Commit 80fb98e0 authored by August Bournique's avatar August Bournique
Browse files

HAS 76 Issue #137 

Objective was previously a narrative description of risk associated with a lack of monitoring connected devices (background bitcoin mining hacks etc degrading NMS function) rather then a description of the objective of the security requirement.  Replaced with:

"Objective: Support users or administrators ability to detect compromised, misconfigured, or harmful connected elements through unusual, excessive, or risky patterns of use."

Resolves #137

Objectives should generally be reviewed for structure and similar issues with wording.  #192 and HAS #132 and #128 are similar.
parent 6052877f

EN-304-621.md

+2 −2
Original line number Diff line number Diff line
@@ -1390,8 +1390,8 @@ There are three different types of assessments used in this document. 


#### 6.3.6.4 REQ-METRICS-4



**Requirement:** Relevant system and connected element metrics like CPU, memory, disk utilisation shall be tracked and reported.<br/>

**Objective:** A compromised managed device mines bitcoins, or floods other services with unwanted traffic.<br/>

**Requirement:** Relevant system and connected element metrics such as CPU, memory, disk utilisation shall be tracked and reported.<br/>

**Objective:** Support users or administrators ability to detect compromised, misconfigured, or harmful connected elements through unusual, excessive, or risky patterns of use.<br/>

**Preparation:**



1.  Have the product initialised and available with the default configuration and required credentials.