IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Organisation Remarks
____________________________________________________________________ .........................................
Step 4: Granting of (application/data) access permissions
In the following, the (application/data) access privileges required for the
execution of a function are set out. Legend:
E = = right to Execute an application/software
R = = right to Read data
W = = right to Write data, i.e. generate data
M = = right to Modify data
D = = right to Delete data
S = Right to Sign orders to pay
Operating
system
server
1. LAN administration E,R,W,M,
D
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000
Protocol
evaluation
Applicatio
n: Data
acquisition
Applicatio
n:
document
processing
2. Auditing E,R E,R,D E,R
3. Data acquisition E,W
4. Casework –
mathematical accuracy
5. Casework - factual
accuracy
6. Authority to issue
orders
E,R,M
E,R,M
E,R,S
Documentation of this kind facilitates the assignment of privileges. Assuming
job changing by Ms. Smith, the vacancy thus having to be filled, the above
tables can be used to determine which of Ms. Smith's former privileges must
be revoked and assigned to the new staff member. If the latter, qua substitute,
additionally is to perform the function "casework, including authority to issue
orders", the required assignment of privileges elucidates the conflict arising
from the fact that the new staff member, when acting as a substitute, can carry
out unnoticed manipulations.