+SYS.1.8.A6 Creation of a Security Policy for Storage Solutions (S)

SYS.1.8.A6 Creation of a Security Policy for Storage Solutions (S)

Based on an organisation's general security policy, a specific policy SHOULD be drawn up for storage solutions. This policy SHOULD transparently describe specifications as to how storage solutions may be planned, administered, installed, configured, and operated securely.

The policy SHOULD be known to all administrators in charge of storage solutions and be integral to their work. If the policy is changed or deviations from its specifications are allowed, this SHOULD be coordinated with the CISO and documented. It SHOULD be checked regularly whether the policy is still being properly implemented. It SHOULD be updated as required. The results SHOULD be appropriately documented.

1. Prezentare generală

1.1 Referințe

1.2 Cerințe identificate

1.3 Reglementări asociate

2. Cerințe identificate

Cerințe

3. Reglementări asociate

Reglementări

Tichete legate

Legături
blocks G 0.29 Violations of Laws or Regulations