IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Organisation Remarks
____________________________________________________________________ .........................................
specially for this purpose. If necessary, module 9.2 Databases should be
noted for the protection of the database in use.
- When restoring data backups, it must be ensured that files relevant to the
reliable operation of the network management system, such as
configuration-data files, password files as well as meta-configuration files
for the network components themselves are fully up-to-date.
The following data are of relevance to the secure operation of a network
management system:
- Configuration data of the network management system; these data
must be stored in appropriately protected directories.
- Configuration data of the network components (meta-configuration
files), which must also be stored in appropriately protected
directories.
- Password files for the network management system. Note must be
made here, for example, of password quality factors and the
possibility of storing passwords in encrypted form. (refer to S 2.11
Provisions governing the use of passwords).
- An administration of active network components via the network should be
restricted and replaced accordingly by administration via local interfaces if
requirements concerning the confidentiality and integrity of the network
management information cannot be fulfilled. Central network management
should be relinquished in this case.
Additional controls:
- Have provisions governing the use of passwords for the network
management system and network management tool been stipulated?
- Does the network management system support the required security
measures?
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000