Search

By number By text StandardPublic Safety & Disaster

Categories (match all selected)Network Operators Service Providers Equipment Suppliers Property Managers Public Safety Government Cable Internet/Data Satellite Wireless Wireline Access Control Buildings Business Continuity Contractors & Vendors Corporate Ethics Cyber Security Disaster Recovery Documentation Emergency Preparedness Essential Services Facilities-Transport Fire Guard Services Hardware Human Resources Industry Cooperation Information Protection Liaison Materials Movement Network Design Network Elements Network Interoperability Network Operations Network Provisioning Pandemic Physical Security Management Policy Power Procedures Public Safety Service Security Systems Software Supervision Technical Support Training and Awareness Visitors Encryption Intrusion Detection

1098 matching practices

Number	Best Practice
13-8-8603	Network Operators and Service Providers should implement applicable industry standards to ensure all devices on the Wireless LAN (WLAN) network enforce network security policy requirements.
13-8-8604	Network Operators should consider installation of a Wireless Intrusion System at all locations to detect the presence of unauthorized wireless systems. At a minimum, routine audits must be undertaken at all sites to identify unauthorized wireless systems.
13-8-8605	Network Operators and Service Providers should minimize wireless signal strength exposure outside of needed coverage area.
13-8-8606	Network Operators should turn off Bluetooth interfaces when not in use and disable Bluetooth's discovery feature, whereby each device announces itself to all nearby devices.
13-8-8607	Network Operators should configure Bluetooth devices to use the lowest power that meets business needs. Class 3 (encrypts all traffic) devices transmit at 1 mW and cannot communicate beyond 10 meters, while class 1 devices transmit at 100 mW to reach up to 100 meters. For best results, use mode 3 to enforce link authentication and encryption for all Bluetooth traffic, and discourage business use of devices that support only mode 1 (no encryption).
13-8-8608	Network Operators should password protect both devices to prevent use of lost/stolen units. If possible, do not permanently store the pairing PIN code on Bluetooth devices.
13-8-8609	Service Providers and Government should promote education for the safe use of all Bluetooth-capable devices and define security policies that impact business.
13-8-8610	Network Operators should pair Bluetooth devices in a private location using a long random PIN code. Avoid default PIN codes, easily guessed PIN codes ("000") and devices that do not support configurable PIN Codes.
13-8-8611	Network Operators should require authentication on both devices. Configure Bluetooth products so that users must accept incoming connection requests.
13-8-8612	Network Operators and Government should scan the airwaves (where possible) inside your business to locate all Bluetooth capable devices. Inventory all discovered devices with Bluetooth interfaces, including hardware model, OS, and version. Perform searches on Bluetooth vulnerability and exposure databases to determine whether the devices are impacts.
13-8-8613	Service Providers should educate their Enterprise customers on the importance of establishing a mobile device security policy to reduce threats without overly restricting usability.
13-8-8614	Network Operators and Service Providers should enforce strong passwords for mobile device access and network access. Automatically lock out access to the mobile device after a predetermined number of incorrect passwords (typically five or more).
13-8-8615	Network Operators and Service Providers should perform a remote wipe (i.e. reset the device back to factory defaults) when an employee mobile device is lost, stolen, sold, or sent to a third party for repair. Organizations need to have a procedure set for users who have lost their devices.
13-8-8616	Network Operators should encrypt local storage (where possible), including internal and external memory.
13-8-8617	Network Operators should enforce the use of virtual private network (VPN) connections between the employee mobile device and enterprise servers.
13-8-8618	Network Operators should perform centralized configuration and software upgrades on mobile handsets "over the air" rather than relying on the user to connect the device to a laptop / PC for local synchronization.
13-8-8619	Network Operators should ensure that mobile applications remove all enterprise information from the device.
13-8-8620	Network Operators and Service Providers should provide a program of employee education that teaches employees about mobile device threats and enterprise mobile device management and security policies.
13-8-8621	Network Operators should limit the installation of unsigned third-party applications to prevent outside parties from requisitioning control of your devices.
13-8-8622	Network Operators should where possible, setup unique firewall policies specifically for traffic coming from smart phones.

Download matching Best Practices

Next results