IT Baseline Protection Manual - The Information Warfare Site

Threats Catalogue Deliberate Acts Remarks
____________________________________________________________________ .........................................
T 2.4 Insufficient monitoring of IT security
measures
Following the introduction of IT security measures (e.g. data backup), their
consistent realisation is often incumbent on the users. Where no monitoring,
or inadequate monitoring, of IT security measures takes place, neither abuse
nor effectiveness can be verified. A due reaction is thus not possible.
In addition, there are IT security measures which can be effective only when
appropriate controls are implemented. These include, for example, auditing
functions, the security capabilities of which will take effect only after
evaluation of the auditing data.
Example:
An administration desk of a computer system is connected to a console
printer. All user input from the console is to be logged to the printer. It is only
by means of an analysis of the print-outs that any improper action by the
administration can be detected. Where such an analysis fails to be made by an
independent person, logging will be ineffective.
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000