Best Practice Detail

13-9-8064

Service Providers, Network Operators, and Public Safety should generate and collect security-related event data for critical systems (i.e., syslogs, firewall logs, IDS alerts, remote access logs, etc.). Where practical, this data should be transmitted to secure collectors for storage and should be retained in accordance with a data retention policy. A mechanism should be enabled on these systems to ensure accurate timestamps of this data (e.g., Network Time Protocol).

Status: Rollover New

References/Comments:

Historical events:

Network Operators
Service Providers
Equipment Suppliers
Public Safety
Cable
Internet/Data
Satellite
Wireless
Wireline
Cyber Security
Disaster Recovery
Emergency Preparedness
Encryption
CSRIC VII: Rollover New In CSRIC VII