Best Practice Detail

13-8-8752

Network Operators, Service Providers, and Equipment Suppliers should use custom policies created by OS, device, or by industry standard (SANS Top 20, Windows Top 10 Vulnerabilities, OWASP Top 10) and specific to your environment. Organizations should identify what scanning methods and operating procedures are best for their company, and document how they would proceed in a standard operating procedure.

Status: Rollover New

References/Comments: Sans Institute, "Vulnerability Management: Tools, Challenges and Best Practices." 2003. Pg. 11, 12.

Historical events:

Network Operators
Service Providers
Equipment Suppliers
Cable
Internet/Data
Satellite
Wireless
Wireline
Cyber Security
Policy
Intrusion Detection
CSRIC VII: Rollover New In CSRIC VII