+IND.3.2.A14 Technical Control of Remote Maintenance Sessions (H) [Planner, Data Protection Officer]

IND.3.2.A14 Technical Control of Remote Maintenance Sessions (H) [Planner, Data Protection Officer]

Supplementary to IND.3.2.A10 Observation and Control of OT Remote Maintenance Sessions, OT remote maintenance sessions SHOULD be continuously regulated by a technical solution. In this context, command-level activities (i.e. manual and automated commands) SHOULD be technically monitored and automatically prevented where necessary.

In addition, sessions SHOULD be monitored across components. If technical monitoring is used, an alarm SHOULD be triggered for anomalies in user behaviour and for specific rule violations (e.g. as soon as a sudden increase in communication volume is detected).

1. Prezentare generală

1.1 Referințe

1.2 Cerințe identificate

1.3 Reglementări asociate

2. Cerințe identificate

Cerințe

3. Reglementări asociate

Reglementări

Tichete legate

Legături
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.31 Incorrect Use or Administration of Devices and Systems
blocks G 0.32 Misuse of Authorisation
blocks G 0.37 Repudiation of Actions