IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Organisation Remarks
____________________________________________________________________ .........................................
- Can an existing network management system be integrated into the
system?
- Can an existing data backup system be integrated into the system?
- What applications from third parties are available for this product?
- Reliability and security against failure
- Are there any statements or even guarantees as to maximum
downtimes?
- Is it possible to hot-swap central components?
- Does the system have its own backup and recovery mechanism? In
the event of failure of the management system, there must be
mechanisms for regulated restarting within the management system.
These may include the loading of data from a backup and automatic
checking of consistency – ideally with the resolution of conflicts if
inconsistencies are detected.
- Are updates regularly made available? Are they easy to install?
- Security: restrictions for accessing management functions
- Can access be restricted at the user ID level (which user is allowed
to do what)?
- Can access be restricted at the component level (which computer is
allowed to do what)?
- Can access to executable commands be restricted on a userdependent
or system-dependent basis?
- Can administration tasks be divided up? For example, can the
administration of components be restricted to certain areas (e.g. only
the department computers)?
- Security: administration of computers via the network
- How is remote access secured?
- Can remote access be performed using encryption?
- Is it ensured that (strong) authentication is required before remote
administration is carried out?
- Is it possible to restrict the authorisation for remote administration to
certain individuals or roles?
- Is the user automatically informed of remote accesses?
- Security: data integrity, privacy protection
- Is the data that is gathered securely stored (access restrictions,
encryption)?
- Does data transfer between the management components take place
on a secure basis (authentication, encryption, protection of
integrity)?
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000