IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Organisation Remarks
____________________________________________________________________ .........................................
- Application management
It should be possible to manage software at the application level, for
example to manage HTTP access rights to the data on a WWW server (the
realm). This form of management is generally hardly supported at all,
because the co-operation of the application itself is required for this.
Ideally, a system of this type would allow the delegation of administrative
tasks, such that for example a system administrator could grant a workgroup
system administrator the right to install software on the workgroup’s
computers. This mechanism is necessary in medium- to large-sized networks,
in particular.
Network and system administration is normally performed by the same
administrative units within a company or agency. As the division of duties
between network administration and system administration is not clear in
some areas, it is advisable to have regard for the extent to which an existing
network management system can be integrated into the system management
system that is being procured.
In addition to these mainly functional requirements, there are also technical
requirements among the criteria that are relevant to the selection of system
management software (see S 2.171). Of these, the following are particularly
worth pointing out here:
- The management system must be capable of supporting the operating
systems of all of the computers used for management and all of the
computers being managed (operating-system-specific components of the
management system, graphical user interface).
- If a local database system is already in place, the management system
should have the possibility of storing its management information in the
existing database system.
- The management system should be expandable. This relates on the one
hand to the components of the management system (e.g. a modular concept
with the possibility of purchasing and integrating additional modules at any
time), but also to the function of the management system (e.g.
programming API, to be able to connect in-house components).
Generally speaking the criteria for the categorisation of requirements
described in S 2.171 can be used within the framework of this safeguard. For
selected categories the requirements are obtained by specifying a stipulation
within the scope of the particular "range of values".
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000