IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Organisation Remarks
____________________________________________________________________ .........................................
- Can maximum response times for problem resolution be
defined in the maintenance contract?
- Does the vendor offer a competent technical customer service
(call centre, hotline etc.) which can provide immediate
assistance in the event of problems?
1.3 Reliability / operational reliability
- How reliable and fail-safe is the product?
- Does the vendor offer high availability solutions?
- Is it possible to use the product in continuous operations?
1.4 User-friendliness
- Is the product simple to install, configure and use? Does the
product meet the relevant ergonomic regulations?
- Is the user interface, especially that of the RAS client,
designed so that even inexperienced users can work with it
without having to accept reduced security (e.g. through the
provision of context-sensitive help, on-line documentation,
step-by-step guidance with comprehensible explanations,
"wizards", detailed error messages)?
- Is it possible to configure use of the RAS client in such a way
that as far as possible users do not have to bother with
technical details? Is security still guaranteed if this is the case?
1.5 Costs
- How much do the hardware and software cost to purchase?
- What are the expected ongoing costs of the hardware and
software (maintenance, operation, support)?
- What are the expected ongoing staff costs (RAS administrator
/ internal auditor)?
- Do additional software or hardware components need to be
purchased (e.g. dial-in server, server for additional
-
authentication services)?
How much will it cost to train the staff and administrators
who will be using the RAS product?
2. Operation
2.1 Installation and initial operation
- Do the RAS system’s default settings ensure that the RAS will
be securely configured after installation?
- Can installation of the RAS client software be automated with
predefined configuration parameters?
- Is it feasible for less technically-minded staff to install the
RAS client software?
- Can important configuration parameters be protected against
modification by users?
- Does the product work with commonly available hardware
and software (operating systems, plug-in cards, drivers)?
- Is the RAS system compatible with commonly used system
management systems?
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000