|
is blocked by
|
CON.3.A2 Establishment of Backup Procedures [Process Owner, IT Operation Department] (B) |
|
is blocked by
|
CON.7.A4 Use of Privacy Screens [User] (B) |
|
is blocked by
|
CON.7.A5 Use of Screen/Code Locking [User] (B) |
|
is blocked by
|
CON.8.A16 Appropriate Control of Software Development (S) |
|
is blocked by
|
OPS.1.1.3.A3 Configuration of Auto-Update Mechanisms (B) |
|
is blocked by
|
OPS.1.1.3.A16 Regular Search for Information on Patches and Vulnerabilities (B) |
|
is blocked by
|
OPS.1.1.3.A10 Assuring the Integrity and Authenticity of Software Packages (S) |
|
is blocked by
|
OPS.1.1.4.A1 Creating a Malware Protection Concept (B) |
|
is blocked by
|
OPS.1.1.4.A2 Using System-Specific Protection Mechanisms (B) |
|
is blocked by
|
OPS.1.1.4.A3 Selection of a Virus Protection Program (B) |
|
is blocked by
|
OPS.1.1.4.A5 Operation and Configuration of Virus Protection Programs (B) |
|
is blocked by
|
OPS.1.1.4.A6 Regular Updating of Virus Protection Programs and Signatures (B) |
|
is blocked by
|
OPS.1.1.4.A7 User Awareness and Obligations [User] (B) |
|
is blocked by
|
OPS.1.1.4.A9 Reporting Malware Infections [User] (S) |
|
is blocked by
|
OPS.1.1.4.A10 Using Special Analysis Environments (H) |
|
is blocked by
|
OPS.1.1.4.A12 Using Storage Media Locks (H) |
|
is blocked by
|
OPS.1.1.4.A13 Handling Untrusted Files (H) |
|
is blocked by
|
OPS.1.1.4.A14 Selecting and Using Cyber Security Products to Thwart Targeted Attacks (H) |
|
is blocked by
|
OPS.1.2.5.A19 Remote Maintenance by Third Parties (S) |
|
is blocked by
|
OPS.1.2.5.A20 Remote Maintenance Operations (S) |
|
is blocked by
|
DER.1.A5 Use of Detection Features Included in Systems [Process Owner] (B) |
|
is blocked by
|
DER.1.A9 Use of Additional Detection Systems [Process Owner] (S) |
|
is blocked by
|
DER.1.A10 Use of TLS/SSH Proxies [Process Owner] (S) |
|
is blocked by
|
DER.1.A11 Use of a Central Logging Infrastructure to Evaluate Security-Relevant Events [Process Owner] (S) |
|
is blocked by
|
DER.1.A13 Regular Audits of Detection Systems (S) |
|
is blocked by
|
DER.1.A15 Central Detection and Real-Time Examination of Event Messages (H) |
|
is blocked by
|
DER.2.3.A2 Deciding on a Cleaning Strategy (B) |
|
is blocked by
|
DER.2.3.A4 Blocking and Changing Access Data and Cryptographic Keys (B) |
|
is blocked by
|
DER.2.3.A7 Targeted System Hardening (S) |
|
is blocked by
|
DER.2.3.A9 Hardware Replacement in Affected IT Systems (H) |
|
is blocked by
|
DER.2.3.A10 Modifications to Help Thwart a Repeat Attack (H) |
|
is blocked by
|
APP.1.1.A2 Limiting Active Content (B) |
|
is blocked by
|
APP.1.1.A3 Secure Opening of Documents from External Sources [User] (B) |
|
is blocked by
|
APP.1.1.A11 Controlled Use of Extensions for Office Products (S) |
|
is blocked by
|
APP.1.1.A13 Use of Viewer Features [User] (S) |
|
is blocked by
|
APP.1.1.A16 Checking Document Integrity (H) |
|
is blocked by
|
APP.1.2.A1 Use of Basic Security Mechanisms (B) |
|
is blocked by
|
APP.1.2.A9 Using an Isolated Web Browser Environment (H) |
|
is blocked by
|
APP.1.2.A11 Checking for Malicious Content (H) |
|
is blocked by
|
APP.1.4.A5 Minimising and Checking App Authorisations [Process Owner] (B) |
|
is blocked by
|
APP.1.4.A3 Distributing Sensitive Apps (S) |
|
is blocked by
|
APP.2.1.A12 Monitoring Directory Services (S) |
|
is blocked by
|
APP.2.2.A5 Hardening Active Directory (B) |
|
is blocked by
|
APP.2.2.A6 Maintaining the Operational Continuity of Active Directory (B) |
|
is blocked by
|
APP.2.2.A11 Monitoring Active Directory Infrastructure (S) |
|
is blocked by
|
APP.2.2.A12 Backups for Domain Controllers (S) |
|
is blocked by
|
APP.3.2.A3 Protecting File Uploads and Downloads (B) |
|
is blocked by
|
APP.3.2.A14 Integrity Checks and Protection Against Malware (S) |
|
is blocked by
|
APP.3.2.A15 Redundancy (H) |
|
is blocked by
|
APP.3.3.A3 Use of Anti-Virus Programs (B) |
|
is blocked by
|
APP.3.3.A12 Data Encryption (H) |
|
is blocked by
|
APP.4.2.A1 Secure Configuration of the SAP Java Stack (B) |
|
is blocked by
|
APP.4.2.A2 Secure Configuration of the SAP Java Stack (B) |
|
is blocked by
|
APP.4.2.A4 Protection of Standard SAP User IDs (B) |
|
is blocked by
|
APP.4.2.A5 Configuration and Protection of SAP User Administration (B) |
|
is blocked by
|
APP.4.2.A6 Creation and Implementation of a User and Access Control Policy [Department, Developer] (B) |
|
is blocked by
|
APP.4.2.A7 Protection of SAP Databases (B) |
|
is blocked by
|
APP.4.2.A8 Protection of the SAP RFC Interface (B) |
|
is blocked by
|
APP.4.2.A26 Protection of Customers' Own Code in the SAP ERP System (S) |
|
is blocked by
|
APP.4.2.A32 Real-Time Detection and Alerts for Irregular Processes (H) |
|
is blocked by
|
APP.4.3.A3 Basic Hardening of Database Management Systems (B) |
|
is blocked by
|
APP.4.3.A12 Uniform Configuration Standard for Database Management Systems (S) |
|
is blocked by
|
APP.4.3.A19 Protection Against Malicious Database Scripts [Developer] (S) |
|
is blocked by
|
APP.4.3.A24 Data Encryption in Databases (H) |
|
is blocked by
|
APP.4.3.A25 Security Audits of Database Systems (H) |
|
is blocked by
|
APP.4.4.A2 Planning Automation with CI/CD (B) |
|
is blocked by
|
APP.4.4.A4 Separation of Pods (B) |
|
is blocked by
|
APP.4.4.A7 Separation of Networks for Kubernetes (S) |
|
is blocked by
|
APP.4.4.A8 Securing Configuration Files on Kubernetes (S) |
|
is blocked by
|
APP.4.4.A12 Securing Infrastructure Applications (S) |
|
is blocked by
|
APP.4.4.A13 Automated Configuration Auditing (H) |
|
is blocked by
|
APP.4.6.A10 Execution of Operating System Commands (S) |
|
is blocked by
|
APP.4.6.A11 Avoiding Planted Malicious Code (S) |
|
is blocked by
|
APP.4.6.A19 Protection Against Cross-Site Scripting (S) |
|
is blocked by
|
APP.4.6.A21 Ban on Hidden ABAP Source Code (S) |
|
is blocked by
|
APP.5.3.A1 Secure Configuration of E-Mail Clients (B) |
|
is blocked by
|
APP.5.3.A4 Spam and Virus Protection on E-Mail Servers (B) |
|
is blocked by
|
APP.5.3.A7 User Training on the Security Mechanisms of E-Mail Clients (S) |
|
is blocked by
|
APP.5.3.A8 Training Users to Deal with Spam [User] (S) |
|
is blocked by
|
APP.6.A3 Secure Procurement of Software [Procurement Department] (B) |
|
is blocked by
|
SYS.1.1.A9 Using Anti-Virus Programs on Servers (B) |
|
is blocked by
|
SYS.1.1.A37 Encapsulation of Security-Critical Applications and Operating System Components (S) |
|
is blocked by
|
SYS.1.1.A31 Using Execution Control (H) |
|
is blocked by
|
SYS.1.1.A38 Hardening of the Host System by Means of a Read-Only File System (H) |
|
is blocked by
|
SYS.1.2.2.A2 Secure Installation of Windows Server 2012 (B) |
|
is blocked by
|
SYS.1.2.2.A3 Secure Administration of Windows Server 2012 (B) |
|
is blocked by
|
SYS.1.2.2.A4 Secure Configuration of Windows Server 2012 (S) |
|
is blocked by
|
SYS.1.2.2.A5 Protection Against Malware on Windows Server 2012 (S) |
|
is blocked by
|
SYS.1.2.2.A6 Secure Authentication and Authorisation in Windows Server 2012 (S) |
|
is blocked by
|
SYS.1.2.2.A8 Protection of System Integrity (S) |
|
is blocked by
|
SYS.1.2.2.A11 Attack Detection in Windows Server 2012 (H) |
|
is blocked by
|
SYS.1.3.A4 Protection from Exploitation of Vulnerabilities in Applications (B) |
|
is blocked by
|
SYS.1.3.A10 Preventing Further Intrusion When Vulnerabilities Are Exploited (S) |
|
is blocked by
|
SYS.1.6.A3 Secure Use of Containerised IT Systems (B) |
|
is blocked by
|
SYS.1.6.A4 Planning the Provision and Distribution of Images (B) |
|
is blocked by
|
SYS.1.6.A5 Separation of Administration and Access Networks for Containers (B) |
|
is blocked by
|
SYS.1.6.A6 Use of Secure Images (B) |
|
is blocked by
|
SYS.1.6.A9 Suitability for Container Operation (S) |
|
is blocked by
|
SYS.1.6.A10 Policy for Images and Container Operation (S) |
|
is blocked by
|
SYS.1.6.A12 Distribution of Secure Images (S) |
|
is blocked by
|
SYS.1.6.A13 Release of Images (S) |
|
is blocked by
|
SYS.1.6.A14 Updating Images (S) |
|
is blocked by
|
SYS.1.6.A15 Limitation of Resources per Container (S) |
|
is blocked by
|
SYS.1.6.A16 Administrative Remote Access to Containers (S) |
|
is blocked by
|
SYS.1.6.A17 Running Containers Without Privileges (S) |
|
is blocked by
|
SYS.1.6.A18 Application Services Accounts (S) |
|
is blocked by
|
SYS.1.6.A19 Including Data Stores in Containers (S) |
|
is blocked by
|
SYS.1.6.A21 Extended Security Policies (H) |
|
is blocked by
|
SYS.1.6.A23 Container Immutability (H) |
|
is blocked by
|
SYS.1.6.A24 Host-Based Attack Detection (H) |
|
is blocked by
|
SYS.1.6.A25 High Availability of Containerised Applications (H) |
|
is blocked by
|
SYS.1.7.A8 Use of the z/OS Security System RACF (B) |
|
is blocked by
|
SYS.1.7.A9 Multi-Client Capability in z/OS (B) |
|
is blocked by
|
SYS.1.7.A14 Reporting on the Secure Operation of z/OS (S) |
|
is blocked by
|
SYS.1.7.A16 Monitoring of z/OS Systems (S) |
|
is blocked by
|
SYS.1.7.A24 Administration of Storage Media in z/OS Systems (S) |
|
is blocked by
|
SYS.1.7.A33 Separation of Test and Production Systems in z/OS (H) |
|
is blocked by
|
SYS.1.7.A36 Internal Communication Between Operating Systems (H) |
|
is blocked by
|
SYS.2.1.A6 Using Malware Protection Programs (B) |
|
is blocked by
|
SYS.2.1.A24 Dealing with External and Removable Media (S) |
|
is blocked by
|
SYS.2.1.A34 Encapsulation of Security-Critical Applications and Operating System Components (H) |
|
is blocked by
|
SYS.2.1.A32 Use of Additional Safeguards to Protect Against Exploits (H) |
|
is blocked by
|
SYS.2.1.A33 Using Execution Control (H) |
|
is blocked by
|
SYS.2.1.A37 Use of Multi-Factor Authentication (H) |
|
is blocked by
|
SYS.2.2.2.A3 Use of Virus Protection Programs with Windows 8.1 (B) |
|
is blocked by
|
SYS.2.2.2.A5 Local Security Policy for Windows 8.1 (S) |
|
is blocked by
|
SYS.2.2.2.A9 Data Protection and Data Economy in Windows 8.1 Clients [User] (S) |
|
is blocked by
|
SYS.2.2.2.A13 Connection of Windows 8.1 to the Microsoft Store (S) |
|
is blocked by
|
SYS.2.2.2.A14 Application Control Using Software Restriction Policies and AppLocker (H) |
|
is blocked by
|
SYS.2.2.3.A5 Protection Against Malware in Windows 10 (B) |
|
is blocked by
|
SYS.2.3.A4 Kernel Updates on Unix-Like Systems (B) |
|
is blocked by
|
SYS.2.3.A5 Secure Installation of Software Packages (B) |
|
is blocked by
|
SYS.2.3.A12 Secure Use of Appliances (S) |
|
is blocked by
|
SYS.2.3.A18 Additional Kernel Protection (H) |
|
is blocked by
|
SYS.2.4.A2 Using the Security Functions Integrated into macOS (B) |
|
is blocked by
|
SYS.2.4.A9 Using Additional Protection Programs in macOS (S) |
|
is blocked by
|
SYS.2.4.A10 Activating the Personal Firewall in macOS (S) |
|
is blocked by
|
SYS.3.1.A1 Rules for Mobile Laptop Use (B) |
|
is blocked by
|
SYS.3.1.A3 Use of Personal Firewalls (B) |
|
is blocked by
|
SYS.3.1.A9 Secure Remote Access with Laptops (B) |
|
is blocked by
|
SYS.3.1.A6 Security Guidelines for Laptops (S) |
|
is blocked by
|
SYS.3.1.A8 Secure Connection of Laptops to Data Networks [User] (S) |
|
is blocked by
|
SYS.3.2.1.A8 Installation of Apps (B) |
|
is blocked by
|
SYS.3.2.1.A28 Using the Filter Option for Websites (S) |
|
is blocked by
|
SYS.3.2.1.A33 Selection and Installation of Security Apps (S) |
|
is blocked by
|
SYS.3.2.2.A4 Distribution of the Basic Configuration to Mobile Devices (B) |
|
is blocked by
|
SYS.3.2.2.A5 Installing the MDM Client (B) |
|
is blocked by
|
SYS.3.2.2.A7 Installation of Apps (S) |
|
is blocked by
|
SYS.3.2.2.A14 Use of External Reputation Services for Apps (H) |
|
is blocked by
|
SYS.3.2.3.A21 Installation of Apps and Integration of the Apple App Store (S) |
|
is blocked by
|
SYS.3.2.3.A26 No Connections to Host Systems (H) |
|
is blocked by
|
SYS.4.3.A14 Secured and Authenticated Boot Process for Embedded Systems [Developer, Planner, Procurement Department] (H) |
|
is blocked by
|
SYS.4.3.A15 Storage Protection in Embedded Systems [Developer, Planner, Procurement Department] (H) |
|
is blocked by
|
SYS.4.4.A2 Authentication (B) |
|
is blocked by
|
SYS.4.4.A5 Restriction of Network Access (B) |
|
is blocked by
|
SYS.4.4.A6 Integration of IoT Devices into Organisation Security Policies (S) |
|
is blocked by
|
SYS.4.4.A7 Planning the Use of IoT Devices (S) |
|
is blocked by
|
SYS.4.4.A10 Secure Installation and Configuration of IoT Devices (S) |
|
is blocked by
|
SYS.4.4.A11 Using Encrypted Data Transmission (S) |
|
is blocked by
|
SYS.4.4.A13 Deactivation and Uninstallation of Unnecessary Components (S) |
|
is blocked by
|
SYS.4.4.A15 Restrictive Granting of Access Rights (S) |
|
is blocked by
|
SYS.4.4.A16 Elimination of Malware on IoT Devices (S) |
|
is blocked by
|
SYS.4.4.A19 Protection of Administration Interfaces (S) |
|
is blocked by
|
SYS.4.5.A12 Protection Against Malware [User] (B) |
|
is blocked by
|
SYS.4.5.A4 Drawing Up a Policy for the Secure Handling of Removable Media (S) |
|
is blocked by
|
SYS.4.5.A16 Use of Dedicated Systems for Data Scanning (H) |
|
is blocked by
|
IND.1.A3 Protection Against Malware (B) |
|
is blocked by
|
IND.1.A9 Restrictive Use of Removable Media and Mobile Devices in ICS Environments (S) |
|
is blocked by
|
IND.1.A10 Monitoring, Logging, and Detection [OT Operations] (S) |
|
is blocked by
|
IND.1.A12 Establishing Vulnerability Management (S) |
|
is blocked by
|
IND.2.1.A2 Using Secure Transmission Protocols for Configuration and Maintenance [Maintenance Personnel, OT Operations] (B) |
|
is blocked by
|
IND.2.1.A6 Network Segmentation [OT Operations, Planner] (B) |
|
is blocked by
|
IND.2.1.A7 Creating Backups [OT Operations] (S) |
|
is blocked by
|
IND.2.1.A8 Protection Against Malware [OT Operations] (S) |
|
is blocked by
|
IND.2.1.A11 Maintenance of ICS Components [Employee, OT Operations, Maintenance Personnel] (S) |
|
is blocked by
|
IND.2.1.A13 Appropriate Commissioning of ICS Components [OT Operations] (S) |
|
is blocked by
|
IND.2.1.A16 Protecting External Interfaces [OT Operations] (S) |
|
is blocked by
|
IND.2.1.A17 Use of Secure Protocols for the Transmission of Measurement and Control Data [OT Operations] (S) |
|
is blocked by
|
IND.2.1.A19 Security Tests [OT Operations] (H) |
|
is blocked by
|
IND.2.1.A20 Trustworthy Code [OT Operations] (H) |
|
is blocked by
|
IND.2.4.A2 Operation After End of Warranty [OT Operations] (B) |
|
is blocked by
|
IND.2.7.A4 Making Information Security an Integral Part of Functional Safety Management [ICS Information Security Officer] (S) |
|
is blocked by
|
IND.3.2.A9 Secure Exchange of Files Involved in OT Remote Maintenance (S) [Planner, IT Operation Department] |
|
is blocked by
|
NET.3.2.A2 Definition of Firewall Rules (B) |
|
is blocked by
|
NET.3.2.A3 Configuring Appropriate Filter Rules on the Packet Filter (B) |
|
is blocked by
|
NET.3.2.A16 Creation of a “P-A-P” structure (S) |
|
is blocked by
|
INF.13.A11 Adequate Hardening of Systems in TBM (S) |
|
is blocked by
|
INF.13.A12 Secure Configuration of TBM Systems (S) |
|
is blocked by
|
INF.13.A13 Secure Connection of Restricted Trusted Systems in TBM (S) [Planner] |
|
is blocked by
|
INF.13.A15 Protection Against Malware in TBM (S) |