Best Practice Detail

13-12-8501

Network Operators, Service Providers, Equipment Suppliers and Public Safety should secure a new root key, and rebuild the PKI (Public Key Infrastructure) trust model, in the event the root key in a digital certificate becomes compromised. Perform Forensics and Post-mortem, as prescribed in NRIC BP 8061, to review for additional compromise as soon as business processes allow. This applies to Public Safety only in an NG9-1-1 environment.

Status: Rollover New

References/Comments: NIST SP800-57 Recommendation for key management http://csrc.nist.gov/publications/nistpubs/800-57/sp800-57-Part1-revised2_Mar08-2007.pdf.

Historical events:

Network Operators
Service Providers
Equipment Suppliers
Public Safety
Cable
Internet/Data
Satellite
Wireless
Wireline
Cyber Security
Information Protection
Public Safety Service
CSRIC VII: Rollover New In CSRIC VII