Search

By number By text StandardPublic Safety & Disaster

Categories (match all selected)Network Operators Service Providers Equipment Suppliers Property Managers Public Safety Government Cable Internet/Data Satellite Wireless Wireline Access Control Buildings Business Continuity Contractors & Vendors Corporate Ethics Cyber Security Disaster Recovery Documentation Emergency Preparedness Essential Services Facilities-Transport Fire Guard Services Hardware Human Resources Industry Cooperation Information Protection Liaison Materials Movement Network Design Network Elements Network Interoperability Network Operations Network Provisioning Pandemic Physical Security Management Policy Power Procedures Public Safety Service Security Systems Software Supervision Technical Support Training and Awareness Visitors Encryption Intrusion Detection

1098 matching practices

Number	Best Practice
13-6-8023	Network Operators and Service Providers should regularly scan infrastructure for vulnerabilities/exploitable conditions. Operators should understand the operating systems and applications deployed on their network and keep abreast of vulnerabilities, exploits, and patches.
13-6-8028	Network Operators, Service Providers, and Equipment Suppliers should consider, when using an encryption technology in the securing of network equipment and transmission facilities, cryptographic keys must be distributed using a secure protocol that: a) Ensures the authenticity of the recipient, b) Does not depend upon secure transmission facilities, and c) Cannot be emulated by a non-trusted source.
13-6-8059	Network Operators and Service Providers should encourage the use of IPsec VPN, wireless TLS, or other end-to-end encryption services over the cellular/wireless network. Also, Network Operators should incorporate standards-based data encryption services and ensure that such encryption services are enabled for end users. (Data encryption services are cellular/wireless technology specific).
13-6-8078	Network Operators, Service Providers, and Equipment Suppliers should not send user IDs and passwords in the clear, or send passwords and user IDs in the same message/packet.
13-6-8093	Service Providers should validate the source address of all traffic sent from the customer for which they provide Internet access service and block any traffic that does not comply with expected source addresses. Service Providers typically assign customers addresses from their own address space, or if the customer has their own address space, the service provider can ask for these address ranges at provisioning. (Network Operators may not be able to comply with this practice on links to upstream/downstream providers or peering links, since the valid source address space is not known).
13-7-0408	Network Operators, Service Providers should where feasible, implement RFC 3704 (IETF BCP84) ingress filtering.
13-7-0410	Network Operators, Service Providers should as appropriate, review, understand, and implement "Internet Service Provider Security Services and Procedures" (RFC3013/BCP46).
13-7-0426	Equipment Suppliers should use software change control to manage changes to source material used in the production of their products.
13-7-0433	Equipment Suppliers should support, clearly define and document environmental variables in Management Information Bases (MIB).
13-7-0439	Network Operators and Service Providers should authenticate BGP sessions (e.g., using TCP MD5) with their own customers and other providers.
13-7-0441	Network Operators, Service Providers should where feasible, implement Unicast RPF (Reverse Path Forwarding) to help minimize DOS attacks that use source address spoofing.
13-7-0485	Network Operators should optimize cell sites, including relationships between neighboring cells, using a combination of drive testing and network statistics.
13-7-0515	Network Operators, Service Providers should for easy communication with subscribers and other operators and providers, use specific role-based accounts (e.g., abuse@provider.net, ip-request@provider.net) versus general accounts (e.g., noc@provider.net) which will help improve organizational response time and also reduce the impact of Spam.
13-7-0516	Network Operators and Service Providers should manage the volatility of route advertisements in order to maintain stable IP service and transport. Procedures and systems to manage and control route flapping at the network edge should be implemented.
13-7-0520	Network Operators and Service Providers should have a route policy that is available, as appropriate. A consistent route policy facilitates network stability and inter-network troubleshooting.
13-7-0538	Equipment Suppliers should ensure their network element (including OSS) software is backward compatible.
13-7-0539	Equipment Suppliers should share trend information (availability, etc.) with their Network Operators and Service Providers.
13-7-0549	Network Operators should develop an engineering design for critical network elements and inter-office facilities that addresses diversity, and utilize management systems to provision, track and maintain that inter-office and intra- office diversity.
13-7-0555	Equipment Suppliers should continually enhance their software development methodology to ensure effectiveness by employing modern processes of assessment.
13-7-0562	Equipment Suppliers should use a change control and release planning process to keep track of the changes to the product and the corresponding documentation.

Download matching Best Practices

Next results