Define notes and rules for BSI APP.4.4.A12

sig-bsi-grundschutz · Jan 8, 2024 · e5430a5 · e5430a5
1 parent 61a057e
commit e5430a5
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 3 deletions.
diff --git a/applications/openshift/registry/ocp_insecure_allowed_registries_for_import/rule.yml b/applications/openshift/registry/ocp_insecure_allowed_registries_for_import/rule.yml
@@ -31,6 +31,7 @@ identifiers:
     cce@ocp4: CCE-86235-9
 
 references:
+    bsi: APP.4.4.A12
     cis@ocp4: '5.5.1'
     nist: CM-5(3)
     srg: SRG-APP-000014-CTR-000035

diff --git a/applications/openshift/registry/ocp_insecure_registries/rule.yml b/applications/openshift/registry/ocp_insecure_registries/rule.yml
@@ -27,6 +27,7 @@ identifiers:
     cce@ocp4: CCE-86123-7
 
 references:
+    bsi: APP.4.4.A12
     cis@ocp4: '5.5.1'
     nist: CM-5(3)
     srg: SRG-APP-000014-CTR-000035

diff --git a/controls/bsi_app_4_4.yml b/controls/bsi_app_4_4.yml
@@ -217,9 +217,13 @@ controls:
         • Logging of changes
         • Regular data backups.
     notes: >-
-      TBD
-    status: pending
-    rules: []
+      This requirement needs to be adressed in the respective separate systems.
+      However, one requirement (Encrypted communication on all network ports) can partitially be 
+      checked by ensuring that no registry is allowed in over insecure protocols
+    status: partial
+    rules:
+      - ocp_insecure_registries
+      - ocp_insecure_allowed_registries_for_import
 
   - id: APP.4.4.A13
     title: Automated Configuration Auditing