Search

By number By text StandardPublic Safety & Disaster

Categories (match all selected)Network Operators Service Providers Equipment Suppliers Property Managers Public Safety Government Cable Internet/Data Satellite Wireless Wireline Access Control Buildings Business Continuity Contractors & Vendors Corporate Ethics Cyber Security Disaster Recovery Documentation Emergency Preparedness Essential Services Facilities-Transport Fire Guard Services Hardware Human Resources Industry Cooperation Information Protection Liaison Materials Movement Network Design Network Elements Network Interoperability Network Operations Network Provisioning Pandemic Physical Security Management Policy Power Procedures Public Safety Service Security Systems Software Supervision Technical Support Training and Awareness Visitors Encryption Intrusion Detection

1098 matching practices

Number	Best Practice
13-8-8696	Network Operators, Service Providers, and Equipment Suppliers should work with their HR departments to consider making acknowledgement and agreement regarding information security a condition of employment.
13-8-8697	Network Operators and Service Providers should consider conducting Social Engineering Audits such as tests for vulnerabilities or unauthorized access to systems, networks and information. Systems range from computer networks to physical access to locations.
13-8-8698	Network Operators and Service Providers should utilize firewall protection on all computing devices. Whenever available for a mobile communications device, firewall software should be installed and utilized.
13-8-8699	Network Operators and Service Providers should develop employee education programs that emphasize the need to comply with policies and the Data Loss Prevention (DLP) program.
13-8-8700	Network Operators and Service Providers should have and enforce disciplinary programs for employees who do not follow Data Loss Prevention (DLP) Guidelines.
13-8-8702	Network Operators and Service Providers should develop a detailed security policy addressing social engineering issues and enforce it throughout the company.
13-8-8707	Network Operators and Service Providers should establish and enforce policy to require users to log off, to use password protected screensavers when away from the computer, enable screenlock upon activity timeout, cautionary instructions on ensuring that no one is watching when you type in logon information, etc. Physical security measures to prevent visitors and outside contractors from accessing systems to place key loggers, etc.
13-8-8708	Network Operators and Service Providers should establish clear guidelines and policy on the corporate use of Social Media outlets. Before utilizing social media in any capacity, stop and consider the motivation of those that you are interacting with or targeting.
13-8-8709	Network Operators and Service Providers should establish policies governing destruction (shredding, incineration, etc.) of paperwork, disks and other media that hold information a hacker could use to breach security.
13-8-8710	Network Operators, Service Providers, and Equipment Suppliers should ensure supply chain security by having security language in their contracts and periodic risk assessments on their 3rd party verifying the outside party's security practices.
13-8-8713	Network Operators, Service Providers should consider when implementing a signaling gateway using media gateway controllers that map gateway responses to SS7 in an anticipated and predictable fashion (e.g., RFC 3398 for SIP-to-SS7 mapping).
13-8-8714	Network Operators and Service Providers should use a minimum interworking subset for encoding standards (e.g., a fallback to G.711) in a PSTN gateway configuration in order to achieve interoperability and support all types of voice band communication (e.g., DTMF tones, facsimile, TTY/TDD).
13-8-8715	Network Operators and Service Providers should establish policies and procedures to limit the distribution of CALEA information, requests, and network documents regarding CALEA interfaces to those operationally involved with CALEA activities.
13-8-8716	Network Operators and Service Providers should establish policies and procedures to periodically conduct risk assessments of CALEA procedures and policies.
13-8-8717	Network Operators and Service Providers should establish policies and procedures to limit access to captured or intercepted CALEA content to those who are authorized.
13-8-8718	Network Operators and Service Providers should establish policies and procedures to promote awareness of appropriate CALEA policies among network employees and equipment vendors.
13-8-8719	Network Operators, Service Providers should consider equipping their networks with network management and congestion controls of they have deployed IS-41 (ANSI-41) or GSM Mobility Application Part (MAP) signaling networks.
13-8-8720	Network Operators should implement rigorous screening and/or filtering on both internal and interconnecting signaling links and establish policies to review and improve screening capabilities.
13-8-8721	Network Operators and Equipment Suppliers should proactively monitor all security issues associated with general purpose computing products and cooperatively identify and apply security fixes, as necessary.
13-8-8723	Network Operators should consider enabling logging for element security related alarms on network elements, (e.g., unauthorized access, unauthorized logins, logging of changes (i.e. configuration and translation), administrative access logging), and establish review policies for these records to mitigate network element authentication vulnerabilities.

Download matching Best Practices

Next results