S)
is blocked by SYS.2.3.A12 Secure Use of Appliances (S)
is blocked by SYS.2.3.A18 Additional Kernel Protection (H)
is blocked by SYS.2.4.A1 Planning the Secure Use of macOS (B)
is blocked by SYS.2.4.A8 No iCloud Use for Confidential Data [User] (S)
is blocked by SYS.2.4.A11 Disposing of Macs (S)
is blocked by SYS.3.1.A1 Rules for Mobile Laptop Use (B)
is blocked by SYS.3.1.A6 Security Guidelines for Laptops (S)
is blocked by SYS.3.1.A10 Synchronisation of Stored Data on Laptops [User] (S)
is blocked by SYS.3.1.A11 Securing the Power Supply for Laptops [User] (S)
is blocked by SYS.3.2.1.A9 Restrictive Use of Functional Extensions (S)
is blocked by SYS.3.2.2.A3 Selecting an MDM Product (B)
is blocked by IND.2.1.A1 Restriction of Access to Configuration and Maintenance Interfaces [OT Operations] (B)
is blocked by IND.2.1.A7 Creating Backups [OT Operations] (S)
is blocked by IND.2.1.A16 Protecting External Interfaces [OT Operations] (S)
is blocked by IND.2.1.A18 Communication in the Event of Incidents [OT Operations, Employee] (S)
is blocked by NET.1.2.A6 Regular Backups (B)
is blocked by NET.1.2.A35 Specifications for Securing Evidence (H)
is blocked by NET.1.2.A36 Integration of Network Management Logging into an SIEM Solution (H)
is blocked by NET.1.2.A38 Specification of Forms of Emergency Operations for Network Management Infrastructure (H)
is blocked by NET.3.1.A5 Protection Against Fragmentation Attacks (B)
is blocked by NET.3.1.A15 Bogon and Spoofing Filtering (S)
is blocked by NET.3.1.A16 Protection Against “IPv6 Routing Header Type-0” attacks (S)
is blocked by NET.3.1.A17 Protection Against DoS and DDoS Attacks (S)
is blocked by NET.3.1.A18 Configuration of Access Control Lists (S)
is blocked by NET.3.1.A19 Protection of Switch Ports (S)
is blocked by NET.3.1.A28 Use of Certified Products (H)
is blocked by NET.3.2.A4 Secure Firewall Configuration (B)
is blocked by NET.3.2.A6 Protection of Administration Interfaces (B)
is blocked by NET.3.2.A9 Logging (B)
is blocked by NET.3.2.A22 Secure Time Synchronisation (S)
is blocked by NET.3.2.A25 Advanced Integrity Protection for Configuration Files (H)
is blocked by NET.4.2.A7 Drawing up a Security Policy for VoIP (S)
is blocked by INF.6.A6 Avoidance of Water Pipes [Building Services] (S)
is blocked by INF.9.A2 Regulations for Mobile Workplaces [Human Resources Department] (B)
is blocked by INF.9.A12 Using a Screen Protector [Employee] (S)
is blocked by INF.9.A10 Use of Anti-Theft Devices [Employee] (H)
is blocked by INF.10.A7 Secure Configuration of Training and Presentation Computers [IT Operation Department] (S)