Foreword
Introduction
1 Scope
1.1 Audience
1.2 Business Case
2 Normative references
3 Terms and definitions
4 Symbols and abbreviated terms
5 Wireless Risks
5.1 Introduction
5.2 Applicable Risks
5.2.1 Physical Topology
5.2.2 Access Control - Least Privilege
5.2.3 Encryption
5.2.4 Network Integrity
5.2.5 Wireless Transmission
5.2.6 Unauthorized Wireless Access Devices
5.2.7 Denial of Service (DoS)
5.2.8 Data Integrity
6 Requirements
6.1 Overview
6.2 Wireless Security Policy
6.3 Data Security
6.4 Entity Authentication
6.5 Data Integrity
6.6 Security Encapsulation
6.7 Key Management
6.8 Wireless Network
6.9 Audit Logging
6.10 Physical Security
6.11 Access Control
7 Wireless Security Policy
7.1 Roles and Responsibilities
7.2 Security Controls
7.3 Technology Controls
7.4 Access Controls
7.5 Configuration Controls
7.6 Cryptograph Controls
7.7 Physical Controls
7.8 Log Management
Annex A (normative) Wireless Validation Control Objectives
A.1 Introduction
A.2 Environmental Controls
A.2.1 Security Policy
A.2.2 Security Organization
A.2.3 Asset Classification and Management
A.2.4 Personnel Security
A.2.5 Physical and Environmental Security
A.2.6 Operations Management
A.2.7 System Access Management
A.2.8 Systems Development and Maintenance
A.2.9 Wireless Access Continuity Management
A.2.10 Monitoring and Compliance
A.2.11 Event Journaling
A.3 Key Management Life Cycle Controls
A.3.1 Key Generation
A.3.2 Key Storage, Backup and Recover
A.3.3 Key Distribution
A.3.4 Key Usage
A.3.5 Key Destruction and Archival
A.3.6 Cryptographic Device Life Cycle Controls
A.4 Wireless Management Life Cycle Controls
A.4.1 Wireless Device Life Cycle
A.4.2 Wireless Encryption
A.4.3 Wireless Authentication
A.4.4 Wireless Integrity
A.4.5 Wireless Encapsulation
Annex B (Normative) Wireless Cryptograph Controls
Annex C (Informative) Wireless Technology Standards
Wireless Local Area Networks
C.1 Broadband Wireless
C.2 Bluetooth
C.2.1 Architecture
C.2.2 Client ID
C.2.3 Client Provisioning
C.2.4 External Functional Interface (EFI)
C.2.5 General formats
C.2.6 Multimedia Messaging Service (MMS)
C.2.7 Persistence
C.2.8 Pictogram
C.2.9 Push
C.2.10 Synchronisation
C.2.11 User Agent Profile (UAProf)
C.2.12 Wireless Application Environment
C.2.13 Wireless Protocols
C.2.14 Wireless Security
C.2.15 Wireless Telephony Application (WTA)
C.3 Voice and Messaging
Annex D (Informative) X9 Registry
Annex E (Informative) OCC Risk Management of Wireless Networks
Bibliography