Best Practice Detail

13-9-8748

Network Operators, Service Providers, Equipment Suppliers, and Public Safety should test new devices to identify unnecessary services, outdated software versions, missing patches, and misconfigurations, and validate compliance with or deviations from an organization’s security policy prior to being placed on a network.

Status: Rollover New

References/Comments: NIST SP 800-115 A Technical Guide to Information Security Testing and Assessment.

Historical events:

• Network Operators
• Service Providers
• Equipment Suppliers
• Public Safety
• Cable
• Internet/Data
• Satellite
• Wireless
• Wireline
• Cyber Security
• Intrusion Detection
• CSRIC VII: Rollover New In CSRIC VII