Best Practice Detail

13-12-8088

Network Operators, Service Providers, Equipment Suppliers and Public Safety should charter an independent group (outside of the administrators of the devices) to perform regular audits of access and privileges to systems, networks, and applications. The frequency of these audits should depend on the criticality or sensitivity of the associated assets.

Status: Rollover New

References/Comments: Information Security Forum. “Security Audit/Review”. The Forum’s Standard of Good Practice, The Standard for Information Security. November 2000.

Historical events:

Network Operators
Service Providers
Equipment Suppliers
Public Safety
Internet/Data
Cyber Security
Network Design
Network Elements
Network Operations
Public Safety Service
CSRIC VII: Rollover New In CSRIC VII