IT Baseline Protection Manual - The Information Warfare Site

IT Baseline Protection of Generic Components Concept of computer virus protection
_________________________________________________________________________________________
Organisational shortcomings:
- T 2.1 Lack of, or insufficient, rules
- T 2.2 Insufficient knowledge of requirements documents
- T 2.3 A lack of compatible, or unsuitable, resources
- T 2.4 Insufficient monitoring of IT security measures
- T 2.8 Uncontrolled use of resources
- T 2.9 Poor adjustment to changes in the use of IT
- T 2.26 Lack of, or inadequate, test and release procedures
Human Failure:
- T 3.3 Non-compliance with IT security measures
Deliberate Acts:
- T 5.2 Manipulation of data or software
- T 5.21 Trojan Horses
- T 5.23 Computer viruses
- T 5.43 Macro viruses
- T 5.80 Hoaxes
Recommended Countermeasures (S)
When a computer virus protection concept is created (see S 2.154 Creation of a computer virus
protection concept), it must first be determined which of the available or planned IT systems are to be
included in the computer virus protection concept (see S 2.155 Identification of IT systems potentially
threatened by computer viruses). For these IT systems, the factors that influence the implementation of
security measures must be taken into account. Based on this, the technical and organisational measures
can then be selected. In this context, it is particularly important to select suitable technical
countermeasures such as virus scanning programs (see S 2.156 Selection of a suitable computer virus
protection strategy and S 2.157 Selection of a suitable computer virus scanning program). In addition
to setting up a report body (see S 2.158 Reporting computer virus infections) and coordinating the
updating of protection products used (see S 2.159 Updating the computer virus scanning programs
used), a series of regulations for implementing the concept are to be agreed (see S 2.11 Regulations on
computer virus protection) in which additional safeguards required for virus protection are specified.
One of the most important safeguards for protecting computers against damage from viruses is regular
data backup (see S 6.32 Regular data backup).
For the implementation of IT baseline protection, we recommend selecting the required packages of
safeguards ("modules") as described in chapters 2.3 and 2.4. Additional recommended literature is
volume 2 the German Information Security Agency's series of scripts on IT security "Information on
computer viruses".
_________________________________________________________________________________________
IT-Baseline Protection Manual: Otober 2000