Page 40 of 93
Copyright (c) 2012 RICOH COMPANY, LTD. All rights reserved.
OE.INTERFACE.MANAGED Management of external interfaces in IT environment
The IT environment shall take a countermeasure for the prevention of unmanaged
access to TOE external interfaces.
4.2.2 Non-IT Environment
OE.PHYSICAL.MANAGED Physical management
According to the guidance document, the TOE shall be placed in a secure or monitored
area that provides protection from physical access to the TOE by unauthorised persons.
OE.USER.AUTHORIZED Assignment of user authority
The responsible manager of MFP shall give users the authority to use the TOE in
accordance with the security policies and procedures of their organisation.
OE.USER.TRAINED User training
The responsible manager of MFP shall train users according to the guidance document
and ensure that users are aware of the security policies and procedures of their
organisation and have the competence to follow those policies and procedures.
OE.ADMIN.TRAINED Administrator training
The responsible manager of MFP shall ensure that administrators are aware of the
security policies and procedures of their organisation; have the training, competence,
and time to follow the guidance document; and correctly configure and operate the TOE
according to those policies and procedures.
OE.ADMIN.TRUSTED Trusted administrator
The responsible manager of MFP shall select administrators who will not use their
privileged access rights for malicious purposes according to the guidance document.
OE.AUDIT.REVIEWED Log audit
The responsible manager of MFP shall ensure that audit logs are reviewed at appropriate
intervals according to the guidance document for detecting security violations or
unusual patterns of activity.
To Next Page
Loading...
Need help?
General
