|
Certified Digital Security Level 6
The detailed guidance document (see download at the bottom of this page) explains what is required to achieve this level, a summary is below. The document is divided in to 3 sections:
Section 1 Executive Summary of the target level.
Section 2 General guidance of how to implement the security recommended at this level.
Section 3 The audit criteria (or what is required to pass the audit).
This single document contains all the information necessary to implement the security for, evidence the fact and pass the audit required to achieve CDS Validation for the site tested.
Summary
As we move to the last level of the enhanced group we further tighten our technical and procedural measures to create an environment of controlled systems, supporting processes that protect the physical environment and technology that increases the overall strength of the infrastructure.
To be compliant at Level 6, CDS requires the organisation is to have implemented the following:
Dedicated IT Security Staff provide focus and continuity across the business, ensuring that security receives its due regard.
Checks on regular Subcontractors helps to foster confidence that required security is being maintained on information and assets passed outside the organization.
Virtual Private Networks or other encryption on regular links helps to maintain the confidentiality and integrity of information as it transits across publicly accessible links.
Application Layer Firewalls create an intelligent and more finely controlled mechanism to limit the movement of data to that needed by the business.
Regular annual Vulnerability Analysis are conducted against the organizations assets and the reports recommendations implemented or mitigated.
CDS Certification
CDS documents are provided to the community free of charge. Organizations are encouraged to get their work independently verified through the CDS Audit scheme from either a CDS certified auditor or a partnering organisation. See the Certification section for additional information.
This is a summary; please download the detailed guidance document below. Also listed, are any supporting documents published by CDS for this level.
Any errors, omissions, comments or questions should be sent to certifieddigitalsecurity.com via of web form.
All documentation provided is formatted as PDF and a free Adobe PDF viewer can be downloaded from this link.
|
