1.0 Purpose This policy provides for more secure Bluetooth Device ...
Short summary:
sign of a hack attempt. 3.3 Device Security Settings Bluetooth users must act appropriately to protect information, network access, passwords, ...
Long summary:
1.0 Purpose This policy provides for more secure Bluetooth Device operations. It protects the company from loss of Personally Identifiable Information (PII) and proprietary company data. 2.0 Scope This policy covers all Bluetooth Devices. 3.0 Policy 3. 1Version level No Bluetooth Device shall be deployed on equipment that does not meet Bluetooth v2.1 specifications without written authorization from the InfoSec Manager. Any Bluetooth equipment purchased prior to this policy must comply with all parts of this policy except the Bluetooth version specifications. 3.2 Pins and Pairing When pairing your Bluetooth unit to your Bluetooth enabled equipment (i.e. phone, laptop, etc.), ensure that you are not in a public area. If your Bluetooth enabled equipment asks for you to enter your pin after you have initially paired it, you must refuse the pairing request and report it to InfoSec, through your Help Desk, immediately. Unless your Bluetooth device itself has malfunctioned and lost its pin, this is a sign of a hack attempt. 3.3 Device Security Settings All Bluetooth devices shall employ security mode 3 which encrypts traffic in both directions, between your Bluetooth Device and its paired equipment. If your device allows the usage of long PINs, you must use either a 13 alphabetic PIN or a 19 digit PIN (or longer). Switch the Bluetooth device to use the hidden mode, and activate Bluetooth only when it is needed. Update the devices firmware when a new version is available ...
Source: www.sans.org
Search Terms:
Related
Files under this topic are not filed yet. Please use search bar to find other one
