Boundary firewall and internet gateways Sample Clauses

Boundary firewall and internet gateways. Information, applications and devices must be protected against unauthorised access and disclosure from the internet, using boundary fire walls, internet gateways or equivalent network devices. Secure configuration ICT systems and devices must be configured to reduce the level of inherent vulnerabilities and provide only the services required to fulfil their role User access control User accounts must be assigned to authorised individuals only, managed effectively, and they must provide the minimum level of access to applications, devices, networks, and data. Access control (username & password) must be in place. A password policy must be in place which includes: • Avoiding the use of weak or predictable passwords. • Ensuring all default passwords are changed. • Ensuring robust measures are in place to protect administrator passwords. • Ensuring account lock out or throttling is in place to defend against automated guessing attacks. End user activity must be auditable and include the identity of end-users who have accessed the systems. Malware protection Mechanisms to identify detect and respond to malware on ICT systems .and devices must be in place and must be fully licensed, supported, and have all available updates applied.

Boundary firewall and internet gateways. 2.1 Information, applications and devices shall be protected against unauthorised access and disclosure from the internet, using boundary firewalls, internet gateways or equivalent network devices.