19.12.2012 Views

IT Baseline Protection Manual - The Information Warfare Site

IT Baseline Protection Manual - The Information Warfare Site

IT Baseline Protection Manual - The Information Warfare Site

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

Safeguard Catalogue - Communications Remarks<br />

____________________________________________________________________ .........................................<br />

If data was deleted or modified in an unwanted manner, it can be restored<br />

from the data backups (refer to S 6.51 Restoring a database).<br />

If there are signs of a deliberate attack on the database, it is essential to act<br />

immediately in order to minimise the damage and prevent further damage<br />

from occurring. This requires that there is an alarm plan which lists the steps<br />

to be implemented and specifies who should be informed of the incident (see<br />

also S 6.60 Procedural rules and reporting channels for security incidents).<br />

<strong>The</strong> alarm plan should also specify whether and how the Data Privacy Officer<br />

and the legal department should be involved.<br />

Additional controls:<br />

- Are the users regularly advised of the requirement to inform the Database<br />

Administrator at once in case of irregularities?<br />

- Are these procedures actually followed?<br />

- Do the Database Administrators have the required expertise?<br />

- Has a procedure for the rapid assignment of passwords been established<br />

and tested?<br />

____________________________________________________________________ .........................................<br />

<strong>IT</strong>-<strong>Baseline</strong> <strong>Protection</strong> <strong>Manual</strong>: Oktober 2000<br />

Implement alarm plan

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!