Best Practice Detail

13-9-8008

Network Operators, Service Providers, and Public Safety should implement architectures that partition or segment networks and applications using means such as firewalls, demilitarized zones (DMZ), or virtual private networks (VPN) so that contamination or damage to one asset does not disrupt or destroy other assets. In particular, where feasible, it is suggested user traffic networks, network management infrastructure networks, customer transaction system networks, and enterprise communication/business operations networks be separated and partitioned from one another.

Status: Rollover New

References/Comments: "ISF SB52, http://www.sans.org ITU-T Rec. X.805 ITU-T Rec. X.812".

Historical events:

Network Operators
Service Providers
Equipment Suppliers
Public Safety
Internet/Data
Cyber Security
Network Elements
Network Operations
CSRIC VII: Rollover New In CSRIC VII