Best Practice Detail

13-8-8559

Network Operators and Service Providers should upload current IDS/IPS signatures from vendors and re-verify stored data with the updated signatures in the event of a security threat. Evaluate platform's ability to deliver service in the face of evolving threats and consider upgrade/replacement as appropriate. Review Incident Response Post-Mortem Checklist (NRIC BP 8564).

Status: Rollover New

References/Comments: NIST SP800-94 Guide to Intrusion Detection and Prevention Systems (IDPS) http://csrc.nist.gov/publications/nistpubs/800-94/SP800-94.pdf.

Historical events:

• Service Providers
• Cable
• Internet/Data
• Satellite
• Wireless
• Wireline
• Cyber Security
• CSRIC VII: Rollover New In CSRIC VII