【導(dǎo)讀】安全源自未雨綢繆，誠信貴在風雨同舟

　　

【正文】 acingLinesToPointselectionParagraaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaphFormatLineSpacingLinesToPointsSelectionParagraphFormatLineSpacingLinesTSelectionParbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbagraphFoLineSpacingLinesToPointsSelectionParagraphFormatLineSpacingLinesToPointse11111111111111111111111111111111lectionParagraphFormatLineSpacingLinesToPointsSelectionParagraphFormatLineSpacingLinesToPoctionParagraphFormatLineSpaci2222222222222222222222ngLinesToPoints2SelectionParagraphFormatLineSpacingLinesToPointsSelectionParagraphFormatLineSpacingLinesToPointselectionParagraphFccccccccccccccccccccccccccccccccccccccccccccccccccccccccormatLineSpacingLinesToPointsSelectionParagraphFormatLineSpacingLinesToPoctionParagra 安全源自未雨綢繆，誠信貴在風雨同舟 SelectionParagraphFormatLineSpacingLinesToPointsSelectionParagraphFormatLineSpacingLinesToPointselectionParagraaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaphFormatLineSpacingLinesToPointsSelectionParagraphFormatLineSpacingLinesTSelectionParbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbagraphFoLineSpacingLinesToPointsSelectionParagraphFormatLineSpacingLinesToPointse11111111111111111111111111111111lectionParagraphFormatLineSpacingLinesToPointsSelectionParagraphFormatLineSpacingLinesToPoctionParagraphFormatLineSpaci2222222222222222222222ngLinesToPoints2SelectionParagraphFormatLineSpacingLinesToPointsSelectionParagraphFormatLineSpacingLinesToPointselectionParagraphFccccccccccccccccccccccccccccccccccccccccccccccccccccccccormatLineSpacingLinesToPointsSelectionParagraphFormatLineSpacingLinesToPoctionParagra 6 第 3 章 評估理 論、方法及模型 .......................................... 135 相關(guān)標準與規(guī)范 ............................................... 135 評估咨詢項目的標準性原則 ................................... 135 方案中標準的體 現(xiàn)對照 ...................................... 135 相關(guān)標準規(guī)范介紹 .......................................... 137 COSO報告《內(nèi)部控制整體框架》與 ERM《企業(yè)風險管理一整體框架》 ......... 137 COBIT《信息及相關(guān)技術(shù)的控制目標》 ................................ 139 ITIL《 IT 基礎(chǔ)架構(gòu)庫》 .......................................... 141 ISO27001《信息安全管理規(guī)范》 .................................... 143 銀監(jiān)會 63號文《銀行業(yè)金融機構(gòu)信息系統(tǒng)風險管理指引》 ................. 145 Cobit、 ISO17799與 63號文控制目標對應(yīng)表 ........................... 146 安全風險評估策略 ............................................. 160 風險管理原則 ............................................. 160 建模策略 ................................................ 160 信息安全管理 ............................................. 161 標準遵循 ................................................ 161 安全風險評估理論模型 .......................................... 161 安全風險過程模型 .......................................... 161 安全風險關(guān)系模型 .......................................... 164 安全風險計算模型 .......................................... 164 安全風險管理過程模型 ...................................... 166 第 4 章 風險評估 .................................................... 168 資產(chǎn)管理評估 ................................................. 168 資產(chǎn)分類調(diào)查 ............................................. 168 資產(chǎn)安全管理 ............................................. 169 威脅評估 .................................................... 170 安全隱患分析 ............................................. 170 網(wǎng)絡(luò)架構(gòu)威脅分析 .......................................... 171 弱點與漏洞評估 ............................................... 172 大規(guī)模漏洞檢測評估 ........................................ 172 滲透性測試 ............................................... 172 控制臺人工審計 ........................................... 173 網(wǎng)絡(luò)架構(gòu)評估 ................................................. 174 網(wǎng)絡(luò)性能與業(yè)務(wù)負載分析 ..................................... 174 訪問控制策略與措施分析 ..................................... 175 網(wǎng)絡(luò)設(shè)備策略與配置評估 ..................................... 176 安全設(shè)備策略與配置評估 ..................................... 176 安全控制評估 ................................................. 177 安全管理評估 ................................................. 178 安全管理體系評估 .......................................... 178 常規(guī)安全管理 ............................................. 179 應(yīng)急安全管理 ............................................. 179 業(yè)務(wù)與應(yīng)用評估 ............................................... 180 SelectionParagraphFormatLineSpacingLinesToPointsSelectionParagraphFormatLineSpacingLinesToPointselectionParagraaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaphFormatLineSpacingLinesToPointsSelectionParagraphFormatLineSpacingLinesTSelectionParbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbagraphFoLineSpacingLinesToPointsSelectionParagraphFormatLineSpacingLinesToPointse11111111111111111111111111111111lectionParagraphFormatLineSpacingLinesToPointsSelectionParagraphFormatLineSpacingLinesToPoctionParagraphFormatLineSpaci2222222222222222222222ngLinesToPoints2SelectionParagraphFormatLineSpacingLinesToPointsSelectionParagraphFormatLineSpacingLinesToPointselectionParagraphFccccccccccccccccccccccccccccccccccccccccccccccccccccccccormatLineSpacingLinesToPointsSelectionParagraphFormatLineSpacingLinesToPoctionParagra 安全源自未雨綢繆，誠信貴在風雨同舟 SelectionParagraphFormatLineSpacingLinesToPointsSelectionParagraphFormatLineSpacingLinesToPointselectionParagraaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaphFormatLineSpacingLinesToPointsSelectionParagraphFormatLineSpacingLinesTSelectionParbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbagraphFoLineSpacingLinesToPointsSelectionParagraphFormatLineSpacingLinesToPointse11111111111111111111111111111111lectionParagraphFormatLineSpacingLinesToPointsSelectionParagraphFormatLineSpacingLinesToPoctionParagraphFormatLineSpaci2222222222222222222222ngLinesToPoints2SelectionParagraphFormatLineSpacingLinesToPointsSelectionParagraphFormatLineSpacingLinesToPointselectionParagraphFccccccccccccccccccccccccccccccccccccccccccccccccccccccccormatLineSpacingLinesToPointsSelectionParagraphFormatLineSpacingLinesToPoctionParagra 7 業(yè)務(wù)流程分析 ............................................. 180 應(yīng)用服務(wù)與應(yīng)用系