User Manual

System Security
Operation/Maintenance
2
18 | 28
A6V11917735_en_b_41
2.3 Operation/Maintenance
2.3.1 Maintenance of IT Components
The preservation of IT security is an ongoing process for which the corresponding
tasks must be repeated continuously. Therefore, every security measure must be
examined whether their one-time implementation is sufficient, or a periodic
maintenance is required, such as regularly updating the antivirus software.
● Log all the maintenance actions performed.
● Install security updates regularly.
● At regular intervals, carry out a risk analysis on the security features of the
software in use.
● Observe the guidance in section IT Security in the document Cerberus DMS
V4.0 Cybersecurity Guidelines (A6V11646120_en_b_40)
● Observe the guidance in section IT Security in the document Cerberus DMS
V4.0 Cybersecurity Guidelines (A6V11791378_en_b_40)
2.3.2 Phase out/End of Life
Once an IT component involved in the access to the PACE zone is no longer
supplied by the manufacturer with security updates, this IT component must be
replaced. If this EOL-IT component cannot be replaced, the PACE zone must be
disconnected immediately from connections with untrusted networks.