Division 4.3.4 Security Management

This service concerns the management of the security items, required by CCN/CSI environment, by the Service Provider.

Security is managed as well on the level of the involved server equipment (OS), network equipment and on operational level.

Information exchanges over the CCN/CSI network are protected to ensure optimal confidentiality and data integrity.

Security services include:

• site-to-site encryption and protection against unwanted accesses enforced by firewall/encryption devices;

• access control mechanisms (authentication, authorisation, accounting) at site level enforced at CCN Gateway and supported by local administration tools (ADM3G);

• session-level security enforced by message-level encryption (CSI secure), SSL mutual authentication and encryption (HTTPS & NJCSI), POP-S and IMAP-S (secure e-mail transport);

• SIAP unified defence mechanism for secured internet access to CCN services.