T 5.17 Threat posed by external staff during maintenance work

An IT system can be manipulated in any way during maintenance work. The threat is primarily due to the fact that the owner is often not able to understand and follow the effected modifications. Moreover, an external maintenance engineer, just like an internal one, usually also has access to all data stored in the system.