IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Communications Remarks
____________________________________________________________________ .........................................
System data:
On the network server: medium-level confidentiality (passwords are
stored in the encrypted form)
On PC's: Not confidential
Application data:
Files of written correspondence: Individual files are of medium-level
confidentiality; all the data together are of high-level confidentiality
Customer database: High-level confidentiality
Protocol data:
High-level confidentiality (data disclosing personality profiles)
Integrity requirements
Data backups must ensure that data are stored integrally and not modified
during the period of storage. The importance of this increases with the
integrity requirements of the data in question. The integrity requirements of
the data to be backed up must therefore be stated.
Sample result 9: Integrity requirements
Software: The software must meet high integrity requirements
System data:
On the network server: High-level integrity requirements (due to
rights administration)
On PC's: High-level integrity requirements
Application data:
Files of written correspondence: Individual files have medium-level
integrity requirements
Customer database: High-level integrity requirements
Protocol data:
Before evaluation, these data have high-level integrity requirements;
following evaluation, the data still requiring storage have mediumlevel
integrity requirements
Knowledge and data-processing competence of IT users
To determine whether IT users, specially appointed employees or the system
administrators are to carry out data backups, the knowledge and data
processing capabilities of IT users as well as the tools available to them must
be given primary consideration. If the time required by IT users for carrying
out data backups is too long, this should be stated.
Sample result 10: Knowledge
Network administrators possess sufficient knowledge to carry out data
backups on network servers. IT users of PC's possess sufficient knowledge
and competence to independently perform backups of the PC system data.
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000