The integrity of information may be impaired for different reasons, e.g. manipulations, errors caused by people, incorrect use of applications, malfunctions of software or transmission errors.

When the integrity of information is violated, a number of problems can arise:

Kwistjonijiet marbuta

Links
Tip ta’ link Kwistjoni
is blocked by ORP.1.A1 Specification of Responsibilities and Provisions [Top Management]
is blocked by ORP.1.A2 Assigning Responsibilities [Top Management] (B)
is blocked by ORP.1.A15 Contact Persons for Information Security Issues (B)
is blocked by ORP.1.A13 Security During Relocation [IT Operation Department, Building Services] (S)
is blocked by ORP.1.A16 Policy for Secure IT Use [User] (S)
is blocked by ORP.2.A1 Well-Regulated Orientation of New Employees [Supervisor] (B)
is blocked by ORP.2.A2 Regulated Procedure for Employees Leaving the Organisation [Supervisor, IT Operation Department] (B)
is blocked by ORP.2.A4 Defining Procedures for Using Third-Party Personnel (B)
is blocked by ORP.2.A5 Confidentiality Agreements for Third-Party Personnel (B)
is blocked by ORP.2.A14 Tasks and Responsibilities of Employees [Supervisor] (B)
is blocked by ORP.2.A15 Qualifications of Personnel [Supervisor] (B)
is blocked by ORP.2.A7 Verifying the Trustworthiness of Employees (S)
is blocked by ORP.3.A1 Top Management Awareness of Information Security Issues [Supervisor, Top Management] (B)
is blocked by ORP.3.A3 Training Employees in the Secure Handling of IT [Supervisor, Human Resources Department, IT Operation Department] (B)
is blocked by ORP.3.A9 Special Training for Exposed Persons and Organisations (H)
is blocked by ORP.4.A9 Identification and Authentication [IT Operation Department] (B)
is blocked by CON.1.A2 Backups When Using Cryptographic Methods [IT Operation Department] (B)
is blocked by CON.1.A6 Identifying the Need for Cryptographic Methods and Products [IT Operation Department, Process Owner] (S)
is blocked by CON.1.A13 Operating System Security Requirements When Using Crypto Modules (H)
is blocked by CON.3.A12 Secure Storage of Backup Media [IT Operation Department] (B)
is blocked by CON.3.A13 Using Cryptographic Methods for Backups [IT Operation Department] (H)
is blocked by CON.7.A3 Identification of Country-Specific Regulations, Travel Conditions and Environmental Conditions [Human Resource Department]
is blocked by CON.7.A10 Encryption of Portable IT Systems and Storage Media [User, IT Operation Department] (B)
is blocked by CON.7.A13 Transporting Necessary Data and Storage Media [User] (S)
is blocked by CON.7.A14 Cryptographically Secured E-Mail Communication [User, IT Operation Department] (S)
is blocked by CON.7.A16 Protecting Integrity Using Checksums or Digital Signatures [User] (H)
is blocked by CON.8.A5 Secure System Design (B)
is blocked by CON.8.A11 Drawing Up a Policy for Software Development (S)
is blocked by CON.8.A16 Appropriate Control of Software Development (S)
is blocked by CON.8.A17 Selection of Trusted Development Tools (H)
is blocked by OPS.1.1.3.A10 Assuring the Integrity and Authenticity of Software Packages (S)
is blocked by OPS.1.1.4.A1 Creating a Malware Protection Concept (B)
is blocked by OPS.1.1.4.A2 Using System-Specific Protection Mechanisms (B)
is blocked by OPS.1.1.4.A3 Selection of a Virus Protection Program (B)
is blocked by OPS.1.1.4.A5 Operation and Configuration of Virus Protection Programs (B)
is blocked by OPS.1.1.4.A6 Regular Updating of Virus Protection Programs and Signatures (B)
is blocked by OPS.1.1.4.A7 User Awareness and Obligations [User] (B)
is blocked by OPS.1.1.4.A9 Reporting Malware Infections [User] (S)
is blocked by OPS.1.1.4.A10 Using Special Analysis Environments (H)
is blocked by OPS.1.1.4.A11 Using Several Scan Engines (H)
is blocked by OPS.1.1.4.A12 Using Storage Media Locks (H)
is blocked by OPS.1.1.4.A13 Handling Untrusted Files (H)
is blocked by OPS.1.1.4.A14 Selecting and Using Cyber Security Products to Thwart Targeted Attacks (H)
is blocked by OPS.1.1.5.A5 Complying with Legal Framework Conditions (B)
is blocked by OPS.1.1.5.A9 Providing Log Data for Assessment (S)
is blocked by OPS.1.1.5.A12 Encryption of Log Data (H)
is blocked by OPS.1.1.6.A13 Separating the Test Environment from the Production Environment (S)
is blocked by OPS.1.2.2.A6 Protection of the Integrity of the Index Database of Archive Systems [IT Operation Department] (B)
is blocked by OPS.1.2.2.A7 Regular Backups of System and Archive Data [IT Operation Department] (B)
is blocked by OPS.1.2.2.A9 Selection of Suitable Data Formats for Archiving Documents [IT Operation Department] (B)
is blocked by OPS.1.2.2.A12 Monitoring of Storage Resources for Archive Media [IT Operation Department] (S)
is blocked by OPS.1.2.2.A15 Regular Processing of Cryptographically Secured Data During Archiving [IT Operation Department] (S)
is blocked by OPS.1.2.2.A16 Regular Renewal of Technical Archive System Components [IT Operation Department] (S)
is blocked by OPS.1.2.2.A20 Appropriate Use of Cryptographic Methods for Archiving [IT Operation Department] (H)
is blocked by OPS.1.2.4.A1 Rules on Teleworking [Supervisor, Human Resources Department] (B)
is blocked by OPS.1.2.4.A2 Security-Related Requirements for Teleworking Computers (B)
is blocked by OPS.1.2.4.A5 Employee Awareness and Training (B)
is blocked by OPS.1.2.4.A7 Regulations on Using Communication Capabilities for Teleworking [IT Operation Department, Employee] (S)
is blocked by OPS.1.2.4.A8 Flow of Information Between Employees and Organisations [Supervisor, Employee] (S)
is blocked by OPS.1.2.4.A9 Support and Maintenance Concept for Teleworking Locations [IT Operation Department, Employee] (S)
is blocked by OPS.1.2.6.A3 Secure Configuration of NTP Servers (B)
is blocked by OPS.1.2.6.A5 Use of Client-Server Mode for NTP (S)
is blocked by OPS.1.2.6.A7 Secure Configuration of NTP Clients (S)
is blocked by OPS.1.2.6.A8 Use of Secure Time Synchronisation Protocols (S)
is blocked by OPS.1.2.6.A9 Sufficient Availability of Accurate Time Sources (H)
is blocked by OPS.3.1.A3 Creating a Security Concept for the Outsourcing Project (S)
is blocked by OPS.3.1.A4 Definition of Possible Communication Partners [Central Administration, Data Protection Officer] (S)
is blocked by OPS.3.1.A7 Creation of a Client Separation Concept by an Outsourcing Service Provider (S)
is blocked by OPS.3.1.A9 Agreement on the Exchange of Data Between Outsourcing Partners (S)
is blocked by OPS.3.1.A10 Planning and Maintaining Information Security During Ongoing Outsourcing Operations (S)
is blocked by OPS.3.1.A13 Secure Migration in Outsourcing Projects (S)
is blocked by OPS.3.1.A15 Orderly Termination of an Outsourcing Relationship [Top Management] (S)
is blocked by DER.1.A15 Central Detection and Real-Time Examination of Event Messages (H)
is blocked by DER.1.A16 Use of Detection Systems in Accordance with Protection Requirements (H)
is blocked by DER.1.A18 Performance of Regular Integrity Checks (H)
is blocked by DER.2.1.A6 Recovering the Operating Environment After Security Incidents [IT Operation Department] (B)
is blocked by DER.2.1.A10 Limiting the Effects of Security Incidents [BCM Officer, IT Operation Department] (S)
is blocked by DER.2.1.A12 Specification of Where Security Incident Handling Overlaps with Fault Management [BCM Officer] (S)
is blocked by DER.2.1.A13 Integration into Security and Business Continuity Management [BCM Officer] (S)
is blocked by DER.2.1.A14 Escalation Strategy for Security Incidents [IT Operation Department] (S)
is blocked by DER.2.1.A17 Evaluation of Security Incidents (S)
is blocked by DER.2.1.A18 Further Development of Processes Based on Findings from Security Incidents and Industry Developments [Process Owner] (S)
is blocked by DER.2.1.A19 Specifying Priorities for Handling Security Incidents [Top Management] (H)
is blocked by DER.2.1.A20 Creation of a Dedicated Reporting Office for Security Incidents (H)
is blocked by DER.2.1.A21 Assembling a Team of Experts for Handling Security Incidents (H)
is blocked by DER.2.1.A22 Reviewing Management System Efficiency in Handling Security Incidents (H)
is blocked by DER.2.2.A2 Drawing Up a Guide for Initial Measures in Case of an IT Security Incident (B)
is blocked by DER.2.2.A4 Identifying Common Areas Between IT Forensics and Crisis/Business Continuity Management (S)
is blocked by DER.2.2.A5 Drawing Up a Guide to Securing Evidence in Case of IT Security Incidents (S)
is blocked by DER.2.2.A6 Training Personnel on Forensic Securing of Evidence (S)
is blocked by DER.2.2.A7 Selecting Tools for Forensics (S)
is blocked by DER.2.2.A8 Selection and Order of Evidence to Be Secured [Process Owner] (S)
is blocked by DER.2.2.A9 Pre-Selection of Forensically Relevant Data [Process Owner] (S)
is blocked by DER.2.2.A10 Forensic Securing of IT Evidence [Process Owner] (S)
is blocked by DER.2.2.A11 Documentation of Securing Evidence [Process Owner] (S)
is blocked by DER.2.2.A12 Secure Storage of Original Storage Media and Evidence [Process Owner] (S)
is blocked by DER.2.2.A14 Specifying Standard Procedures for Securing Evidence (H)
is blocked by DER.2.2.A15 Conducting Drills on Securing Evidence (H)
is blocked by DER.2.3.A1 Creation of a Management Committee (B)
is blocked by DER.2.3.A2 Deciding on a Cleaning Strategy (B)
is blocked by DER.2.3.A3 Isolation of Affected Network Segments (B)
is blocked by DER.2.3.A4 Blocking and Changing Access Data and Cryptographic Keys (B)
is blocked by DER.2.3.A7 Targeted System Hardening (S)
is blocked by DER.2.3.A8 Establishing Secure, Independent Communication Channels (S)
is blocked by DER.2.3.A9 Hardware Replacement in Affected IT Systems (H)
is blocked by DER.2.3.A10 Modifications to Help Thwart a Repeat Attack (H)
is blocked by DER.3.1.A1 Definition of Responsibilities [Top Management] (B)
is blocked by DER.3.1.A5 Integration into the Information Security Process (S)
is blocked by DER.3.1.A7 Drawing Up an Audit Program (S)
is blocked by DER.3.1.A8 Creation of a Revision List (S)
is blocked by DER.3.1.A9 Selection of an Appropriate Audit Team or Revision Team (S)
is blocked by DER.3.1.A22 Creation of an Audit Report [Audit Team] (S)
is blocked by DER.3.1.A23 Documentation of Revision Results (S)
is blocked by DER.3.1.A24 Conclusion of the Audit or Revision [Audit Team] (S)
is blocked by DER.3.1.A26 Monitoring and Adapting the Audit Program (S)
is blocked by DER.3.1.A27 Storage and Archiving of Documents on Audits and Revisions (S)
is blocked by DER.3.2.A8 Storage of IS Audit Reports (B)
is blocked by DER.3.2.A10 Communication Coordination (S)
is blocked by DER.3.2.A17 Conducting the On-Site Audit [IS Audit Team] (S)
is blocked by DER.3.2.A21 Creation of an IS Audit Report [IS Audit Team] (S)
is blocked by APP.1.1.A17 Awareness of Specific Office Properties (B)
is blocked by APP.1.1.A6 Testing New Versions of Office Products (S)
is blocked by APP.1.1.A12 No Cloud Storage [User] (S)
is blocked by APP.1.1.A14 Protection Against Subsequent Changes to Documents [User] (S)
is blocked by APP.1.1.A15 Use of Encryption and Digital Signatures (H)
is blocked by APP.1.1.A16 Checking Document Integrity (H)
is blocked by APP.2.1.A2 Planning the Use of Directory Services [Data Protection Officer, Process Owner] (B)
is blocked by APP.2.1.A3 Setting Up Access Authorisations for Directory Services [Process Owner] (B)
is blocked by APP.2.1.A6 Secure Operation of Directory Services (B)
is blocked by APP.2.1.A8 Planning of Partitioning and Replication in the Directory Service (S)
is blocked by APP.2.1.A11 Setting Up Access to Directory Services (S)
is blocked by APP.2.1.A13 Protection of Communications with Directory Services (S)
is blocked by APP.2.2.A1 Planning Active Directory [Process Owner] (B)
is blocked by APP.2.2.A2 Planning of Active Directory Administration [Process Owner] (B)
is blocked by APP.2.2.A3 Planning of Group Policy in Windows (B)
is blocked by APP.2.2.A5 Hardening Active Directory (B)
is blocked by APP.2.2.A6 Maintaining the Operational Continuity of Active Directory (B)
is blocked by APP.2.2.A7 Implementation of Secure Administration Methods for Active Directory [Process Owner] (B)
is blocked by APP.2.2.A8 Configuration of Secure Channel in Windows (S)
is blocked by APP.2.2.A9 Authentication Protection When Using Active Directory (S)
is blocked by APP.2.2.A10 Secure Use of DNS for Active Directory (S)
is blocked by APP.3.1.A11 Secure Integration of Background Systems (S)
is blocked by APP.3.2.A1 Secure Web Server Configuration (B)
is blocked by APP.3.2.A2 Protection of Web Server Files (B)
is blocked by APP.3.2.A14 Integrity Checks and Protection Against Malware (S)
is blocked by APP.3.3.A2 Use of RAID Systems (B)
is blocked by APP.3.3.A7 Selecting a File System (S)
is blocked by APP.3.3.A14 Using Error Correction Codes (S)
is blocked by APP.3.4.A4 Avoiding NTFS File Properties on a Samba Server (S)
is blocked by APP.3.4.A5 Secure Configuration of a Samba Server's Access Controls (S)
is blocked by APP.3.4.A15 Encryption of Data Packets in Samba (H)
is blocked by APP.3.6.A4 Secure Basic Configuration of a DNS Server (B)
is blocked by APP.3.6.A17 Use of DNSSEC (S)
is blocked by APP.3.6.A18 Advanced Securing of Zone Transfers (S)
is blocked by APP.4.2.A1 Secure Configuration of the SAP Java Stack (B)
is blocked by APP.4.2.A2 Secure Configuration of the SAP Java Stack (B)
is blocked by APP.4.2.A4 Protection of Standard SAP User IDs (B)
is blocked by APP.4.2.A5 Configuration and Protection of SAP User Administration (B)
is blocked by APP.4.2.A6 Creation and Implementation of a User and Access Control Policy [Department, Developer] (B)
is blocked by APP.4.2.A7 Protection of SAP Databases (B)
is blocked by APP.4.2.A8 Protection of the SAP RFC Interface (B)
is blocked by APP.4.2.A11 Secure Installation of an SAP ERP System (S)
is blocked by APP.4.2.A12 SAP Authorisation Development [Department, Developer] (S)
is blocked by APP.4.2.A22 Protection of the Spool in the SAP ERP System [Developer] (S)
is blocked by APP.4.2.A23 Protection of SAP Background Processing [Developer] (S)
is blocked by APP.4.2.A26 Protection of Customers' Own Code in the SAP ERP System (S)
is blocked by APP.4.2.A29 Setting Up Emergency Users (S)
is blocked by APP.4.2.A30 Implementation of Continuous Monitoring of Security Settings (S)
is blocked by APP.4.2.A32 Real-Time Detection and Alerts for Irregular Processes (H)
is blocked by APP.4.3.A3 Basic Hardening of Database Management Systems (B)
is blocked by APP.4.3.A4 Controlled Creation of New Databases (B)
is blocked by APP.4.3.A9 Backing Up a Database System (B)
is blocked by APP.4.3.A12 Uniform Configuration Standard for Database Management Systems (S)
is blocked by APP.4.3.A19 Protection Against Malicious Database Scripts [Developer] (S)
is blocked by APP.4.3.A20 Regular Audits (S)
is blocked by APP.4.3.A21 Use of Database Security Tools (H)
is blocked by APP.4.3.A23 Archiving (H)
is blocked by APP.4.3.A24 Data Encryption in Databases (H)
is blocked by APP.4.3.A25 Security Audits of Database Systems (H)
is blocked by APP.4.4.A1 Planning the Separation of the Applications (B)
is blocked by APP.4.4.A2 Planning Automation with CI/CD (B)
is blocked by APP.4.4.A3 Identity and Access Management for Kubernetes (B)
is blocked by APP.4.4.A4 Separation of Pods (B)
is blocked by APP.4.4.A7 Separation of Networks for Kubernetes (S)
is blocked by APP.4.4.A8 Securing Configuration Files on Kubernetes (S)
is blocked by APP.4.4.A12 Securing Infrastructure Applications (S)
is blocked by APP.4.4.A13 Automated Configuration Auditing (H)
is blocked by APP.4.4.A14 Use of Dedicated Nodes (H)
is blocked by APP.4.4.A15 Separation of Applications at Node and Cluster Level (H)
is blocked by APP.4.4.A17 Attestation of Nodes (H)
is blocked by APP.4.4.A18 Use of Micro-Segmentation (H)
is blocked by APP.4.4.A20 Encrypted Data Storage for Pods (H)
is blocked by APP.4.4.A21 Regular Restart of Pods (H)
is blocked by APP.4.6.A1 Protecting Reports with Authorisation Checks (B)
is blocked by APP.4.6.A2 Formally Correct Evaluation of Authorisation Checks (B)
is blocked by APP.4.6.A4 No Proprietary Authorisation Checks (B)
is blocked by APP.4.6.A6 Complete Execution of Authorisation Checks (S)
is blocked by APP.4.6.A7 Authorisation Check During Input Processing (S)
is blocked by APP.4.6.A8 Protection Against Unauthorised or Manipulative Access to the File System (S)
is blocked by APP.4.6.A10 Execution of Operating System Commands (S)
is blocked by APP.4.6.A11 Avoiding Planted Malicious Code (S)
is blocked by APP.4.6.A12 Avoiding Generic Module Execution (S)
is blocked by APP.4.6.A13 Avoiding Generic Access to Table Contents (S)
is blocked by APP.4.6.A14 Avoiding Native SQL Statements (S)
is blocked by APP.4.6.A16 No System-Dependent Execution of Functions (S)
is blocked by APP.4.6.A17 No Client-Dependent Execution of Functions (S)
is blocked by APP.4.6.A18 Avoiding Open SQL Injection Vulnerabilities (S)
is blocked by APP.4.6.A19 Protection Against Cross-Site Scripting (S)
is blocked by APP.4.6.A20 No Access to Data from Another Client (S)
is blocked by APP.4.6.A21 Ban on Hidden ABAP Source Code (S)
is blocked by APP.5.2.A9 Secure Configuration of Exchange Servers (S)
is blocked by APP.6.A2 Drawing Up a Requirements Catalogue for Software [Process Owner] (B)
is blocked by APP.6.A6 Consideration of Recommended Security Requirements (S)
is blocked by SYS.1.1.A34 Hard Disk Encryption (H)
is blocked by SYS.1.1.A38 Hardening of the Host System by Means of a Read-Only File System (H)
is blocked by SYS.1.2.2.A2 Secure Installation of Windows Server 2012 (B)
is blocked by SYS.1.2.2.A3 Secure Administration of Windows Server 2012 (B)
is blocked by SYS.1.2.2.A4 Secure Configuration of Windows Server 2012 (S)
is blocked by SYS.1.2.2.A5 Protection Against Malware on Windows Server 2012 (S)
is blocked by SYS.1.2.2.A6 Secure Authentication and Authorisation in Windows Server 2012 (S)
is blocked by SYS.1.2.2.A8 Protection of System Integrity (S)
is blocked by SYS.1.2.2.A11 Attack Detection in Windows Server 2012 (H)
is blocked by SYS.1.2.2.A14 Shutting Down Encrypted Servers and Virtual Machines (H)
is blocked by SYS.1.3.A2 Careful Allocation of IDs (B)
is blocked by SYS.1.3.A14 Preventing Unauthorised Collection of System and User Information (H)
is blocked by SYS.1.5.A5 Protection of Administration Interfaces (B)
is blocked by SYS.1.5.A11 Administration of the Virtualisation Infrastructure Using a Separate Management Network (S)
is blocked by SYS.1.5.A26 Use of a PKI [Planner] (H)
is blocked by SYS.1.6.A1 Planning Container Use (B)
is blocked by SYS.1.6.A2 Container Management Planning (B)
is blocked by SYS.1.6.A3 Secure Use of Containerised IT Systems (B)
is blocked by SYS.1.6.A5 Separation of Administration and Access Networks for Containers (B)
is blocked by SYS.1.6.A6 Use of Secure Images (B)
is blocked by SYS.1.6.A8 Secure Storage of Container Access Data (B)
is blocked by SYS.1.6.A9 Suitability for Container Operation (S)
is blocked by SYS.1.6.A10 Policy for Images and Container Operation (S)
is blocked by SYS.1.6.A12 Distribution of Secure Images (S)
is blocked by SYS.1.6.A13 Release of Images (S)
is blocked by SYS.1.6.A14 Updating Images (S)
is blocked by SYS.1.6.A16 Administrative Remote Access to Containers (S)
is blocked by SYS.1.6.A17 Running Containers Without Privileges (S)
is blocked by SYS.1.6.A18 Application Services Accounts (S)
is blocked by SYS.1.6.A19 Including Data Stores in Containers (S)
is blocked by SYS.1.6.A21 Extended Security Policies (H)
is blocked by SYS.1.6.A23 Container Immutability (H)
is blocked by SYS.1.6.A24 Host-Based Attack Detection (H)
is blocked by SYS.1.6.A25 High Availability of Containerised Applications (H)
is blocked by SYS.1.7.A1 Use of Restrictive z/OS IDs (B)
is blocked by SYS.1.7.A2 Protection of Security-Critical z/OS Utilities (B)
is blocked by SYS.1.7.A3 Maintenance of Z Systems (B)
is blocked by SYS.1.7.A4 Training z/OS Operators [Supervisor] (B)
is blocked by SYS.1.7.A5 Use and Protection of System-Related z/OS Terminals (B)
is blocked by SYS.1.7.A6 Use and Protection of the Remote Support Facility (B)
is blocked by SYS.1.7.A7 Restrictive Authorisation in z/OS (B)
is blocked by SYS.1.7.A8 Use of the z/OS Security System RACF (B)
is blocked by SYS.1.7.A9 Multi-Client Capability in z/OS (B)
is blocked by SYS.1.7.A14 Reporting on the Secure Operation of z/OS (S)
is blocked by SYS.1.7.A16 Monitoring of z/OS Systems (S)
is blocked by SYS.1.7.A19 Protection of z/OS Transaction Monitors (S)
is blocked by SYS.1.7.A22 Protection of the Operating Functions of z/OS (S)
is blocked by SYS.1.7.A23 Protection of z/VM (S)
is blocked by SYS.1.7.A24 Administration of Storage Media in z/OS Systems (S)
is blocked by SYS.1.7.A26 Workload Management for z/OS Systems (S)
is blocked by SYS.1.7.A27 Character Set Conversion in z/OS Systems (S)
is blocked by SYS.1.7.A29 Protection of Unix System Services on z/OS Systems (S)
is blocked by SYS.1.7.A33 Separation of Test and Production Systems in z/OS (H)
is blocked by SYS.1.7.A34 Batch Job Planning for z/OS Systems (H)
is blocked by SYS.1.7.A35 Use of RACF Exits (H)
is blocked by SYS.1.7.A36 Internal Communication Between Operating Systems (H)
is blocked by SYS.1.7.A38 Use of the VTAM Session Management Exit in z/OS (H)
is blocked by SYS.1.8.A23 Use of Encryption for Storage Solutions (H)
is blocked by SYS.1.8.A24 Ensuring the Integrity of the SAN Fabric (H)
is blocked by SYS.2.1.A42 Use of Cloud and Online Functions [User] (B)
is blocked by SYS.2.1.A18 Using Encrypted Communication (S)
is blocked by SYS.2.2.2.A2 Defining a Login Procedure for Windows 8.1 (B)
is blocked by SYS.2.2.2.A3 Use of Virus Protection Programs with Windows 8.1 (B)
is blocked by SYS.2.2.2.A5 Local Security Policy for Windows 8.1 (S)
is blocked by SYS.2.2.2.A7 Use of Windows User Account Control (S)
is blocked by SYS.2.2.2.A9 Data Protection and Data Economy in Windows 8.1 Clients [User] (S)
is blocked by SYS.2.2.2.A12 Secure Central Authentication of Windows Networks (S)
is blocked by SYS.2.2.2.A13 Connection of Windows 8.1 to the Microsoft Store (S)
is blocked by SYS.2.2.2.A14 Application Control Using Software Restriction Policies and AppLocker (H)
is blocked by SYS.2.2.2.A15 File System Encryption Using EFS (H)
is blocked by SYS.2.2.2.A20 Security During Remote Access Using RDP (H)
is blocked by SYS.2.2.2.A21 Use of File and Registry Virtualisation (H)
is blocked by SYS.2.3.A9 Secure Use of Passwords in the Command Line [User] (S)
is blocked by SYS.2.3.A11 Preventing the Local Hard Drive From Becoming Overloaded (S)
is blocked by SYS.2.3.A12 Secure Use of Appliances (S)
is blocked by SYS.2.3.A18 Additional Kernel Protection (H)
is blocked by SYS.2.3.A19 Hard Disk or File Encryption (H)
is blocked by SYS.2.4.A1 Planning the Secure Use of macOS (B)
is blocked by SYS.2.4.A12 Firmware Password and Boot Protection on Macs [User] (H)
is blocked by SYS.3.2.1.A9 Restrictive Use of Functional Extensions (S)
is blocked by SYS.3.2.3.A1 Strategy for Using iOS Devices (B)
is blocked by SYS.3.2.3.A2 Planning the Use of Cloud Services (B)
is blocked by SYS.3.2.3.A7 Preventing Unauthorised Deletion of Configuration Profiles (B)
is blocked by SYS.3.2.3.A12 Using Apple IDs (S)
is blocked by SYS.3.2.3.A13 Using the “iOS Restrictions” Configuration Option (S)
is blocked by SYS.3.2.3.A15 Using Continuity Functions (S)
is blocked by SYS.3.2.3.A17 Using the Device Code History (S)
is blocked by SYS.3.2.3.A21 Installation of Apps and Integration of the Apple App Store (S)
is blocked by SYS.3.2.3.A25 Using the Configuration Option for AirPrint (H)
is blocked by SYS.3.2.3.A26 No Connections to Host Systems (H)
is blocked by SYS.3.2.4.A2 Disabling Developer Options (S)
is blocked by SYS.4.3.A8 Using a Secure Operating System for Embedded Systems [Developer, Planner, Procurement Department] (S)
is blocked by SYS.4.3.A9 Use of Cryptographic Processors or Coprocessors in Embedded Systems [Developer, Planner, Procurement Department] (S)
is blocked by SYS.4.3.A13 Use of a Certified Operating System [Developer, Planner, Procurement Department] (H)
is blocked by SYS.4.3.A17 Automatic Monitoring of Assembly Functions [Planner, Procurement Department] (H)
is blocked by SYS.4.3.A18 Resistance of Embedded Systems to Side-Channel Attacks [Developer, Procurement Department] (H)
is blocked by SYS.4.5.A11 Protecting Integrity Using Checksums or Digital Signatures (H)
is blocked by IND.1.A9 Restrictive Use of Removable Media and Mobile Devices in ICS Environments (S)
is blocked by IND.2.1.A1 Restriction of Access to Configuration and Maintenance Interfaces [OT Operations] (B)
is blocked by IND.2.1.A2 Using Secure Transmission Protocols for Configuration and Maintenance [Maintenance Personnel, OT Operations] (B)
is blocked by IND.2.1.A17 Use of Secure Protocols for the Transmission of Measurement and Control Data [OT Operations] (S)
is blocked by IND.2.1.A19 Security Tests [OT Operations] (H)
is blocked by IND.2.7.A1 Recording and Documentation [Planner, Maintenance Personnel] (B)
is blocked by IND.2.7.A2 Specified Use of Hardware and Software Components [Maintenance Personnel] (B)
is blocked by IND.2.7.A3 Changing the Application Program on the Logic System [Maintenance Personnel] (B)
is blocked by IND.2.7.A7 Separation and Independence of the SIS from the Environment [Planner, Maintenance Personnel] (S)
is blocked by IND.2.7.A8 Secure Transfer of Engineering Data to SIS [Planner, Maintenance Personnel, ICS Information Security Officer] (S)
is blocked by IND.2.7.A9 Protection of Data and Signal Connections [Planner, Maintenance Personnel, ICS Information Security Officer] (S)
is blocked by IND.2.7.A11 Dealing with Integrated Systems [Planner, Maintenance Personnel, ICS Information Security Officer] (S)
is blocked by NET.1.1.A7 Protection of Sensitive Information (B)
is blocked by NET.1.1.A9 Basic Protection of Communication with Untrusted Networks (B)
is blocked by NET.1.2.A9 Protection of Network Management Communication and Access to Network Management Tools (B)
is blocked by NET.1.2.A31 Basic Use of Secure Protocols (H)
is blocked by NET.1.2.A35 Specifications for Securing Evidence (H)
is blocked by NET.1.2.A36 Integration of Network Management Logging into an SIEM Solution (H)
is blocked by NET.3.1.A5 Protection Against Fragmentation Attacks (B)
is blocked by NET.3.1.A15 Bogon and Spoofing Filtering (S)
is blocked by NET.3.1.A16 Protection Against “IPv6 Routing Header Type-0” attacks (S)
is blocked by NET.3.1.A17 Protection Against DoS and DDoS Attacks (S)
is blocked by NET.3.1.A18 Configuration of Access Control Lists (S)
is blocked by NET.3.1.A19 Protection of Switch Ports (S)
is blocked by NET.3.1.A28 Use of Certified Products (H)
is blocked by NET.3.2.A2 Definition of Firewall Rules (B)
is blocked by NET.3.2.A3 Configuring Appropriate Filter Rules on the Packet Filter (B)
is blocked by NET.3.2.A4 Secure Firewall Configuration (B)
is blocked by NET.3.2.A6 Protection of Administration Interfaces (B)
is blocked by NET.3.2.A9 Logging (B)
is blocked by NET.3.2.A22 Secure Time Synchronisation (S)
is blocked by NET.3.2.A25 Advanced Integrity Protection for Configuration Files (H)
is blocked by NET.3.2.A28 Central Filtering of Active Content (H)
is blocked by NET.3.3.A7 Planning the Technical VPN Implementation (S)
is blocked by NET.3.3.A10 Secure Operation of a VPN (S)
is blocked by NET.3.3.A13 Integration of VPN Components into a Firewall (S)
is blocked by NET.4.2.A1 Planning the Use of VoIP (B)
is blocked by NET.4.2.A7 Drawing up a Security Policy for VoIP (S)
is blocked by NET.4.2.A8 Encryption of VoIP (S)
is blocked by NET.4.2.A13 Firewall Requirements When Using VoIP (S)
is blocked by NET.4.2.A14 Encryption of Signalling (H)
is blocked by INF.6.A2 Site Access Regulations and Control [Building Services] (B)
is blocked by INF.6.A3 Protection Against Dust and Other Contamination (B)
is blocked by INF.6.A4 Closed Windows and Locked Doors [Employee] (B)
is blocked by INF.6.A8 Secure Doors and Windows [Planner] (S)
is blocked by INF.7.A2 Closed Windows and Locked Doors [Employee, Building Services] (b)
is blocked by INF.7.A5 Workplace Ergonomics [Central Administration, Supervisor] (S)
is blocked by INF.7.A6 Workplace Cleanliness [Employee, Supervisor] (S)
is blocked by INF.7.A7 Suitable Storage of Official Documents and Storage Media [Employee, Building Services] (S)
is blocked by INF.9.A3 Site and Data Access Protection [Central Administration, Employee] (B)
is blocked by INF.9.A4 Working with External IT Systems [IT Operation Department, Employee] (B)
is blocked by INF.9.A6 Disposal of Confidential Information [Employee] (S)
is blocked by INF.9.A8 Security Policy for Mobile Workplaces [IT Operation Department] (S)
is blocked by INF.9.A12 Using a Screen Protector [Employee] (S)
is blocked by INF.14.A3 Secure Connection of Building Services and Building Services Systems (B)
is blocked by INF.14.A12 Use of Secure Transmission Protocols for BACS (S)
is blocked by INF.14.A15 Security of BACS-Specific Networks (S)
is blocked by INF.14.A16 Securing Wireless Communication in BACS Networks (S) [Planner]
is blocked by INF.14.A17 Securing Mobile Communications in BACS Networks (S) [Planner]
is blocked by INF.14.A18 Secure Integration of BACS-External Systems (S)
is blocked by INF.14.A24 Time Synchronisation for BACS (S)
is blocked by INF.14.A28 Physical Separation of BACS (H) [Planner]
is blocked by INF.14.A29 Separation of Individual Building Services Systems (H)
is blocked by INF.14.A30 Provision of a Dedicated BACS Time Server for Time Synchronisation (H)