Best Practice Detail

13-12-8126

Network Operators, Service Providers, Equipment Suppliers and Public Safety should employ authentication methods commensurate with the business risk of unauthorized access to the given network, application, or system. For example, these methods would range from single-factor authentication (e.g., passwords) to two-factor authentication (e.g., token and PIN) depending on the estimated criticality or sensitivity of the protected assets. When two-factor authentication generates one-time passwords, the valid time-duration should be determined based on an assessment of risk to the protected asset(s).

Status: Rollover New

References/Comments: http://www.atis.org/ - ATIS-0300276.2008 Operations, Administration, Maintenance, and Provisioning Security Requirements for the Public Telecommunications Network: A Baseline of Security Requirements for the Management Plane: March 2008.

Historical events:

Network Operators
Service Providers
Equipment Suppliers
Public Safety
Cable
Internet/Data
Satellite
Wireless
Wireline
Cyber Security
Information Protection
Public Safety Service
Intrusion Detection
CSRIC VII: Rollover New In CSRIC VII