Best Practice Detail

13-12-8029

Network Operators, Service Providers, Equipment Suppliers and Public Safety should carefully control and monitor the networked availability of sensitive security information for critical infrastructure by: periodic review of public and internal websites, file storage sites HTTP and FTP sites contents for strategic network information including but not limited to critical site locations, access codes. Documenting sanitizing processes and procedures required before uploading onto public internet or FTP site. Ensuring that all information pertaining to critical infrastructure is restricted to need-to-know and that all transmission of that information is encrypted. Screening, limiting and tracking remote access to internal information resources about critical infrastructure.

Status: Rollover New

References/Comments:

Historical events:

Network Operators
Service Providers
Equipment Suppliers
Public Safety
Cable
Internet/Data
Satellite
Wireless
Wireline
Cyber Security
Information Protection
Public Safety Service
Encryption
CSRIC VII: Rollover New In CSRIC VII