BS ISO/IEC TR 13335-5:2001

Foreword
Introduction
1. SCOPE
2. REFERENCES
3. DEFINITIONS
4. ABBREVIATIONS
5. STRUCTURE
6. AIM
7. OVERVIEW
    7.1 Background
    7.2 Identification Process
8. REVIEW CORPORATE IT SECURITY POLICY REQUIREMENTS
9. REVIEW NETWORK ARCHITECTURES AND APPLICATIONS
    9.1 Introduction
    9.2 Types of Network
    9.3 Network Protocols
    9.4 Network Applications
    9.5 Other Considerations
10. IDENTIFY TYPES OF NETWORK CONNECTION
11. REVIEW NETWORKING CHARACTERISTICS AND RELATED TRUST
    RELATIONSHIPS
    11.1 Network Characteristics
    11.2 Trust Relationships
12. DETERMINE THE TYPE OF SECURITY RISK
13. IDENTIFY APPROPRIATE POTENTIAL SAFEGUARD AREAS
    13.1 Introduction
    13.2 Secure Operating Procedures
          13.2.1 Introduction
          13.2.2 Security Operating Procedures
          13.2.3 Security Compliance Checking
          13.2.4 Security Conditions For Connection
          13.2.5 Documented Security Conditions for Users
                 of Network Services
          13.2.6 Incident Handling
    13.3 Identification and Authentication
          13.3.1 Introduction
          13.3.2 Remote Log-in
          13.3.3 Authentication Enhancements
          13.3.4 Remote System Identification
          13.3.5 Secure Single Sign-on
    13.4 Audit Trails
    13.5 Intrusion Detection
    13.6 Protection Against Malicious Code
    13.7 Network Security Management
    13.8 Security Gateways
    13.9 Data Confidentiality Over Networks
    13.10 Data Integrity over Networks
    13.11 Non-Repudiation
    13.12 Virtual Private Networks
    13.13 Business Continuity/Disaster Recovery
14. DOCUMENT AND REVIEW SECURITY ARCHITECTURE OPTIONS
15. PREPARE FOR THE ALLOCATION OF SAFEGUARD SELECTION,
    DESIGN, IMPLEMENTATION AND MAINTENANCE
16. SUMMARY
Bibliography

Provides guidance with respect to networks and communications to those responsible for the management of IT security. This guidance supports the identification and analysis of the communications related factors that should be taken into account to establish network security requirements.