IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Organisation Remarks
____________________________________________________________________ .........................................
If it is intended to make a large number of documents available which often
change, it is advisable to link the WWW server to a document database. This
approach gives users the means to search for and view documents quickly, and
to perform document administration. It can also be useful if a database link
allows users access to previously available corporate data.
Before new files are loaded onto a WWW server, they must be checked to
determine whether they still contain any residual information (see S 4.64
Verification of data before transmission / elimination of residual information).
Configuration management
Experience shows that the contents of WWW pages frequently change, so it is
important to have set up a properly functioning configuration management
procedure. Links and references must be checked to ensure that they are up to
date, and a virus check must be performed with an up-to-date computer virus
scanning program before the pages are published.
It is equally important that all publications should pass through a specified and
retraceable checking procedure. This should include quality control of the
contents but also formal approval of the document. It is also necessary to
examine whether the information is suitable for publication at all, or whether
it is confidential, for example, or is subject to data privacy protection rules or
is copyright-protected or restricted in some similar way.
Information that has been released for publication via electronic media should
be digitally signed in order to give all readers the possibility of checking the
authenticity of the information.
Publications which do not reflect the opinions of the organisation must be
identified as such.
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000