【正文】 .................. 12 . SSECMM ..................................................................................................................................... 12 . ISO/IEC 15408(GB/T18336)..................................................................................................... 13 . ISO/IEC 13335 ............................................................................................................................ 13 . 其他相關(guān)標(biāo)準(zhǔn) ............................................................................................................................. 14 . 組織安全策略 .................................................................................................................................... 14 . 相關(guān)法規(guī)和政策 ......................................................................................................................... 14 . 行業(yè)管理規(guī)范 ............................................................................................................................. 15 四 . 資產(chǎn)調(diào)查與賦值 ......................................................................................................................................... 15 . 需求調(diào)查 ............................................................................................................................................. 15 . 調(diào)查對(duì)象 ...................................................................................................................................... 16 . 調(diào)查方式 ...................................................................................................................................... 17 . 調(diào)查內(nèi)容 ...................................................................................................................................... 17 . 資產(chǎn)賦值 ............................................................................................................................................. 18 5 / 92 . 基本概念 ...................................................................................................................................... 18 . 信息資產(chǎn)分類 ............................................................................................................................. 19 . 信息資產(chǎn)賦值 ............................................................................................................................. 22 五 . 安全類別Ⅱ級(jí)評(píng)估內(nèi)容 ........................................................................................................................... 24 . 安全技術(shù)評(píng)估 .................................................................................................................................... 24 . 物理安全 ...................................................................................................................................... 25 . 網(wǎng)絡(luò)安全 ...................................................................................................................................... 26 . 節(jié)點(diǎn)安全 ...................................................................................................................................... 28 . 應(yīng)用與數(shù)據(jù)安全 ......................................................................................................................... 30 . 安全管理評(píng)估 .................................................................................................................................... 31 . 政策與制度 .................................................................................................................................. 31 . 機(jī)構(gòu)與人員 .................................................................................................................................. 34 . 安全風(fēng)險(xiǎn)管理 ............................................................................................................................. 37 . 工程建設(shè)管理 ............................................................................................................................. 43 . 運(yùn)行與維護(hù)管理 ......................................................................................................................... 48 . 業(yè)務(wù)連續(xù)性管理 ......................................................................................................................... 59 . 其他管理要求 ............................................................................................................................. 63 六 . 掃描評(píng)估方案 ............................................................................................................................................. 65 . 目標(biāo) ..................................................................................................................................................... 65 . 地點(diǎn) ..................................................................................................................................................... 65 . 時(shí)間 ..................................................................................................................................................... 65 . 參與人員 ............................................................................................................................................. 65 . 范圍 ..................................................................................................................................................... 65 . 網(wǎng)絡(luò)設(shè)備 ...................................................................................................................................... 65 . 應(yīng)用系統(tǒng) ...................................................................................................................................... 66 . 評(píng)估方法 ............................................................................................................................................. 66 . 工具選擇 ............................................................................................................................................. 66 . 漏洞掃描工具 .........................