【正文】 ...................................................................................................58 內(nèi)網(wǎng)管理系統(tǒng) .............................................................................................................58 補丁分發(fā)服務(wù)器 ..........................................................................................................626 系統(tǒng)安全建設(shè)狀況與實施規(guī)劃 ........................................................................63 系統(tǒng)安全建設(shè)狀況 ..........................................................................................................63 實施規(guī)劃 .........................................................................................................................647 附件一：信息安全管理體系框架 ......................................................................66 概述 ................................................................................................................................66 信息安全認(rèn)知 ..................................................................................................................68 概述 ............................................................................................................................68 信息安全認(rèn)知體系框架 ...............................................................................................69 信息安全組織 ..................................................................................................................72 信息安全組織架構(gòu) ......................................................................................................73 信息安全角色與相關(guān)職責(zé) ...........................................................................................79 第三方安全管理 ..........................................................................................................85 信息安全審計監(jiān)督 ..........................................................................................................88 概述 ............................................................................................................................88市地稅局信息系 統(tǒng) 安全解決方案 信息安全審計監(jiān)督體系框架 ........................................................................................89 信息安全審計工作開展指導(dǎo)原則 ................................................................................908 附件二：信息安全運行體系框架 ......................................................................92 概述 ................................................................................................................................92 信息安全與業(yè)務(wù)持續(xù)性計劃的關(guān)系 .............................................................................95 信息安全運行流程 ..........................................................................................................96 風(fēng)險評估 ....................................................................................................................96 規(guī)劃實施 ..................................................................................................................108 安全監(jiān)控 ..................................................................................................................116 響應(yīng)恢復(fù) ..................................................................................................................123 信息安全審計 ...........................................................................................................144 信息安全運作管理 ........................................................................................................147 用戶管理 ..................................................................................................................147 資產(chǎn)管理 ..................................................................................................................153 數(shù)據(jù)及文檔安全運作管理 .........................................................................................156 系統(tǒng)安全運作管理 ....................................................................................................161 網(wǎng)絡(luò)安全運作管理 ....................................................................................................171 物理安全運作管理 ....................................................................................................1779 附件三：信息安全技術(shù)體系框架 ....................................................................179 防惡意代碼 ...................................................................................................................179 概述 ..........................................................................................................................179 防惡意代碼體系框架 ................................................................................................180市地稅局信息系 統(tǒng) 安全解決方案 指導(dǎo)原則 ..................................................................................................................183 加固 ..............................................................................................................................186 概述 ..........................................................................................................................186 加固框架 ..................................................................................................................186 指導(dǎo)原則 ..................................................................................................................202 監(jiān)控與審核跟蹤 ............................................................................................................203 監(jiān)控服務(wù) ..................................................................................................................203 審核跟蹤 ..................................................................................................................207 備份恢復(fù) .......................................................................................................................217 概述 ..........................................................................................................................217 備份恢復(fù)技術(shù)框架 ....................................................................................................217 指導(dǎo)原則 .......