Best Practice Detail

13-12-8085

Network Operators, Service Providers, Equipment Suppliers and Public Safety should ensure certificates have a limited period of validity, dependent upon the risk to the system, and the value of the asset. If there are existing certificates with unlimited validity periods, and it is impractical to replace certificates, consider the addition of passwords that are required to be changed on a periodic basis. This applies to Public Safety only in an NG9-1-1 environment.

Status: Rollover New

References/Comments: McClure, Stuart, Joel Scambray, George Kurtz. \"Dial-Up, PBX, Voicemail, and VPN Hacking\". Hacking Exposed, Network Security Secrets and Solutions, 4th Edition. Berkley, CA. The McGraw-Hill Companies. 2003. 341-389.

Historical events:

Network Operators
Service Providers
Equipment Suppliers
Public Safety
Cable
Internet/Data
Satellite
Wireless
Wireline
Cyber Security
Information Protection
Public Safety Service
Encryption
CSRIC VII: Rollover New In CSRIC VII