Best Practice Detail

13-12-8022

Network Operators, Service Providers and Public Safety should have a process by which there is a risk assessment and formal approval for all external connections. All such connections should be individually identified and restricted by controls such as strong authentication, firewalls, limited methods of connection, and fine-grained access controls (e.g., granting access to only specified parts of an application). The remote party\\\'s access should be governed by contractual controls that ensure the provider\\\'s right to monitor access, defines appropriate use of the access, and calls for adherence to best practices by the remote party. This applies to Public Safety only in an NG9-1-1 environment.

Status: Rollover New

References/Comments:

Historical events:

• Network Operators
• Service Providers
• Public Safety
• Internet/Data
• Cyber Security
• Information Protection
• Network Operations
• Public Safety Service
• CSRIC VII: Rollover New In CSRIC VII