What is ISO/IEC 27033-6 - Securing wireless IP network access about?
ISO/IEC 27033-6 describes the threats, security requirements, security control and design techniques associated with wireless networks.
ISO/IEC 27033-6 provides guidelines for the selection, implementation and monitoring of the technical controls necessary to provide secure communications using wireless networks.
The information in ISO/IEC 27033-6 is intended to be used when reviewing or selecting technical security architecture/design options that involve the use of the wireless network in accordance with ISO/IEC 27033-2.
Overall, ISO/IEC 27033-6 will aid considerably the comprehensive definition and implementation of security for any organization’s wireless network environment. ISO/IEC 27033-6 is aimed at users and implementers who are responsible for the implementation and maintenance of the technical controls necessary to provide secure wireless networks.
Who is ISO/IEC 27033-6 - Securing wireless IP network access for?
ISO/IEC 27033-6 on Securing wireless IP network access is useful for:
- Wireless network implementation agencies
- Telecommunications and Information technology industry
- Individuals responsible for information security
- Technical persons and networking engineers
- Network managers and network security officers
- Network architects and designers
Why should you use IS ISO/IEC 27033-6 - Securing wireless IP network access?
In today’s world, the majority of both commercial and government organizations have their information systems connected by networks with the network connections being one or more of the following:
- Within the organization
- Between different organizations
- Between the organization and the general public
Further, with the rapid developments in publicly available network technology (in particular with the Internet) offering significant business opportunities, organizations are increasingly conducting electronic business on a global scale and providing online public services. The opportunities include the provision of lower cost data communications, using the Internet simply as a global connection medium, through to more sophisticated services provided by Internet service providers (ISPs). This can mean the use of relatively low cost local attachment points at each end of a circuit to full scale online electronic trading and service delivery systems, using web-based applications and services. Additionally, the new technology (including the integration of data, voice and video) increases the opportunities for remote working (also known as “teleworking” or “telecommuting”) that enable personnel to operate away from their homework base for significant periods of time. They are able to keep in contact through the use of remote facilities to access organization and community networks and related business support information and services.
However, while this environment does facilitate significant business benefits, there are new security risks to be managed. With organizations relying heavily on the use of information and associated networks to conduct their business, the loss of confidentiality, integrity, and availability of information and services could have significant adverse impacts on business operations. Thus, there is a major requirement to properly protect networks and their related information systems and information. In other words, implementing and maintaining adequate network security is absolutely critical to the success of any organization’s business operations.
In this context, the telecommunications and information technology industries are seeking cost-effective comprehensive security solutions, aimed at protecting networks against malicious attacks and inadvertent incorrect actions, and meeting the business requirements for confidentiality, integrity, and availability of information and services. Securing a network is also essential for maintaining the accuracy of billing or usage information, as appropriate. Security capabilities in products are crucial to overall network security (including applications and services).
ISO/IEC 27033-6 is to provide detailed guidance on the security aspects of the management, operation and use of information system networks, and their inter-connections. Those individuals within an organization that are responsible for information security in general, and network security in particular, should be able to adapt the material in this document to meet their specific requirements.
ISO/IEC 27033-6 aims to define the specific risks, design techniques and control issues for securing IP wireless networks.