Best Practice Detail

13-9-8083

Network Operators, Service Providers, Equipment Suppliers, and Public Safety should protect authentication databases/files from unauthorized access, and they must be backed-up and securely stored in case they need to be restored.

Status: Rollover New

References/Comments: Filter access to the TCP and/or UDP ports serving the database at the network border. Use strong authentication for those requiring access. Prevent users from viewing directory and file names that they are not authorized to access. Enforce a policy of least privilege. Build a backup system in the event of loss of the primary system. Document and test procedures for backup and restoral of the directory.

Historical events:

Network Operators
Service Providers
Equipment Suppliers
Public Safety
Cable
Internet/Data
Satellite
Wireless
Wireline
Cyber Security
Information Protection
Encryption
Intrusion Detection
CSRIC VII: Rollover New In CSRIC VII