IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Organisation Remarks
____________________________________________________________________ .........................................
manager. Whether and how permissions for remote access should be
restricted must in each case be decided within the organisation. Often
equivalent rules will already exist, e.g. regarding permission for Internet
access, which can then be adapted.
The access authorisations granted must be recorded as part of the RAS
system documentation and must be updated in the event of changes.
- For fixed remote locations (e.g. telecommuting workstations) requirements
which specify what conditions (e.g. in relation to security and technical
equipment) the remote working place must satisfy in order to be allowed
RAS connections from there to the local network. The concept can also
provide for an initial review of the premises and subsequently for repeat
reviews at periodic intervals, and specify how and by whom these reviews
should be performed.
- Normally the locations of RAS clients are not under the control of the LAN
operator and therefore also possess a particular threat potential. It is
possible to limit the potential exposure to threats of stationary clients (for
example as used in teleworking) through appropriate provisions, but it
must be assumed that the degree of risk to which RAS clients are exposed
is very high. Not every location which satisfies the technical preconditions
for remote access connection is also suitable for this. Therefore rules must
be drawn up which specify from which remote locations RAS connections
may be established to the destination LAN. Depending on the planned
operational scenario, however, it may be easier to draw up a negative list of
locations which are particularly unsuitable. This could include, for
example, hotel foyers, hotel business centres or train carriages.
- Procedures for RAS administration should be specified which determine
how changes to the RAS configuration must be implemented. Since
breaches of security relating to RAS access could potentially result in the
entire LAN being compromised, changes to the RAS configuration must
always follow a predefined procedure (for example: request, review of the
planned configuration, implementation, review of the change
implemented).
The technical concept should address the following points:
- The technical concept should specify the hardware and software
components with which the RAS system is to be technically implemented.
The components are only defined in terms of their functionality. Through a
subsequent analysis of existing system components and of the new
components available on the market, the elements in the concept can then
be assigned to actual equipment and software components (see S 2.186
Selection of a suitable RAS product).
- All the possible points of access and the access protocols to be used over
them must be specified.
- All the services and protocols which are permitted over the RAS link must
be listed together with the resources which can be accessed over them.
- A decision must be made as to which subnets should or must be accessible
over the RAS link (see also RAS security concept).
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000
Requirements relating to
business locations
Change management
Technical equipment