Best Practice Detail

13-8-8507

Network Operators and Service Providers should consider which systems/services the affected system could be disconnected from to minimize access and connectivity while allowing desired activities to continue when it is discovered that a system is running with a higher level of privilege than necessary; conduct a forensic analysis to assess the possibility of having potentially compromised data and identify what may have been compromised and for how long it has been in a compromised state; and reconnect system to back-office with appropriate security levels implemented.

Status: Rollover New

References/Comments: http://www.atis.org/ - ATIS-0300276.2008 Operations, Administration, Maintenance, and Provisioning Security Requirements for the Public Telecommunications Network: A Baseline of Security Requirements for the Management Plane: March 2008 ISF CB63.

Historical events:

• Network Operators
• Service Providers
• Internet/Data
• Cyber Security
• Network Operations
• CSRIC VII: Rollover New In CSRIC VII