87-01-95 Security in Value-Added Networks

Businesses that rely on a value-added network to provide information processing and communications services are only as secure as the network itself. The customer should understand the types of processing and control services provided by such vendors, and the potential exposures that use of these networks can entail. This article describes the control issues that must be addressed, the controls required to ensure adequate security, and an approach for assessing the security of value-added networks. The article also discusses the pros and cons of using service auditor reports to assist in evaluating the adequacy of controls.