Best Practice Detail

13-8-8031

Network Operators, Service Providers, and Equipment Providers should develop and communicate Lawfully Authorized Electronic Surveillance (LAES) policy. They should: · Limit the distribution of information about LAES interfaces · Periodically conduct risk assessments of LAES procedures · Audit LAES events for policy compliance · Limit access to those who are authorized for LAES administrative functions or for captured or intercepted LAES content · Promote awareness of all LAES policies among authorized individuals

Status: Rollover New

References/Comments: http://www.atis.org/ - ATIS-0300276.2008 Operations, Administration, Maintenance, and Provisioning Security Requirements for the Public Telecommunications Network: A Baseline of Security Requirements for the Management Plane: March 2008.

Historical events:

Network Operators
Service Providers
Equipment Suppliers
Cable
Internet/Data
Satellite
Wireless
Wireline
Cyber Security
Disaster Recovery
Emergency Preparedness
CSRIC VII: Rollover New In CSRIC VII