【正文】 XX醫(yī)院 等級(jí)保護(hù) 安全 整改 方案 目 錄 目 錄 .............................................................................................................................. II 1 項(xiàng)目概述 .................................................................................................................1 項(xiàng)目背景 ......................................................................................................1 項(xiàng)目目的 ......................................................................................................1 參考標(biāo)準(zhǔn) ......................................................................................................2 2 現(xiàn)狀及安全需求分析 .............................................................................................3 現(xiàn)狀描述 ......................................................................................................3 業(yè)務(wù)系統(tǒng)現(xiàn)狀 ....................................................................................3 基礎(chǔ)設(shè)施現(xiàn)狀 ....................................................................................5 安全技術(shù)現(xiàn)狀 ....................................................................................7 安全管理現(xiàn)狀 ....................................................................................8 差距分析 ................................................................................................... 10 系統(tǒng)定級(jí)情況 ................................................................................. 10 系統(tǒng)差距分析 ................................................................................. 10 安全需求 ................................................................................................... 13 信息安全管理需求 ......................................................................... 13 信息安全運(yùn)維需求 ......................................................................... 16 分域保護(hù)安全需求 ......................................................................... 16 信息安全技術(shù)需求 ......................................................................... 17 3 方案設(shè)計(jì)思路 ...................................................................................................... 20 安全整改整 體思想 ................................................................................... 20 安全保障體系設(shè)計(jì) ................................................................................... 22 設(shè)計(jì)依據(jù) ......................................................................................... 22 體系模型 ......................................................................................... 30 體系目標(biāo) ......................................................................................... 31 4 安全整改方案設(shè)計(jì) .............................................................................................. 33 安全管理體系整改設(shè)計(jì) ........................................................................... 33 安全管理機(jī)構(gòu)建設(shè) ......................................................................... 33 安全管理制度建設(shè) ......................................................................... 36 安全教育培訓(xùn)和體系宣貫 ............................................................. 39 安全管理體系審核 ......................................................................... 40 安全技術(shù)體系整改設(shè)計(jì) ........................................................................... 40 分域保護(hù)框架整改 ......................................................................... 44 安全通信網(wǎng)絡(luò)整改 ......................................................................... 51 安全計(jì)算環(huán)境整改 ......................................................................... 54 安全區(qū)域邊界整改 ......................................................................... 63 安全管理整改 ................................................................................. 67 安全運(yùn)維體系整改設(shè)計(jì) ........................................................................... 69 安全運(yùn)維服務(wù)目的 ......................................................................... 69 XX 醫(yī)院 等級(jí)保護(hù) 安全 整改 方案 第 III 頁 共 103 頁 安全運(yùn)維服務(wù)內(nèi)容 ......................................................................... 69 物理和環(huán)境安全 ....................................................................................... 80 機(jī)房管理 ......................................................................................... 80 視頻監(jiān)控 ......................................................................................... 81 設(shè)備和介質(zhì) ..................................................................................... 81 防盜竊 ............................................................................................. 81 通信線路 ......................................................................................... 81 5 安全整改計(jì)劃建議 .............................................................................................. 82 基礎(chǔ)安全加固階段 ................................................................................... 82 物理安全 ......................................................................................... 82 網(wǎng)絡(luò)安全 ......................................................................................... 82 主機(jī)安全 ......................................................................................... 86 應(yīng)用安全 ......................................................................................... 88 數(shù)據(jù)安 全 ......................................................................................... 88 安全管理組織 ................................................................................. 88 人員安全管理 ................................................................................. 90 產(chǎn)品選型 ......................................................................................... 90 安全技術(shù)體系建立階段 ........................................................................... 90 物理安全 ....................................