IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Organisation Remarks
____________________________________________________________________ .........................................
- It is possible to backup instantaneous data at specified intervals while an
application is being run.
In the event that the product is to have encryption components, the following
requirements are recommended:
- Encrypted algorithms used by government agencies should be approved by
the BSI. Individual consultation by the BSI is recommended in this case. If
not in agencies, the DES is suitable for moderate protection requirements.
- The key management must be in line with the functionality of the product.
In particular, fundamental differences between algorithms must be
considered here:
- symmetric algorithms use a key for encrypting and decrypting which
is to be kept secret,
- asymmetric algorithms use a public key for encrypting and a private
key (to be kept secret) for decrypting.
- The product must correctly manage security-critical parameters, such as the
key. Keys should thus never be stored unprotected (even expired keys), i.e.
readable.
In the event that the product is to have an integrity test feature, the following
requirements are recommended:
- The product carries out an integrity check every time a program is called
up.
- Mechanisms should be used which can detect intentional manipulation of
address fields and payload data during data transmission. Knowledge of the
algorithms alone, without other special knowledge, should not be sufficient
to manipulate the above data without detection.
In the event that person-related data are to be processed with the product, the
following requirements concerning data privacy are placed, for example:
- The product may not permit general requests for data analyses. These
analyses of data must be limited to certain criteria.
- It must be possible to parameterise the system in such a way that changes,
deletions or print-outs for certain files are only possible according to the
two-person principle.
- It must be possible to parameterise the logging feature in such a way that
records can be kept of who made which changes to person-related data.
- The transfer of person-related data must be determined and checked with
suitable random tests (BDSG, § 10). The type of random test must be
individually programmable.
- The product must enable person-related data to be deleted. Alternatively, it
must be possible to block person-related data in order to limit or prevent
these being processed or used.
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000