IT Baseline Protection Manual - The Information Warfare Site

Networked Systems
_________________________________________________________________________________________
Infrastructure:
- S 1.25 (1) Overvoltage protection
- S 1.27 (2) Air conditioning
- S 1.28 (1) Local Uninterruptible Power Supply (UPS)
- S 1.29 (3) Adequate Siting of an IT System (optional)
- S 1.32 (1) Adequate siting of the Consoles, Devices with Exchangeable Data Media, and Printers
Organisation:
- S 2.4 (2) Maintenance/Repair Regulations
- S 2.22 (2) Escrow of Passwords
- S 2.25 (1) Documentation of the System Configuration
- S 2.26 (1) Appointment of an administrator and his deputy
- S 2.34 (1) Documentation of changes made to an existing IT system
- S 2.35 (1) Obtaining information on security weaknesses of the system
- S 2.38 (2) Division of administrator roles in PC networks
- S 2.64 (2) Checking the log files
- S 2.139 (1) Survey of the existing network environment
- S 2.140 (1) Analysis of the existing network environment (optional)
- S 2.141 (1) Development of a network concept
- S 2.142 (1) Development of a network realisation plan
- S 2.143 (1) Development of a network management concept
- S 2.144 (1) Selection of a suitable network management protocol
- S 2.145 (2) Requirements for a network management tool
- S 2.146 (1) Secure operation of a network management system
Personnel:
- S 3.4 (1) Training before actual use of a program
- S 3.5 (1) Education on IT security measures
- S 3.10 (1) Selection of a trustworthy administrator and his substitute
- S 3.11 (1) Training of maintenance and administration staff
Hardware and software:
- S 4.7 (1) Change of preset passwords
- S 4.15 (2) Secure log-in
- S 4.24 (1) Ensuring consistent system management
- S 4.79 (1) Secure access mechanisms for local administration
- S 4.80 (1) Secure access mechanisms for remote administration
- S 4.81 (2) Auditing and logging of activities in a network
_________________________________________________________________________________________
IT-Baseline Protection Manual: Otober 2000