Best Practice Detail

13-9-8038

Network Operators and Service Providers should have a formal process during system or service development that exist in which a review of security controls and techniques is performed by a group independent of the development group, prior to deployment.

Status: Rollover New

References/Comments: This review should be based on an organization's policies, standards, and guidelines, as well as best practices. In instances where exceptions are noted, mitigation techniques should be designed and deployed and exceptions should be properly tracked.

Historical events:

• Network Operators
• Service Providers
• Public Safety
• Cable
• Internet/Data
• Satellite
• Wireless
• Wireline
• Cyber Security
• Procedures
• CSRIC VII: Rollover New In CSRIC VII