|
+INF.14.A17 Securing Mobile Communications in BACS Networks (S) [Planner] |
INF.14.A17 Securing Mobile Communications in BACS Networks (S) [Planner]If mobile communications are used in the context of BACS, the security mechanisms of the respective mobile networks SHOULD be used for such BACS networks. If public mobile networks such as 5G or Sigfox are used in BACS, uncontrolled direct IP-based communication with BACS-relevant components SHOULD be prevented. BACS components SHOULD only be equipped with a dedicated connection to a public mobile network if this is essential for their operation. For this purpose, the BACS components for which a connection to public mobile networks is necessary SHOULD be checked and determined. If it is not possible to separate BACS networks in the public mobile network (e.g. using slicing in the case of 5G), IP communication SHOULD be decoupled in the communication channel at hand by means of an application layer gateway (ALG). If mobile technologies are used in BACS as part of the public mobile infrastructure of a mobile operator, one or more virtual mobile networks SHOULD be implemented and made exclusively available to the BACS using each respective mobile technology. If autonomous private mobile networks are set up locally on a given campus in BACS using mobile technologies such as LTE and 5G, the transition between these mobile networks and other networks SHOULD be secured by a coupling element with a firewall function. Segmentation into several virtual mobile networks SHOULD be implemented for private mobile networks, as well. 1. Übersicht
1.1 Referenzen1.2 Identifizierte Anforderungen1.3 Zugehörige Regulierungen2. Identifizierte Anforderungen
3. Zugehörige Regulierungen
Verknüpfte Vorgänge
|