NET.2.1.A8 Codes of Conduct in the Event of WLAN Security Incidents (B)

If a security incident occurs, the IT Operation Department MUST initiate appropriate countermeasures:

• At the point where WLAN communication enters the internal LAN in question, communication SHOULD be blocked selectively for every SSID and access point—or even for the entire WLAN infrastructure—in the event of an attack.
• If access points have been stolen, defined security safeguards MUST be implemented to prevent any misuse of the access points or the information stored on them.
• If WLAN clients have been stolen and central certificate-based authentication is being used, the client certificates MUST be blocked.

The possibility of using stolen devices without authorisation in order to access the network of a given organisation MUST be ruled out.

1. Ħarsa ġenerali

1.1 Referenzi

1.2 Rekwiżiti identifikati

1.3 Regolamenti relatati

2. Rekwiżiti identifikati

3. Regolamenti relatati

Kwistjonijiet marbuta

• BSI -

  Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)