Commit 1cb748e7 authored by Santeri Toikka's avatar Santeri Toikka
Browse files

Merge branch '137-has76-revise-objective-6-3-6-4' into 'main' 

HAS 76 Issue #137

Closes #54 and #137

See merge request cyber/stan4cr2/en-304-621!44
parents 7a51366f eea50652

EN-304-621.md

+12 −7
Original line number Diff line number Diff line
@@ -1375,26 +1375,31 @@ There are three different types of assessments used in this document. 


#### 6.3.6.4 REQ-METRICS-4



**Requirement:** Relevant system and connected element metrics like CPU, memory, disk utilisation shall be tracked and reported.<br/>

**Objective:** A compromised managed device mines bitcoins, or floods other services with unwanted traffic.<br/>

**Requirement:** Relevant system and connected element metrics such as CPU, memory, disk utilisation shall be tracked and reported.<br/>

**Objective:** Support users or administrators ability to detect compromised, misconfigured, or harmful connected elements through unusual, excessive, or risky patterns of use.<br/>

**Preparation:**



1. Have the product initialised and available with the default configuration and required credentials.

1. Have at lest one managed element as part of the system the product operates 



**Activities:**



1. Study the monitoring data GUI.

1. Study the provided documentation.

1. Study the provided technical documentation to interpret the monitoring data GUI.

1. Simulate unnormal behaviour by intensionally cutting the connection with a managed element and observe the monitoring data.

1. Restart the managed element.



**Verdict:**



1. Pass if basic administrative metrics are tracked and displayed.

1. Pass if the connection loss to the managed element is recognized.

1. Pass if by observing the metrics a baseline can be established.

1. Pass if anomalities like load spikes after a restart can be observed.

1. Fail otherwise.



**Supporting Evidence:**



1. The technical documentation.

1. Screenshot of the GUI displaying how the data is displayed.

1. The technical documentation of the monitoring data.

1. Screenshot of the GUI displaying how the data is displayed the normal operation and the detection of the unnormal behaviour.



#### 6.3.6.5 REQ-METRICS-5