【正文】 ........................43 防火墻部署方案 ..........................................................................................................45XX 市地稅局信息系 統(tǒng) 安全解決方案 第 3 頁 共 223 頁 防病毒解決方案 ..........................................................................................................46 UTM 部署方案 ............................................................................................................49 VPN 設(shè)計 ........................................................................................................................52 VPN 介紹 ...................................................................................................................52 VPN 設(shè)計 ...................................................................................................................54 VPN 部署方案 ............................................................................................................56 內(nèi)網(wǎng)安全解決方案 ..........................................................................................................58 內(nèi)網(wǎng)管理系統(tǒng) .............................................................................................................58 補(bǔ)丁分發(fā)服務(wù)器 ..........................................................................................................626 系統(tǒng)安全建設(shè)狀況與實施規(guī)劃 ........................................................................63 系統(tǒng)安全建設(shè)狀況 ..........................................................................................................63 實施規(guī)劃 .........................................................................................................................647 附件一：信息安全管理體系框架 ......................................................................66 概述 ................................................................................................................................66 信息安全認(rèn)知 ..................................................................................................................68 概述 ............................................................................................................................68 信息安全認(rèn)知體系框架 ...............................................................................................69 信息安全組織 ..................................................................................................................72 信息安全組織架構(gòu) ......................................................................................................73 信息安全角色與相關(guān)職責(zé) ...........................................................................................79 第三方安全管理 ..........................................................................................................85 信息安全審計監(jiān)督 ..........................................................................................................88XX 市地稅局信息系 統(tǒng) 安全解決方案 第 4 頁 共 223 頁 概述 ............................................................................................................................88 信息安全審計監(jiān)督體系框架 ........................................................................................89 信息安全審計工作開展指導(dǎo)原則 ................................................................................908 附件二：信息安全運行體系框架 ......................................................................92 概述 ................................................................................................................................92 信息安全與業(yè)務(wù)持續(xù)性計劃的關(guān)系 .............................................................................95 信息安全運行流程 ..........................................................................................................96 風(fēng)險評估 ....................................................................................................................96 規(guī)劃實施 ..................................................................................................................108 安全監(jiān)控 ..................................................................................................................116 響應(yīng)恢復(fù) ..................................................................................................................123 信息安全審計 ...........................................................................................................144 信息安全運作管理 ........................................................................................................147 用戶管理 ..................................................................................................................147 資產(chǎn)管理 ..................................................................................................................153 數(shù)據(jù)及文檔安全運作管理 .........................................................................................156 系統(tǒng)安全運作管理 ....................................................................................................161 網(wǎng)絡(luò)安全運作管理 ....................................................................................................171 物理安全運作管理 ....................................................................................................1779 附件三：信息安全技術(shù)體系框架 ....................................................................179 防惡意代碼 ...................................................................................................................179 概述 ..........................................................................................................................179XX 市地稅局信息系 統(tǒng) 安全解決方案 第 5 頁 共 223 頁 防惡意代碼體系框架 ................................................................................................180 指導(dǎo)原則 ..................................................................................................................183 加固 ..............................................................................................................................186 概述 ......