Best Practice Detail

13-8-8750

Network Operators and Service Providers should have assigned risk ratings for vulnerabilities and definitions of those risk ratings (i.e. What does a High risk vulnerability mean to the general user public?, etc.) Finally, the security team should have access to an accurate and readily available asset inventory (See Step 1: Asset Inventory) (including the asset owners, and patch levels) and network diagrams.

Status: Rollover New

References/Comments: Sans Institute, "Vulnerability Management: Tools, Challenges and Best Practices." 2003. Pg. 8 - 10.

Historical events:

• Network Operators
• Service Providers
• Cable
• Internet/Data
• Wireless
• Wireline
• Cyber Security
• Intrusion Detection
• CSRIC VII: Rollover New In CSRIC VII