【正文】 .................................................. 10 系統(tǒng)差距分析 ................................................................................. 10 安全需求 ................................................................................................... 13 信息安全管理需求 ......................................................................... 13 信息安全運(yùn)維需求 ......................................................................... 16 分域保護(hù)安全需求 ......................................................................... 16 信息安全技術(shù)需求 ......................................................................... 17 3 方案設(shè)計(jì)思路 ...................................................................................................... 20 安全整改整 體思想 ................................................................................... 20 安全保障體系設(shè)計(jì) ................................................................................... 22 設(shè)計(jì)依據(jù) ......................................................................................... 22 體系模型 ......................................................................................... 30 體系目標(biāo) ......................................................................................... 31 4 安全整改方案設(shè)計(jì) .............................................................................................. 33 安全管理體系整改設(shè)計(jì) ........................................................................... 33 安全管理機(jī)構(gòu)建設(shè) ......................................................................... 33 安全管理制度建設(shè) ......................................................................... 36 安全教育培訓(xùn)和體系宣貫 ............................................................. 39 安全管理體系審核 ......................................................................... 40 安全技術(shù)體系整改設(shè)計(jì) ........................................................................... 40 分域保護(hù)框架整改 ......................................................................... 44 安全通信網(wǎng)絡(luò)整改 ......................................................................... 51 安全計(jì)算環(huán)境整改 ......................................................................... 54 安全區(qū)域邊界整改 ......................................................................... 63 安全管理整改 ................................................................................. 67 安全運(yùn)維體系整改設(shè)計(jì) ........................................................................... 69 安全運(yùn)維服務(wù)目的 ......................................................................... 69 XX 醫(yī)院 等級(jí)保護(hù) 安全 整改 方案 第 III 頁(yè) 共 103 頁(yè) 安全運(yùn)維服務(wù)內(nèi)容 ......................................................................... 69 物理和環(huán)境安全 ....................................................................................... 80 機(jī)房管理 ......................................................................................... 80 視頻監(jiān)控 ......................................................................................... 81 設(shè)備和介質(zhì) ..................................................................................... 81 防盜竊 ............................................................................................. 81 通信線路 ......................................................................................... 81 5 安全整改計(jì)劃建議 .............................................................................................. 82 基礎(chǔ)安全加固階段 ................................................................................... 82 物理安全 ......................................................................................... 82 網(wǎng)絡(luò)安全 ......................................................................................... 82 主機(jī)安全 ......................................................................................... 86 應(yīng)用安全 ......................................................................................... 88 數(shù)據(jù)安 全 ......................................................................................... 88 安全管理組織 ................................................................................. 88 人員安全管理 ................................................................................. 90 產(chǎn)品選型 ......................................................................................... 90 安全技術(shù)體系建立階段 ........................................................................... 90 物理安全 ......................................................................................... 90 網(wǎng)絡(luò)安全 ......................................................................................... 90 主機(jī)安全 ......................................................................................... 94 應(yīng)用安全 ......................................................................................... 95 數(shù)據(jù)安全 ......................................................................................... 96 安全管理制度 ................................................................................. 97 系統(tǒng)安全建設(shè) ................................................................................. 97 系統(tǒng)安全運(yùn)維 ................................................................................. 97 產(chǎn)品選型 ......................................................................................... 98 安全體系運(yùn)行完善階段 ........................................................................... 98 網(wǎng)絡(luò)安全 ......................................................................................... 98 主機(jī)安全 ......................................................................................... 99 應(yīng)用安全 ......................................................................................... 99 安全管理 ......................................................................................... 99 產(chǎn)品選型 ......................................................................................... 99 第 1 頁(yè) 1 項(xiàng)目概述 項(xiàng)目背景 根據(jù)衛(wèi)生部制定的《衛(wèi)生行業(yè)信息安全等級(jí)保護(hù)工作的指導(dǎo)意見》、上海市《衛(wèi)生部關(guān)于印發(fā)衛(wèi)生行業(yè)信息安全等級(jí)保護(hù)工作的指導(dǎo)意見的通知》【滬衛(wèi)辦〔 2020〕 5