Best Practice Detail

13-12-8540

Network Operators, Service Providers and Public Safety should consider terminating all current remote access, limiting access to the system console, or other tightened security access methods, when an unauthorized remote access to an OAM&P system occurs. Continue recovery by re-establishing new passwords, reloading software, running change detection software, or other methods, continuing quarantine until recovery is validated, as practical.

Status: Rollover New

References/Comments: ISF CB53. Cross reference with 7-7-8540 developed under NRIC. Note: This Best practice could impact 9-1-1 operations.

Historical events:

Network Operators
Service Providers
Public Safety
Cable
Internet/Data
Satellite
Wireless
Wireline
Cyber Security
Disaster Recovery
Emergency Preparedness
Public Safety Service
Intrusion Detection
CSRIC VII: Rollover New In CSRIC VII