Best Practice Detail

13-12-8013

Network Operators, Service Providers, Equipment Suppliers and Public Safety should authenticate, authorize, attribute, and log all management actions on critical infrastructure elements and management systems. This especially applies to management actions involving security resources such as passwords, encryption keys, access control lists, time-out values, etc.

Status: Rollover New

References/Comments: Department of Defense Telecommunications and Defense Switched Network Secuirty Technical Implementation Guide (Version 2, Release 3). \\\'http://www.atis.org/ - ATIS-0300276.2008 Operations, Administration, Maintenance, and Provisioning Security Requirements for the Public Telecommunications Network: A Baseline of Security Requirements for the Management Plane: March 2008.

Historical events:

Network Operators
Service Providers
Equipment Suppliers
Public Safety
Cable
Internet/Data
Satellite
Wireless
Wireline
Cyber Security
Information Protection
Public Safety Service
Encryption
CSRIC VII: Rollover New In CSRIC VII