信息安全管理成為信息安全保障的熱點(diǎn)(編輯修改稿)
2025-03-08 14:03 本頁(yè)面
【文章內(nèi)容簡(jiǎn)介】 licySecurity anisationAsset classification controlPersonnel securityPhysical environmental securityCommunications operations managementAccess controlSystems development maintenanceBusiness continuityCompliance2023 versionSecurity policyOrganising information securityAsset managementHuman resources securityPhysical environmental securityCommunications operations managementAccess controlInformation systems acquisition, development and maintenance Business continuity managementComplianceInformation security incident managementnew versionISMS StandardsRevision of ISO/IEC 17799:2023Satisfy requirementControl (plus supporting text)Staterequirement2023 editionControl ObjectiveControl Implementation guidance Other information Revised editionControl Objective新老版本變化ISO/IEC 17799new editionISO/IEC 17799old edition9 old controls deleted16 new controls added118 controls remaining老版本 : 包含 10個(gè)控制要項(xiàng)， 36 個(gè)控制目標(biāo)， 127 個(gè)控制措施新版本 : 11個(gè) 39個(gè) 134個(gè)風(fēng)險(xiǎn)評(píng)估如何貫穿于安全管理BS 77992:2023設(shè)計(jì) ISMSImplement and use the ISMSMonitoring and review the ISMSImprove and update the ISMS計(jì)劃DOCHECKACTISMS定義 ISMS 的執(zhí)行范圍和政策執(zhí)行風(fēng)險(xiǎn)評(píng)估對(duì)風(fēng)險(xiǎn)評(píng)估處理作出決定 選擇控制ISMS StandardsBS 77992:2023Design the ISMS執(zhí)行和使用 ISMSMonitoring and review the ISMSImprove and update the ISMSPLAN行動(dòng)CHECKACTISMS執(zhí)行風(fēng)險(xiǎn)評(píng)估處理計(jì)劃執(zhí)行控制執(zhí)行意識(shí) /培訓(xùn)將 ISMS 放到 操作使用中ISMS StandardsBS 77992:2023Design the ISMSImplement and use the ISMS監(jiān)控和檢查ISMSImprove and update the ISMSPLANDO檢查ACTISMS執(zhí)行監(jiān)控進(jìn)程執(zhí)行定期檢查 檢查剩余風(fēng)險(xiǎn)和可接受的風(fēng)險(xiǎn)內(nèi)部審計(jì)ISMS StandardsBS 77992:2023Design the ISMSImplement and use the ISMSMonitoring and review the ISMS改進(jìn)和升級(jí)ISMSPLANDOCHECKACTISMS實(shí)現(xiàn)改進(jìn)矯正性和預(yù)防性的活動(dòng)傳達(dá)結(jié)果 檢查改進(jìn)達(dá)到的目標(biāo)ISMS AssetsBusiness processesInformation PeopleServicesICTPhysical locationApplications asset directoryAssetsCorporate imagePeopleInformation/information systems ProcessesProducts/servicesApplicationsICTPhysicalISO/IEC 17799 Inventory of assetsISMS RisksAsset threats vulnerabilitiesAsset value utility asset directoryAssetsCorporate imagePeopleInformation/information systems Processes
教學(xué)課件相關(guān)推薦
鄂ICP備17016276號(hào)-1