+ORP.4.A13 Selection of Suitable Authentication Mechanisms [IT Operation Department] (S)

ORP.4.A13 Selection of Suitable Authentication Mechanisms [IT Operation Department] (S)

Identification and authentication mechanisms that meet the protection needs at hand SHOULD be used. Authentication data SHOULD be protected by IT systems and/or applications against espionage, modification, and destruction during processing. IT systems and applications SHOULD increasingly delay further authentication attempts after each unsuccessful attempt. It should be possible to limit the total duration of a login attempt. After the specified number of unsuccessful authentication attempts is exceeded, IT systems and applications SHOULD block the user ID in question.

1. Prehľad

1.1 Odkazy

1.2 Identifikované požiadavky

1.3 Súvisiace predpisy

2. Identifikované požiadavky

Požiadavky

3. Súvisiace predpisy

Predpisy

Prepojené úlohy

Prepojenia
blocks G 0.14 Interception of Information / Espionage
blocks G 0.32 Misuse of Authorisation
blocks G 0.36 Identity theft