Skip to content
ATIS Best Practices

Search

1098 matching practices

NumberBest Practice
13-10-5025Network Operators, Service Providers, and Equipment Suppliers should include physical security as an integral part of the merger, acquisition and divestiture process to ensure that security risks are proactively identified and appropriate plans are developed to facilitate the integration and migration of organizational functions (e.g., Due Diligence investigations, integration of policy and procedures).
13-10-5026Network Operators, Service Providers, Equipment Suppliers, Property Managers, and Public Safety should include security as an integral part of the facility construction process to ensure that security risks are proactively identified and appropriate solutions are included in the design of the facility.
13-10-5027Network Operators, Service Providers, Equipment Suppliers, and Property Managers should collaborate during major events (e.g., hiring, downsizing, outsourcing, labor disputes, civil disorder).to ensure that security risks are identified and plans are developed to protect the company's personnel and assets.
13-10-5030Network Operators, Service Providers, Equipment Suppliers, and Public Safety should provide a level of security protection over critical inventory (i.e., spares) that is proportionate to the criticality of the equipment.
13-10-5031Network Operators, Service Providers, Equipment Suppliers, and Public Safety should establish a role for the security function (i.e., physical and cyber) in business continuity planning, including emergency response plans and periodic tests of such plans.
13-10-5032Network Operators, Service Providers, Equipment Suppliers, Property Managers, and Public Safety should establish a procedure governing the assignment of facility access levels.
13-10-5033Network Operators, Service Providers, Equipment Suppliers, Property Managers, and Public Safety should consider establishing and implementing background investigation policies that include criminal background checks of employees.
13-10-5034Network Operators, Service Providers, Equipment Suppliers, Property Managers, and Public Safety should consider establishing contractual obligations requiring contractors, subcontractors and vendors to conduct background investigations of all personnel who require unescorted access to areas of critical infrastructure or who require access to sensitive information related to critical infrastructure.
13-10-5041Network Operators, Service Providers, Equipment Suppliers, Property Managers, and Public Safety should establish and implement policies and procedures to secure and restrict access to power, environmental, security, and fire protection systems.
13-10-5042Network Operators, Service Providers, Property Managers, and Public Safety should establish and implement policies and procedures to secure and restrict access to fuel supplies.
13-10-5043Network Operators, Service Providers, Equipment Suppliers, Property Managers, and Public Safety should comply with security standards for perimeter lighting.
13-10-5044Network Operators, Service Providers, Equipment Suppliers, Property Managers, and Public Safety should plan and maintain landscaping at facilities to enhance the overall level of building security wherever possible.
13-10-5046Network Operators, Property Managers, and Public Safety should ensure critical infrastructure utility vaults are secured from unauthorized access.
13-10-5057Network Operators, Service Providers, Equipment Suppliers, and Public Safety should consider an enhanced level of emergency response for locations supporting critical functions.
13-10-5058Network Operators, Service Providers, Equipment Suppliers, Property Managers, and Public Safety should ensure that all critical infrastructure facilities, including the security equipment, devices and appliances protecting it, are supported by backup power systems (e.g., batteries, generators, fuel cells).
13-10-5061Equipment Suppliers should consider ergonomics and human-centric factors when designing user interfaces (e.g., hardware labeling, software, documentation).
13-10-5062Network Operators, Service Providers, Equipment Suppliers, and Public Safety should staff critical functions at appropriate levels, considering human factors such as workload and fatigue.
13-10-5066Network Operators, Service Providers, Equipment Suppliers, Property Managers, and Public Safety should ensure that sensitive information pertaining to critical infrastructure is considered proprietary and access is restricted appropriately, both internally and externally.
13-10-5067Network Operators, Service Providers, Equipment Suppliers, and Public Safety should make security an ongoing priority and implement an annual compliance requirement for the completion of a security awareness program.
13-10-5069Property Managers should require all tenants to adhere to the security standards set for colocation sites.

Download matching Best Practices

Next results