Search

By number By text StandardPublic Safety & Disaster

Categories (match all selected)

Network Operators Service Providers Equipment Suppliers Property Managers Public Safety Government Cable Internet/Data Satellite Wireless Wireline Access Control Buildings Business Continuity Contractors & Vendors Corporate Ethics Cyber Security Disaster Recovery Documentation Emergency Preparedness Essential Services Facilities-Transport Fire Guard Services Hardware Human Resources Industry Cooperation Information Protection Liaison Materials Movement Network Design Network Elements Network Interoperability Network Operations Network Provisioning Pandemic Physical Security Management Policy Power Procedures Public Safety Service Security Systems Software Supervision Technical Support Training and Awareness Visitors Encryption Intrusion Detection

Search Best Practices

1098 matching practices

Number	Best Practice
13-13-8940	Network Operators, Public Safety and Government should search server file systems for unusual files or scripts.
13-13-8941	Network Operators, Public Safety and Government should detect malicious use of legitimate credentials.
13-13-8942	Public Safety, Government should scan all emails, attachments, and downloads (both on the host and at the mail gateway) with a reputable anti-virus solution that includes cloud reputation services.
13-13-8943	Public Safety, Government should segment any critical networks or control systems from administrative systems and networks.
13-13-8944	Public Safety, Government should ensure that network administrators use non-privileged accounts for email and internet access.
13-13-8945	Public Safety, Government should periodically conduct searches of publicly available information to ensure no sensitive information has been disclosed.
13-13-8946	Public Safety, Government should provide cyber hygiene training to staff that includes informing end users on proper email and web usage, highlighting current information and analysis, and including common indicators of phishing.
13-13-8947	Network Operators, Service Providers, Equipment Suppliers, Public Safety and Government should implement the “least-privilege-principle” for security in all public safety systems; meaning, provide access only to those resources that an individual should have access to.
13-13-8948	Network Operators, Service Providers, Public Safety and Government should log, monitor, and audit all employee electronic activity.
13-13-8949	Equipment Suppliers, Public Safety and Government should support effective end point security and use resilient end points that don’t provide access to common tools typically used by hackers to encrypt files on an end point.
13-13-8950	Network Operators, Service Providers, Equipment Suppliers, Public Safety and Government should maximize insider threat awareness among employees, including training about personal vulnerabilities, being engineered to become an insider threat, and detecting insider threats in their businesses.
13-13-8951	Public Safety, Government should implement and follow a recognized cybersecurity controls framework that includes evaluating where they fall along a given method’s maturity continuity, which cyber controls they have already implemented, and which are the highest priority to implement first.
13-13-8952	Network Operators, Service Providers, Public Safety and Government should patch hosts as patches become available, on the system.
13-13-8953	Public Safety, Government should disallow emergency services work on untrusted personal devices, unless there are defenses in place.
13-13-8954	Public Safety, Government should disallow personal use of official emergency services devices in untrusted networks (e.g., Starbucks), unless there are endpoint defenses in place.
13-13-8955	Network Operators, Service Providers, Public Safety and Government should provide a well-architected, segmented network.
13-13-8956	Network Operators, Public Safety and Government should conduct a periodic review of US-CERT, and similar security sites for up-to-date cybersecurity prevention tips.
13-13-8957	Network Operators, Public Safety and Government should be prepared to initiate alternate treatment of 9-1-1 calls that meet specific criteria when requested to do so by Public Safety agencies that are experiencing a TDoS or other type of attack.
13-13-8958	Network Operators, Public Safety and Government should ensure that they have access to the phone number and direct contact information for the network operator’s personnel or division that is equipped to respond to Public Safety TDoS attacks.
13-13-8959	Public Safety, Government should log all available information associated with calls that are associated with a DDoS or TDoS attack and share that information with emergency communications centers, other PSAPs/Public Safety Agencies, government IT departments, and any related government agency with a vested interest in emergency communications continuity of operation.

Download matching Best Practices

Next results