@@ -1203,6 +1203,23 @@ The VPN shall not store any Personal Data of the user on the VPN server, gateway
* UC-6: not required
* UC-7: not required
### 5.9.6 REQ-DM-06 (MI-LOGG-X) No data persistence or storage enabled on exit nodes (MI-LOGG-X)
#### 5.9.6.1 Requirement
1.**REQ-DM-06 (MI-LOGG-X)-1** The VPN server, gateway or exit nodes shall utilize an ephemeral infrastructure architecture to technically prevent the persistent storage of user data, traffic metadata, or system logs at the hardware and operating system level, and
2.**REQ-DM-06 (MI-LOGG-X)-2** VPN server, gateway or exit nodes shall operate exclusively using volatile memory (e.g., RAM disks or NVRAM) for temporary processing and system logs, without writing to non-volatile disk-based storage. To satisfy cybersecurity monitoring requirements, any non-Personal Data cybersecurity-relevant events shall be logged in volatile memory or securely transmitted to a remote logging system in accordance with REQ-LOG-03 (MI-LOGG-2).
@@ -1211,6 +1228,7 @@ The VPN shall not store any Personal Data of the user on the VPN server, gateway
| REQ-DM-03 (MI-NPER-2) | | x | x | | | | |
| REQ-DM-04 (MI-NPER-3) | | x | x | | | | |
| REQ-DM-05 (MI-NPER-4) | | x | x | | | | |
| REQ-DM-06 (MI-LOGG-X) | | x | x | | | | |
## 5.10 Availability protection
@@ -1460,25 +1478,6 @@ The VPN client shall not require routing of traffic from sources/destinations ot
* UC-6: required
* UC-7: required
### 5.13.6 REQ-EMM-06 (MI-LOGG-X) No data persistence or storage enabled on exit nodes (MI-LOGG-X)
[//]:#(TODO does this belong in 5.9 data minimization?)
#### 5.13.6.1 Requirement
1.**REQ-EMM-06 (MI-LOGG-X)-1** The VPN server, gateway or exit nodes shall utilize an ephemeral infrastructure architecture to technically prevent the persistent storage of user data, traffic metadata, or system logs at the hardware and operating system level, and
2.**REQ-EMM-06 (MI-LOGG-X)-2** VPN server, gateway or exit nodes shall operate exclusively using volatile memory (e.g., RAM disks or NVRAM) for temporary processing and system logs, without writing to non-volatile disk-based storage. To satisfy cybersecurity monitoring requirements, any non-Personal Data cybersecurity-relevant events shall be logged in volatile memory or securely transmitted to a remote logging system in accordance with REQ-LOG-03 (MI-LOGG-2).
* Documentation of why the samples don't contain Personal Data
### 6.9.6 REQ-DM-06 (MI-LOGG-X) No data persistence or storage enabled on exit nodes (MI-LOGG-X)
#### 6.9.6.1 Objective
Minimization of data compromise due to equipment compromise, Confidentiality of data.
#### 6.9.6.2 Preparation
1. Obtain the technical documentation detailing the server provisioning architecture for the remote data processing solutions.
2. Obtain administrative access to a test instance of the VPN exit node configured identically to the production environment.
#### 6.9.6.3 Activities
Perform steps in sequence:
1. Examine the server's operating system configuration (e.g., filesystem table/fstab, boot parameters) to verify that all system directories (including /var/log and temporary storage) are mounted exclusively on volatile memory (RAM disks).
2. Verify that unencrypted non-volatile swap partitions are disabled.
3. Generate network traffic through the test node, then power cycle (reboot) the server and inspect the storage.
#### 6.9.6.4 Verdict
PASS if **any** of the following are fulfilled:
* The server utilizes volatile disk-based storage for system logs, swap, or temporary processing, or
* data does not persist across a power cycle.
Otherwise FAIL
#### 6.9.6.5 Evidence
* Copies of the relevant server configuration files demonstrating the use of RAM disks
* The output of the storage inspection after the power cycle
## 6.10 Availability protection
### 6.10.1 Overview
@@ -2046,39 +2079,6 @@ Otherwise FAIL
* Documentation of services
### 6.13.6 REQ-EMM-06 (MI-LOGG-X) No data persistence or storage enabled on exit nodes (MI-LOGG-X)
#### 6.13.6.1 Objective
Minimization of data compromise due to equipment compromise, Confidentiality of data.
#### 6.13.6.2 Preparation
1. Obtain the technical documentation detailing the server provisioning architecture for the remote data processing solutions.
2. Obtain administrative access to a test instance of the VPN exit node configured identically to the production environment.
#### 6.13.6.3 Activities
Perform steps in sequence:
1. Examine the server's operating system configuration (e.g., filesystem table/fstab, boot parameters) to verify that all system directories (including /var/log and temporary storage) are mounted exclusively on volatile memory (RAM disks).
2. Verify that unencrypted non-volatile swap partitions are disabled.
3. Generate network traffic through the test node, then power cycle (reboot) the server and inspect the storage.
#### 6.13.6.4 Verdict
PASS if **any** of the following are fulfilled:
* The server utilizes volatile disk-based storage for system logs, swap, or temporary processing, or
* data does not persist across a power cycle.
Otherwise FAIL
#### 6.13.6.5 Evidence
* Copies of the relevant server configuration files demonstrating the use of RAM disks
* The output of the storage inspection after the power cycle
