[cabf_netsec] Work-in-Progress 2018-Jan-18

[Dimitris Zacharopoulos]

I re-arranged the proposed changes to be aligned with the existing NSRs,
otherwise the changes would be hard to track for reviewers. I also tried
to merge cases where we required MFA, wherever possible.

Finally, I added two proposed definitions (Air-Gapped Zone,
High-Security Physical Zone) that we have concluded in the Threat
analysis sub-group for your consideration.

I think we have made several changes to the document and all previous
deleted text should be removed for clarity. I recommend creating a DIFF
between the attached version and the current NSRs and continue working
on this "clean" version.


Dimitris.



On 18/1/2018 7:57 μμ, Ben Wilson via Netsec wrote:
>
> Here is the current version of the WIP document. 
>
>  
>
> *Ben Wilson, JD, CISA, CISSP*
>
> VP Compliance
>
> +1 801 701 9678
>
>  
>
>
>
> _______________________________________________
> Netsec mailing list
> Netsec at cabforum.org
> http://cabforum.org/mailman/listinfo/netsec

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://cabforum.org/pipermail/netsec/attachments/20180129/3af87a80/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.jpg
Type: image/jpeg
Size: 6007 bytes
Desc: not available
URL: <http://cabforum.org/pipermail/netsec/attachments/20180129/3af87a80/attachment-0001.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: CABForum_Network_Security_Controls_2nd wave-2018-01-18-DZ.doc
Type: application/msword
Size: 123904 bytes
Desc: not available
URL: <http://cabforum.org/pipermail/netsec/attachments/20180129/3af87a80/attachment-0001.doc>