There is an ever increasing need to use networks within organizations and between organizations. Requirements have to be met to use networks securely. The area of remote access to a network requires specific measures when IT security should be in place. BS ISO/IEC 18028 provides guidance for accessing networks remotely - either for using email, file transfer or simply working remotely.
This part provides detailed direction with respect to the security aspects of using Virtual Private Network (VPN) connections to inter-connect networks, and also to connect remote users to networks. It builds upon the network management direction provided in BS ISO/IEC 18028-1:2006.
It is aimed at those individuals responsible for the selection and implementation of the technical controls necessary to provide network security when using VPN connections, and for the subsequent network monitoring of VPN security thereafter.
Contents of BS ISO/IEC 18028-5 include
- Scope
- Normative references
- Terms and definitions
- Abbreviated terms
- Overview of VPNs
- VPN security objectives
- VPN security requirements
- Guidelines for the selection of secure VPNs
- Guidelines for the implementation of secure VPNs
- Annex A - Technologies and protocols used to implement VPNs
- Bibliography
