+CON.1.A12 Secure Separation of Roles When Using Crypto Modules [IT Operation Department] (H)

CON.1.A12 Secure Separation of Roles When Using Crypto Modules [IT Operation Department] (H)

User roles SHOULD be defined when configuring a crypto module. Access control and authentication mechanisms SHOULD be used in order to verify whether an employee is actually allowed to use the desired service. The crypto module SHOULD be configured such that the authentication information has to be re-entered every time there is a role change or a specified period of inactivity as passed.

1. Prezentare generală

1.1 Referințe

1.2 Cerințe identificate

1.3 Reglementări asociate

2. Cerințe identificate

Cerințe

3. Reglementări asociate

Reglementări

Tichete legate

Legături
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.45 Data Loss