Best Practice Detail

13-12-8108

Network Operators, Service Providers and Public Safety should determine how the system requiring support of the authentication system responds (i.e., determine what specific effect(s) the failure caused) in the event of an authentication system failure. The system can either be set to open or closed in the event of a failure. This will depend on the needs of the organization. For instance, an authentication system supporting physical access may be required to fail OPEN in the event of a failure so people will not be trapped in the event of an emergency. However, an authentication system that supports electronic access to core routers may be required to fail CLOSED to prevent general access to the routers in the event of authentication system failure. In addition, it is important to have a means of alternate authenticated access to a system in the event of a failure. In the case of core routers failing CLOSED, there should be a secondary means of authentication (e.g., use of a one-time password) reserved for use only in such an event; this password should be protected and only accessible to a small key-contingent of personnel.

Status: Rollover New

References/Comments: ITU-T Rec. X.1051.

Historical events:

Network Operators
Service Providers
Public Safety
Internet/Data
Cyber Security
Network Elements
Network Operations
Public Safety Service
Security Systems
Encryption
CSRIC VII: Rollover New In CSRIC VII