The "system administrators" figures are essential for the security of databases and the proper management of telecommunications networks. Experts are called upon to perform delicate tasks that involve the practical ability to access all data passing on institutional and corporate networks. They are often also entrusted with the task of supervising the proper use of the computer systems of a company or a government.
For this reason the Guarantor has prescribed the adoption of specific technical and organizational measures to facilitate its verification activities by those who have the ownership of databases and information systems.
Adoption records access control systems that allow access logging performed by system administrators to computer systems and electronic archives.
The records must include references to time and description of the event has generated and must be retained for a reasonable period of not less than six months.
Verification activities
checked annually by data processor on the compliance of the system administrators with organizational measures, technical and security provided by law for the processing of personal data.
List of system administrators and their characteristics
Each company or public entity should include in the policy document of security or in an internal document (available in investigations by the Guarantor) the identification of system administrators and 'list of their tasks.
They will then be carefully considered experience, capability, and reliability of the person called to fill the role of system administrator, who must be able to ensure full compliance with the legislation on protection of personal data, including the security profile.
For this reason the Guarantor has prescribed the adoption of specific technical and organizational measures to facilitate its verification activities by those who have the ownership of databases and information systems.
Adoption records access control systems that allow access logging performed by system administrators to computer systems and electronic archives.
The records must include references to time and description of the event has generated and must be retained for a reasonable period of not less than six months.
Verification activities
checked annually by data processor on the compliance of the system administrators with organizational measures, technical and security provided by law for the processing of personal data.
List of system administrators and their characteristics
Each company or public entity should include in the policy document of security or in an internal document (available in investigations by the Guarantor) the identification of system administrators and 'list of their tasks.
They will then be carefully considered experience, capability, and reliability of the person called to fill the role of system administrator, who must be able to ensure full compliance with the legislation on protection of personal data, including the security profile.
Link: To stay updated subscribe to our Newsletter!
0 comments:
Post a Comment