scope:

It is the intention of this standard to use and align with the relevant ITU-T Recommendation.

This alignment effort consists of adopting ITU-T Recommendation M.3410, Guidelines and Requirements for Security Management Systems to Support Telecommunications Management, to replace the previously published ATIS-0300074.2006.

M.3410 specifies the functional requirements of a security management system (SMS) that offers a centralized view for control and security oversight of a Telecommunications Service Provider's infrastructure. Because different administrations and organizations require varying levels of security support, M.3410 does not specify whether a requirement is mandatory or optional. The proforma found in Annex A of M.3410 is provided to assist administrations and other national/international organizations to specify the mandatory and optional support of the requirements. The proforma is specified using the numbered requirements form M.3410.

Table A.1/M.3410 contains the requirements from M.3410. According to M.3410, the user (of M.3410) should complete the other columns according to the guidelines provided. TMOC (as the user of M.3410) has completed this table (proforma) as shown in Annex A of this standard.