IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Hardware & Software Remarks
____________________________________________________________________ .........................................
management system must either make use of a database system that
supports relevant recovery mechanisms or implement these mechanisms
itself (see S 2.170 Requirements to be met by a system management
system). If these mechanisms are not provided by the chosen system (for
example if several management tools are used), the computers that store
management information should be given the maximum possible level of
security (including physical, see Chapters 4 to 6).
- The management system should include a suitable backup mechanism for
backing up the management data, or interoperate with a backup system.
When old data stocks are loaded from a data backup, it must be borne in
mind that these usually have to be post-edited manually in order to match
the current system configuration.
- Management data stocks that have been backed up by means of backup
procedures must also be stored in such a way that no unauthorised third
party can gain access to them. Usually the data is not stored in secure form
on the backup storage medium, which means that it can be viewed by
anyone who possesses the backup program and a corresponding drive.
- The validity of the division into management domains and the associated
responsibilities should be examined at regular intervals. This applies in
particular when internal restructuring has been carried out.
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000