Best Practice Detail

13-12-8101

Network Operators, Service Providers and Public Safety should ensure that all security operational procedures, system processes, and security controls are documented, and that documentation is up to date and accessible by appropriate staff. Perform gap analysis/audit of security operational procedures as often as security policy requires relative to the asset being protected. Using results of analysis or audit, determine which procedures, processes, or controls need to be updated and documented.

Status: Rollover New

References/Comments: NIST SP800-14 Generally accepted principles and practices for securing IT systems. http://csrc.nist.gov/publications/nistpubs/800-14/800-14.pdf. Note: This Best practice could impact 9-1-1 operations.

Historical events:

• Network Operators
• Service Providers
• Public Safety
• Internet/Data
• Cyber Security
• Documentation
• Network Design
• Network Operations
• Public Safety Service
• CSRIC VII: Rollover New In CSRIC VII