Best Practice Detail

13-6-5170

Network Operators, Service Providers, and Equipment Suppliers should control or disable all administrative access ports (e.g., manufacturer) into R&D or production systems (e.g., remap access ports, require callback verification, add second level access gateway).

Status: Rollover New

References/Comments: To eliminate the use of default and undocumented ports to penetrate into software and distribution systems.

Historical events:

Network Operators
Service Providers
Equipment Suppliers
Cable
Internet/Data
Satellite
Wireless
Wireline
Cyber Security
Information Protection
Network Elements
Network Operations
Technical Support
CSRIC VII: Rollover New In CSRIC VII