Best Practice Detail

13-12-8112

Network Operators, Service Providers and Public Safety should protect the systems configuration information and management interfaces for Web servers and other externally accessible applications, so that it is not inadvertently made available to 3rd parties. Techniques, at a minimum, should include least privilege for external access, strong authentication, application platform hardening, and system auditing. This applies to Public Safety only in an NG9-1-1 environment.

Status: Rollover New

References/Comments:

Historical events:

Network Operators
Service Providers
Public Safety
Internet/Data
Cyber Security
Network Operations
Public Safety Service
Encryption
CSRIC VII: Rollover New In CSRIC VII