Best Practice Detail

13-12-8503

Network Operators, Service Providers and Public Safety should when improper use of keys or encryption algorithms is discovered, or a breach has occurred, conduct a forensic analysis to assess the possibility of having potentially compromised data and identify what may have been compromised and for how long it has been in a compromised state; implement new key (and revoke old key if applicable), or encryption algorithm, and ensure they are standards-based and implemented in accordance with prescribed procedures of that standard, where possible. When using wireless systems, ensure vulnerabilities are mitigated with proper and current security measures. This applies to Public Safety only in an NG9-1-1 environment.

Status: Rollover New

References/Comments: http://www.atis.org/ - T1 276-2003 Operations, Administration, Maintenance, and Provisioning Security Requirements for the Public Telecommunications Network: A Baseline of Security Requirements for the Management Plane: July, 2003 802.11i & 802.16 Related to NRIC BP 8001.

Historical events:

• Network Operators
• Service Providers
• Public Safety
• Cable
• Internet/Data
• Satellite
• Wireless
• Wireline
• Cyber Security
• Information Protection
• Public Safety Service
• Intrusion Detection
• CSRIC VII: Rollover New In CSRIC VII