Level 2 specification

NR/L2/TEL/30182

Security of Telecoms Digital Systems

Clause map — what each clause deals with

1	Purpose	Security controls required to protect NR Telecom IP networks and systems
2	Scope	Minimum security requirements for configuring, managing and monitoring NRT networks
3	Roles and responsibilities	Roles — asset owner, system administrator
4	Definitions	Definitions — ACL and so on
5	Transmission of safety related information	Safety-related information over IP — points to 30067
6	Compliance with Network Rail information security policies	Compliance with NR information security policies
7	PACE Process	PACE process compliance
8	Secure network and system design	Secure network and system design patterns
9	Network Rail Telecom IP network device security hardening	Device security hardening — approved configurations
10	System security testing	Security testing
11	Network Management	Network management on-boarding, RBAC, traffic patterns, extra controls, out-of-band management
12	Vulnerability and Patch Management	Vulnerability and patch management
13	Change Management	Change management
14	Security Monitoring and Audit logs	Security monitoring and audit logs
15	Remote Connectivity	Remote connectivity rules
16	Managed Services	Managed services available
17	Code of Connection	Code of connection for third-party networks