IT Baseline Protection Manual - The Information Warfare Site

Data Transmission Systems Remote Access
_________________________________________________________________________________________
Infrastructure
- S 1.29 () Adequate siting of an IT system (server)
Organisation
- S 2.2 () Resource management
- S 2.25 () Documentation on the system configuration
- S 2.40 () Timely involvement of the staff/factory council
- S 2.183 () Performing a RAS requirements analysis
- S 2.184 () Development of a RAS concept
- S 2.185 () Selection of a suitable RAS system architecture
- S 2.186 () Selection of a suitable RAS product
- S 2.187 () Definition of a set of RAS security guidelines
Personnel
- S 3.4 () Training before actual use of a program
- S 3.5 () Education on IT security measures
- S 3.10 () Selection of a trustworthy administrator and his substitute
- S 3.11 () Training of maintenance and administration staff
Hardware and software
- S 4.110 () Secure installation of the RAS system
- S 4.111 () Secure configuration of the RAS system
- S 4.112 () Secure operation of the RAS system
- S 4.113 () Use of an authentication server within RAS access
Communication
- S 5.68 () Use of encryption procedures for network communications
- S 5.76 () Use of suitable tunnel protocols for RAS communication
Contingency Planning
- S 6.70 () Creation of a contingency plan for failure of the RAS system
- S 6.71 () Data backup for a mobile IT system
_________________________________________________________________________________________
IT-Baseline Protection Manual: Otober 2000