+IND.3.2.A6 Securing All Remote Maintenance Access to OT (B) [IT Operation Department]

IND.3.2.A6 Securing All Remote Maintenance Access to OT (B) [IT Operation Department]

In industry, OT MUST be able to control any access to an IT system that provides a remote maintenance service to the OT. For this purpose, access MUST be secured by at least one security component under the responsibility of the OT.

All types of remote maintenance access SHOULD be standardised. All access SHOULD be controlled and explicitly allowed using central authentication components.

If OT remote maintenance access points include decentralised infrastructures or components integrated in package units, the access points MUST be secured by an additional security component that is neither integrated nor part of the decentralised infrastructure.

1. Visão geral

1.1 Referências

1.2 Requisitos identificados

1.3 Regulamentos relacionados

2. Requisitos identificados

Requisitos

3. Regulamentos relacionados

Regulamentos

Pedidos ligados

Ligações
blocks G 0.20 Information or Products from an Unreliable Source
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems