+SYS.1.8.A15 Secure Separation of Clients in Storage Solutions (S)

SYS.1.8.A15 Secure Separation of Clients in Storage Solutions (S)

An organisation's requirements regarding the multi-client capability of a storage solution SHOULD be defined and documented in a transparent manner. The storage solutions used SHOULD meet these documented requirements.

In block storage environments, LUN masking SHOULD be used in order to separate clients. In file service environments, it SHOULD be possible to use virtual file servers. Here, every client SHOULD be assigned its own file service.

When using IP or iSCSI, clients SHOULD be separated via segmentation within the network. If fibre channel is being used, VSANs and soft zoning SHOULD be used for segmentation purposes.

1. Prezentare generală

1.1 Referințe

1.2 Cerințe identificate

1.3 Reglementări asociate

2. Cerințe identificate

Cerințe

3. Reglementări asociate

Reglementări

Tichete legate

Legături
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.22 Manipulation of Information
blocks G 0.27 Lack of Resources
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems