Skip to content
ATIS Best Practices
fXin▶
Login

Best Practice Detail

13-12-8671

Network Operators, Service Providers and Public Safety should have policies and enforce that unattended workstations should be protected from unauthorized access 1) Individual Username/Password authentication must be required to access resources. 2) Physical access must be restricted to workstations. 3) Where possible idle workstations must default to password protected screensaver after an established time lapse (e.g. 15 minutes).

Status: Rollover New

References/Comments: http://csrc.nist.gov/publications/nistpubs/800-66-Rev1/SP-800-66-Revision1.pdf Octave Catalog of Practices, Version 2.0, CMU/SEI-2001- TR-20 (http://www.cert.org/archive/pdf/01tr020.pdf) Practice OP1.2.4

Historical events:

  • Network Operators
  • Service Providers
  • Public Safety
  • Internet/Data
  • Access Control
  • Cyber Security
  • Hardware
  • Network Operations
  • Policy
  • Public Safety Service
  • Intrusion Detection
  • CSRIC VII: Rollover New In CSRIC VII