IT Baseline Protection Manual - The Information Warfare Site

Other IT Components Standard software
_________________________________________________________________________________________
Organisational shortcomings:
- T 2.1 Lack of, or insufficient, rules
- T 2.3 A lack of compatible, or unsuitable, resources
- T 2.26 Lack of, or inadequate, test and release procedures
- T 2.27 Lack of, or inadequate, documentation
- T 2.28 Violation of copyright
- T 2.29 Software testing with production data
Human Failure:
- T 3.3 Non-compliance with IT security measures
- T 3.38 Errors in configuration and operation
Technical Failure:
- T 4.8 Discovery of software vulnerabilities
- T 4.22 Software vulnerabilities or errors
Deliberate Acts:
- T 5.21 Trojan Horses
- T 5.23 Computer viruses
- T 5.43 Macro viruses
Recommended Countermeasures (S)
For the implementation of IT baseline protection, selection of the required packages of safeguards
("modules") as described in chapters 2.3 and 2.4, is recommended.
The safeguards package for the module "Standard Software " is presented in the following. Depending
on the nature and scope of the standard software, it must be considered whether only individual
safeguards have to be reduced. M 2.79 to S 2.89 provide a detailed description of how the lifecycle of
standard software can be shaped. These are supplemented by the other safeguards stated.
_________________________________________________________________________________________
IT-Baseline Protection Manual: Otober 2000