DS5.7:

DS 5.7 Protection of Security Technology

Control Objective:

Ensure that important security-related technology is made resistant to tampering and security documentation is not disclosed unnecessarily, i.e., it keeps a low profile. However, do not make security of systems reliant on secrecy of security specifications.

Applicability:

Sarbanes-Oxley

HIPAA

GLBA

PCI

FISMA

NIST SP 800-66

Ditscap

Control Exception

User Defined

Risk Association Control Activities:

1. PCI-10.5.1 Limit viewing of audit trails to those with a job-related need.

2. PCI-10.5.2 Protect audit trail files from unauthorized modifications.

3. PCI-10.5.3 Promptly back-up audit trail files to a centralized log server or media that is difficult to alter.

4. PCI-10.5.4 Copy logs for wireless networks onto a log server on the internal LAN.

5. PCI-10.5.5 Use file integrity monitoring/change detection software (such a Tripwire) on logs to ensure that existing log data cannot be changed without generating alerts (although new data being added should not cause an alert).

Implementation Guide:

Process Narrative
Insert a description of the process narration that is applicable to the existing control statement this narrative refers to.

Process Illustration
Insert a process diagram, flowchart or other visual representation here to illustrate the process narrative.

File:Someimage.jpg

Control Commentary
Insert a description of the control that is applicable to the existing control statement this commentary refers to.

Control Exception Commentary
Insert a description of the control exception that is applicable to the existing control statement this commentary refers to.

Evidence Archive Location
Insert Evidence Description Here.

Control Status and Auditors Commentary
Describe the condition of the applicable control and its effectiveness. Set the color icon to a redlock.jpg, yellowlock.jpg or greenlock.jpg.

File:Redlock.jpg

Remediation Plan
Insert remediation plan, applicability, or any information that indicates what needs to be done.

Supplemental Information:
ITIL Security Management
ITIL Security Management Measures
ITIL 4.2 Implementation

ISO 7.1 Secure areas
ISO 8.6 Media handling and security
ISO 10.3 Cryptographic controls