Committed to connecting the world

Advanced Search

Part 5: Security best practices

The following best practices have, so far, been identified for inclusion in this section of the Roadmap. Unless specified otherwise, the links provided direct to the English versions of the documents. However, many of these resources are also available in other languages. To find additional language editions, please visit the websites of the respective organizations.

NOTE: All members are encouraged to share examples of non-proprietary security best practices for inclusion in this section.

General IT security best practices

European Network and Information Security Agency (ENISA):

ISO/IEC JTC1:

IS 27003 Information security management system implementation guidance

Information security forum:

Standard of Good Practice for Information Security

National Institute of Standards and Technology (NIST):

Security awareness

European Network and Information Security Agency (ENISA):

National Institute of Standards and Technology (NIST):

800-50 Building an Information Technology Security Awareness and Training Program

Cybersecurity and networking

European Network and Information Security Agency (ENISA):

ITU-T:

ITU-T X.1500 Cybersecurity information exchange techniques (awaiting publication – please check ITU-T SG 17 list of published standards)

Network Interoperability and Reliability Council:
Focus Groups of the Network Interoperability and Reliability Council have developed recommended best practices in the areas of cyber security, wireless security and public data network reliability. Links to these reports are as follows:

National Institute of Standards and Technology (NIST):

Electronic authentication and personal identification

European Network and Information Security Agency (ENISA):

National Institute of Standards and Technology (NIST):

Electronic signatures

European Telecommunications Standards Institute (ETSI):

TR 102 572: Best Practices for handling electronic signatures and signed data for digital accounting

Email security

National Institue of Standards and Technology (NIST):

800-45 Version 2 Guidelines on Electronic Mail Security

Financial services security

Payment Card Industry:

The Payment Card Industry (PCI) Data Security Standard

Incident management, monitoring and response

European Network and Information Security Agency (ENISA):

National Institute of Standards and Technology (NIST):

Media and end user device security

European Network and Information Security Agency (ENISA):

National Institute of Standards and Technology (NIST):

Mobile device security 

European Network and Information Security Agency (ENISA):

National Institute of Standards and Technology (NIST):

Network security and information exchange

European Network and Information Security Agency (ENISA):

Good practice guide

National Institute of Standards and Technology (NIST):

Planning, testing and security management

National Institute of Standards and Technology (NIST):

Radio frequency identification (RFID) security

National Institute of Standards and Technology (NIST):

800-98 Guidelines for Securing Radio Frequency Identification (RFID) Systems

Risk management

European Network and Information Security Agency (ENISA):

National Institute of Standards and Technology (NIST):

Security metrics

National Institute of Standards and Technology (NIST):

800-55 Security Metrics Guide for Information Technology Systems

Security policy

National Institute of Standards and Technology (NIST):

800-41 Rev. 1 Guidelines on Firewalls and Firewall Policy

Spam, spyware and malicious code

National Institute of Standards and Technology (NIST):

Web security

European Network and Information Agency (ENISA):

Web 2.0 Security and Privacy

National Institute of Standards and Technology (NIST):

Wireless networks

National Institute of Standards and Technology (NIST):

Network interoperability and reliability council:

<< Introduction (Main page) - Part 1 - Part 2 - Part 3 - Part 4 - Part 5 - Part 6 >>