Best Practice Detail

13-8-8024

Network Operators, Service Providers, and Equipment Suppliers should not permit users to log on locally to the Operation Support Systems or network elements. System administrator console logon should require as strong authentication as practical.

Status: Rollover New

References/Comments: Some systems differentiate a local account database and network account database. Users should be authenticated onto the network using a network accounts database, not a local accounts database. 'http://www.atis.org/ - ATIS-0300276.2008 Operations, Administration, Maintenance, and Provisioning Security Requirements for the Public Telecommunications Network: A Baseline of Security Requirements for the Management Plane: March 2008.

Historical events:

• Network Operators
• Service Providers
• Internet/Data
• Cyber Security
• Network Operations
• CSRIC VII: Rollover New In CSRIC VII