Best Practice Detail

13-8-8106

Network Operators, Service Providers, and Equipment Suppliers should employ operating system hardening and up-to-date security patches for all accessible wireless servers and wireless clients. Employ strong end user authentication for wireless IP connections. Employ logging of all wireless IP connections to ensure traceability back to end user. Employ up-to-date encryption capabilities available with the devices. In particular, vulnerable network and personal data in cellular clients must be protected if the handset is stolen.

Status: Rollover New

References/Comments: IPSec. Telcordia GR-815. Cellular Standards: GSM, PCS2000, CDMA, 1XRTT, UMTS, etc. Dependency on NRIC BP 5018. NIST SP 800-40 v2.0 Creating a Patch and Vulnerability Management Program.

Historical events:

Network Operators
Service Providers
Equipment Suppliers
Cable
Internet/Data
Satellite
Wireless
Wireline
Cyber Security
Network Operations
Intrusion Detection
CSRIC VII: Rollover New In CSRIC VII