+IND.1.A14 Strong Authentication for OT Components (H)

IND.1.A14 Strong Authentication for OT Components (H)

A central directory service SHOULD be set up for the secure authorisation of privileged users in the control systems at hand (see module ORP.4 Identity and Access Management). Authentication SHOULD be secured further using several factors, such as knowledge, ownership, or biometrics.

During planning, it SHOULD be ensured that any resulting dependencies in user authentication are known and taken into consideration when implementing a corresponding solution.

It SHOULD be ensured that operationally required technical accounts can be authorised in emergencies.

1. Przegląd

1.1 Odwołania

1.2 Zidentyfikowane wymagania

1.3 Powiązane regulacje

2. Zidentyfikowane wymagania

Wymagania

3. Powiązane regulacje

Regulacje

Powiązane zgłoszenia

Powiązania
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.32 Misuse of Authorisation
blocks G 0.36 Identity theft