Using Reflex Disknet Pro to Aid Compliance with BS 7799 & ISO/IEC ...

More documents

Recommendations

Info

Fig. 2 2.2. Secure disposal or re-use of equipment [7.2.6] The issue of secure disposal is covered by this clause. Both sensitive data and licensed programs should be rendered inaccessible when no longer required. The standard advise that overwriting and removed be used. However the EPM option above (Fig. 2) can also be used to put this information beyond the reach of unauthorised users. If the contents of a disposed memory device are encrypted, it is more secure than just overwriting the data. 3. Communications and operations management [8] One of the largest sections of the standard covers all operational issues concerning information processing. RDP can be used to enforce nine of the sub clauses 3.1. Operational change control [8.1.2] This clause states amongst others, “inadequate control of changes to information processing facilities and systems is a common cause of system or security failures. Formal management responsibilities and procedures should be in place to ensure satisfactory control of all changes to equipment, software or procedures.” © Reflex Magnetics Ltd 8
RDP through the use of it’s Program Security Guard (PSG) can enforce the policy of preventing change to installed software and software configuration. It will also prevent new unauthorised software from being installed. Fig. 3 Fig. 3 shows the PSG tab from within the profile template. PSG when activated, as part of a user profile will effectively lock by default all executable files as read only, and prevents new executable code from being introduced by the user. Additional file types can be added to the default list of protected files using the “Unsafe file types” configure button. 3.2. Incident management procedures [8.1.3 (a) (b) (c)] This clause requires procedures to be established to ensure a quick, effective and orderly response to security incidents. RDP makes use of an alerting system for specific security incidents monitored by the software. The system allows for any of the specified events (see Fig. 4) to be added to an audit log. When used in conjunction with the “Alerts” mode within the management console, this can generate an email alert to be sent to the system administrator or other designated personnel. © Reflex Magnetics Ltd 9
Page 1 and 2: Using Reflex Disknet Pro to Aid Com
Page 3 and 4: 6.1. SOFTWARE COPYRIGHT [12.1.2.2]
Page 5 and 6: Meeting and Retaining the Standard
Page 7: From within the RDP administration
Page 11 and 12: that make use of the products zero
Page 13 and 14: 3.7. Disposal of media [8.6.2 (a)]
Page 15 and 16: 5.4. Change control procedures [10.

Using Reflex Disknet Pro to Aid Compliance with BS 7799 & ISO/IEC ...

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?