Search

By number By text StandardPublic Safety & Disaster

Categories (match all selected)Network Operators Service Providers Equipment Suppliers Property Managers Public Safety Government Cable Internet/Data Satellite Wireless Wireline Access Control Buildings Business Continuity Contractors & Vendors Corporate Ethics Cyber Security Disaster Recovery Documentation Emergency Preparedness Essential Services Facilities-Transport Fire Guard Services Hardware Human Resources Industry Cooperation Information Protection Liaison Materials Movement Network Design Network Elements Network Interoperability Network Operations Network Provisioning Pandemic Physical Security Management Policy Power Procedures Public Safety Service Security Systems Software Supervision Technical Support Training and Awareness Visitors Encryption Intrusion Detection

1098 matching practices

Number	Best Practice
13-12-5175	Network Operators, Service Providers, Equipment Suppliers and Public Safety should establish a proprietary information protection policy to protect proprietary information in their possession belonging to the company/agency, business partners and customers from inadvertent, improper or unlawful disclosure. The policy should establish procedures for the classification and marking of information; storage, handling, transfer and transmission of information, retention guidelines and disposal/deletion of information.
13-12-5226	Network Operators, Service Providers and Property Managers should maintain liaison with Public Safety and local law enforcement, fire department, other utilities and other security and emergency agencies to ensure effective coordination for emergency response and restoration.
13-12-5241	Network Operators, Service Providers, Equipment Suppliers and Public Safety should consider placing access and facility alarm points to critical or sensitive areas on backup power to ensure access and functionality during periods of power outages.
13-12-5243	Network Operators, Service Providers, Equipment Suppliers and Public Safety should consider restricting, supervising, and/or prohibiting tours of critical network facilities, restoration sites and operations.
13-12-5244	Network Operators, Service Providers, Equipment Suppliers and Public Safety should make all employees, contractors, and others with access to critical infrastructure during restoration, aware of changes to security posture resulting from the incident, and the need for increased vigilance.
13-12-5249	Network Operators, Service Providers and Public Safety should consider geographic separation of network redundancy during restoration, and address losses of redundancy and geographic separation following restoration.
13-12-5260	Network Operators, Service Providers, Equipment Suppliers, Property Managers and Public Safety should provide personnel involved in a restoration any significant changes to access control procedures.
13-12-5269	Network Operators, Service Providers, Equipment Suppliers, Property Managers and Public Safety should incorporate various types of diversionary tactics into exercises to assess the security response.
13-12-5282	Network Operators, Service Providers and Property Managers should coordinate with Property Managers to ensure adequate growth space.
13-12-5284	Network Operators, Service Providers, Equipment Suppliers and Public Safety should develop a communication plan for informing customers (both internal and external) on expected impacts and possible mitigation of impact.
13-12-5285	Network Operators, Service Providers, Equipment Suppliers and Public Safety should establish and implement a policy that calls for the storing of emergency supplies; this could include but is not limited to food, water, sleeping supplies, power equipment to include batteries and other supplies needed to survive an event.
13-12-5286	Network Operators, Service Providers, Equipment Suppliers and Public Safety should establish and implement a policy which establishes a means to verify the status of employees and their families and to provide support as appropriate.
13-12-5287	Network Operators, Service Providers, Equipment Suppliers and Public Safety should establish a procedure governing the accounting of finances needed during events.
13-12-5288	Network Operators, Service Providers, Equipment Suppliers and Public Safety should establish and implement a policy which works with local, regional, state and federal agencies to provide access or letters of access to personnel during emergency events.
13-12-5289	Network Operators, Service Providers, Equipment Suppliers and Public Safety should verify availability of generators, power technicians, and all tools necessary for generator deployment prior to a disaster.
13-12-8001	Network Operators, Service Providers, Equipment Suppliers and Public Safety should use industry-accepted algorithms and key lengths for all uses of encryption, such as 3DES or AES. This applies to Public Safety only in an NG9-1-1 environment.
13-12-8005	Network Operators, Service Providers and Public Safety should implement a continuous engineering process to identify and record single points of failure and any components that are critical to the continuity of the infrastructure. The process should then pursue architectural solutions to mitigate the identified risks as appropriate.
13-12-8007	Network Operators, Service Providers and Public Safety should develop formal written Security Architecture(s) and make the architecture(s) readily accessible to systems administrators and security staff for use during threat response. The Security Architecture(s) should anticipate and be conducive to business continuity plans.
13-12-8011	Network Operators, Service Providers and Public Safety should request products from vendors that meet current industry baseline requirements for Operations, Administration, Management, and Provisioning (OAM&P) security.
13-12-8012	Network Operators, Service Providers and Public Safety should in order to prevent unauthorized users from accessing Operations, Administration, Management, and Provisioning (OAM&P) systems, use strong authentication for all users. To protect against tampering, spoofing, eavesdropping, and session hijacking, Service Providers and Network Operators should use a trusted path for all important OAM&P communications between network elements, management systems, and OAM&P staff. Examples of trusted paths that might adequately protect the OAM&P communications include separate private-line networks, VPNs or encrypted tunnels. Any sensitive OAM&P traffic that is mixed with customer traffic should be encrypted. OAM&P communication via TFTP and Telnet is acceptable if the communication path is secured by the carrier. OAM&P traffic to customer premises equipment should also be via a trusted path.

Download matching Best Practices

Next results