Security of Devices Beyond Scope of Control: Service Providers should carefully consider possible impacts on their networks from changes in the configuration or authentication information on devices beyond the service demarcation point, 8-8-8134 Cyber Security Important X X X X X X X X X X and thus beyond their physical or logical scope of control. Service Providers should consider network filters or network authentication to protect against malicious traffic or theft of service caused by such insecure devices. Protect Network/Management Infrastructure from Unexpected File System Changes: Service Providers and Network Operators should deploy tools to detect unexpected changes to 8-8-8136 file systems on Network Elements and Management Security Important X X X X X X X X X X X Infrastructure systems where feasible and establish procedures for reacting to changes. Use techniques such as cryptographic hashes. Post-Mortem Review of Security Architecture after Recovery: Immediately following incident recovery, Service Providers and Network Operators should re-evaluate the adequacy of existing security architecture and implement revisions as 8-8-8508 Cyber Security Important X X X X X X X X X needed. Ensure any changes are adequately documented to reflect the current configuration. Review existing processes for establishing and maintaining security architectures update as necessary to maintain currency.
8-8-8134 Security of Devices Beyond Scope of Control: Service Providers should carefully consider possible impacts on their networks from changes in the configuration or authentication information on devices beyond the service demarcation point, and thus beyond their physical or logical scope of control. Service Providers should consider network filters or network authentication to protect against malicious traffic or theft of service caused by such insecure devices. Cyber Security Important X X X X X X X X X X 8-8-8136 Protect Network/Management Infrastructure from Unexpected File System Changes: Service Providers and Network Operators should deploy tools to detect unexpected changes to file systems on Network Elements and Management Infrastructure systems where feasible and establish procedures for reacting to changes. Use techniques such as cryptographic hashes. Security Important X X X X X X X X X X X 8-8-8508 Post-Mortem Review of Security Architecture after Recovery: Immediately following incident recovery, Service Providers and Network Operators should re-evaluate the adequacy of existing security architecture and implement revisions as needed. Ensure any changes are adequately documented to reflect the current configuration. Review existing processes for establishing and maintaining security architectures update as necessary to maintain currency. Cyber Security Important X X X X X X X X X
CSRIC%20III%20Report%20WG8%20June%202012.docx