IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Communications Remarks
____________________________________________________________________ .........................................
Tools for evaluating log data should be available to administrator and
auditor. Any irregularities which are detected should be reported
automatically.
- Automatic scanning for computer viruses: Transferred data must undergo
automatic scanning for computer viruses.
- Encryption: Confidential data maintained on the communications computer
for telecommuters are to be encrypted.
- Disabling or securing of remote administration: If the communications
computer does not require remote administration, all related functions
should be disabled. If remote administration is unavoidable, it must be
secured adequately. Every remote administration routine should only be
allowed to take place following successful identification and
authentication. Administrative activities are to be logged and
administrative data are to be transmitted in encrypted form. Preset
passwords and cryptographic keys must be changed.
Additional controls:
- Which functions does the communications computer offer?
- At which time intervals are checks performed as to whether the selected
settings and allocated rights still conform with actual requirements?
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000