【正文】 ....................................................................................35 基本原則 ....................................................................................................................35 安全域設(shè)計(jì)方案 ..............................................................................................................38 安全域安全需求分析 ..................................................................................................39 安全域安全措施 ..........................................................................................................41 邊界防護(hù)解決方案 ..........................................................................................................43 邊界防護(hù)設(shè)計(jì)原則 ......................................................................................................43 防火墻部署方案 ..........................................................................................................45 防病毒解決方案 ..........................................................................................................46市地稅局信息系 統(tǒng) 安全解決方案 UTM 部署方案 ............................................................................................................49 VPN 設(shè)計(jì) ........................................................................................................................52 VPN 介紹 ...................................................................................................................52 VPN 設(shè)計(jì) ...................................................................................................................54 VPN 部署方案 ............................................................................................................56 內(nèi)網(wǎng)安全解決方案 ..........................................................................................................58 內(nèi)網(wǎng)管理系統(tǒng) .............................................................................................................58 補(bǔ)丁分發(fā)服務(wù)器 ..........................................................................................................626 系統(tǒng)安全建設(shè)狀況與實(shí)施規(guī)劃 ........................................................................63 系統(tǒng)安全建設(shè)狀況 ..........................................................................................................63 實(shí)施規(guī)劃 .........................................................................................................................647 附件一：信息安全管理體系框架 ......................................................................66 概述 ................................................................................................................................66 信息安全認(rèn)知 ..................................................................................................................68 概述 ............................................................................................................................68 信息安全認(rèn)知體系框架 ...............................................................................................69 信息安全組織 ..................................................................................................................72 信息安全組織架構(gòu) ......................................................................................................73 信息安全角色與相關(guān)職責(zé) ...........................................................................................79 第三方安全管理 ..........................................................................................................85 信息安全審計(jì)監(jiān)督 ..........................................................................................................88 概述 ............................................................................................................................88市地稅局信息系 統(tǒng) 安全解決方案 信息安全審計(jì)監(jiān)督體系框架 ........................................................................................89 信息安全審計(jì)工作開(kāi)展指導(dǎo)原則 ................................................................................908 附件二：信息安全運(yùn)行體系框架 ......................................................................92 概述 ................................................................................................................................92 信息安全與業(yè)務(wù)持續(xù)性計(jì)劃的關(guān)系 .............................................................................95 信息安全運(yùn)行流程 ..........................................................................................................96 風(fēng)險(xiǎn)評(píng)估 ....................................................................................................................96 規(guī)劃實(shí)施 ..................................................................................................................108 安全監(jiān)控 ..................................................................................................................116 響應(yīng)恢復(fù) ..................................................................................................................123 信息安全審計(jì) ...........................................................................................................144 信息安全運(yùn)作管理 ........................................................................................................147 用戶管理 ..................................................................................................................147 資產(chǎn)管理 ..................................................................................................................153 數(shù)據(jù)及文檔安全運(yùn)作管理 .........................................................................................156 系統(tǒng)安全運(yùn)作管理 ....................................................................................................161 網(wǎng)絡(luò)安全運(yùn)作管理 ....................................................................................................171 物理安全運(yùn)作管理 ....................................................................................................1779 附件三：信息安全技術(shù)體系框架 ....................................................................179 防惡意代碼 ...........................................................................