IT Baseline Protection Manual - The Information Warfare Site

Non-Networked Systems and Clients IT-Security Management
_________________________________________________________________________________________
5.4 PCs with a non-constant user
population
Description
This module should be considered where PCs are used with a
non-constant user population. The PCs in question here are
commercially available IBM-compatible PCs which run
under DOS or a comparable operating system. For PCs which
run under other operating systems, the safeguards should be
adapted as appropriate.
If the PC is connected to a local network, the relevant modules from Chapter 6 must be implemented.
The PC can possess floppy disks and CD drives, a hard disk, a mouse and other peripheral
components. There may be a printer directly connected to it. A graphical user interface can also be
employed here. It is assumed that several persons with access rights to the stored data use this PC.
PCs with a non-constant population of users can be used, for example, in PC pools, for training
purposes or to meet specific organisational requirements.
Threat Scenario
For IT baseline protection of a PC used by a non-constant set of users, the following typical threats are
assumed:
_________________________________________________________________________________________
IT-Baseline Protection Manual: Otober 2000
DOS