|
Work item:
|
X.sup-grm
|
|
Subject/title:
|
Supplement to ITU-T X.1055
Risk management implementation guidance on the assets of telecommunication organizations accessible by global IP-based networks
|
|
Status:
|
[Carried to next study period]
|
|
Approval process:
|
Agreement
|
|
Type of work item:
|
Supplement
|
|
Version:
|
New
|
|
Equivalent number:
|
-
|
|
Timing:
|
-
|
|
Liaison:
|
None
|
|
Supporting members:
|
Alibaba China, China Mobile, China Unicom, ETRI.
|
|
Summary:
|
As telecommunication organizations' assets are accessible by global IP-based networks, they are exposed directly to hackers and attackers, and also as these assets may be connected to the traditional (and even old) assets of legacy telecommunication networks, which might have some design level vulnerabilities that could be hard to fix. Therefore, it would be an economic choice to consider all the assets of a telecommunication organization as a whole and introduce some specific security measures to reduce the overall risks continuously so as to strengthen the whole security of telecommunication services and networks. It is suggested that the assets accessible by global IP-based networks would have high priority to adopt these proposed measures, which might be also applicable to other assets.
This Supplement to ITU-T X.1055 provides the analysis of threats and challenges for such assets accessible by global IP-based networks and provides best practices and guidance for the implementation of security measures in the risk management processes on the assets accessible by global IP-based networks for telecommunication organizations.
|
|
Comment:
|
-
|
|
Reference(s):
|
|
|
Historic references:
|
|
Contact(s):
|
|
| ITU-T A.5 justification(s): |
|
|
|
|
First registration in the WP:
2016-09-12 14:37:02
|
|
Last update:
2016-09-12 14:47:38
|
