IOMG Technical Standard: Network
- Network designs, documentation and supporting information from partners will be available to IoMG at all times and maintained to a high standard with any design changes or network alterations reflected in the documentation in a timely fashion.
- Network services must be designed and updated to relevant best practices.
- Network segregation will be used where applicable to secure Island infrastructure which will be determined by the GTS network and security team.
- Where appropriate lateral communications must be limited.
- Guest WiFi must be segregated.
- Access between areas will be through a firewall where it must be logged and retained for auditing.
- Publicly accessible locations network access must be secured through use of appropriate measures.
- Access to restricted networks and shared areas must be secured through use of appropriate measures.
- Authentication Authorisation Accounting (AAA) best practices must be used and logged with retention for auditing and available to GTS Network and Security Team.
- Change control must be used for all changes with the exception of LAN, which should be used for changes affecting multiple users.
- Retrospective change control is acceptable for break fix work categorised as priority 1 service disruption
- An auditable change log must be maintained with a minimum history of five changes. Access to the change audit logs is required by GTS
- Should GTS have any security or performance concerns about any of the staff with access to the WAN equipment; the Contractor will ensure these staff are denied access to the WAN equipment or services upon written request from GTS.
- Isle Of Man Government requires Contractors to undertake a full security and past convictions check on all staff with unaccompanied access to systems and equipment, via an independent agency (UK SC security clearance).
- Access to WAN equipment must be fully controlled, and equipment must be housed within secure facilities and access logs kept for any person gaining access.
- Isle of Man Government reserves the right to Audit the Contractor's processes at any time, and may attend any of the Contractor's sites where service is carried out and request immediate access without any prior notification.
- GTS Network and Security team will be permitted appropriate access to network devices.
- GTS shall be provided with appropriate access which shall include;
- Real time statistical performance details
- configuration of each item of managed equipment
- SSH access to CLI with appropriate authorisation level