Best Practice Detail

13-8-8025

Network Operators and Service Providers should be isolated from other OAM&P networks, e.g., SCADA networks, such as for power, water, industrial plants, pipelines, etc. · Isolate the SCADA network from the OAM&P network (segmentation) · Put a highly restrictive device, such as a firewall, as a front-end interface on the SCADA network for management access. · Use an encrypted or a trusted path for the OAM&P network to communicate with the SCADA "front-end."

Status: Rollover New

References/Comments: Note: Service providers MAY provide an offer of 'managed' SCADA services or connectivity to other utilities. This should be separate from the provider's OAM&P network. ITU-T Rec. X.1051.

Historical events:

• Network Operators
• Service Providers
• Internet/Data
• Cyber Security
• Network Elements
• Network Operations
• Encryption
• CSRIC VII: Rollover New In CSRIC VII