IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Organisation Remarks
____________________________________________________________________ .........................................
- Checks must be performed sufficiently often to prevent damage and allow
the initiation of appropriate measures following the discovery of violations.
Timely checks must be carried out before the expiry of retention periods
for log files.
- Checks must be performed in accordance with the two person rule.
- Responses to violations detected through the monitoring of logs should be
defined at the start.
- Employees should be made aware of the fact that checks are performed
routinely and, if necessary, without prior notice.
- Automatic procedures (e.g. watch dogs) should be used for routine checks.
- The staff and works councils should be involved in the preparation of the
review concept and the stipulation of log evaluation techniques.
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000