20160809 GAP-y 1.2.5.xx f Auu Dum Ifmb Gm 9-u-16 V 1.2.5 R m BIG m Nm um T p GAP-y Impm BIG A GAP-y D um I u mx m BIG m bp GAP-y m km fmbp m. Cpy 2016 Kwuu N Gm (KING). A bu. Vu, p buk z u z m z u m bm m. V mmë w bj mm m um bkjk, f ukk, p buk w: 1. KING w b m. 2. um u m mm ëxp w. 3. pub f fm w u m bj kk bu, bj wp bpk p KING. 4. kp um, f, zj z z pf m m. R jw KING z bwu wjk z buwb mjk u z. Nm k KING pkjk u z u km ju, f. KING k pkjk buk u f u u f p. Wjz V: 1.1, Dum: 17-06-2014 Ek p bk p u. Tku p km "". V 1.2, Dum: 07-10-2014 Kmm GAP-y: m, u, j p. M m b k m m GAP y pm pkk. D kmm m u zj b u, w m zf m u km j. V 1.2.1, Dum: 27-10-2014 Fu f k wj, ujk wjz V 1.2.2, Dum: 3-11-2014 Fu fk wj. V 1.2.3, k, ujk wjz, pub. V 1.2.4, Dum: 29-07-2015 I j b m BIG 1.01 V 1.2.5, Dum: 9-8-2016 GBA BRP P 1 f 20
20160809 GAP-y 1.2.5.xx j GAP-y m p b B Ifmb N Gm ( 1.2.5) Op : Dum : Gm DEEL 1 (GAP-Ay) DEEL 2 (ImpAy) BIG Numm GM 5.1.1.1 B[A] E b fmb C Bum Wu, pub b p b z, k bjfp wjz wjk p. 5.1.2.1 B[A] H fmbb w mm éé k p j, f z z bjk wjz, b z 6.1.1.1 B[A] H C B&W wb fmb w, k z um zj ï p. D bu éé k p j pz, b wk Ifmbm kbpk B&W. k 6.1.2.1 C[A] D CISO (Cf Ifm Suy Off), jmm zj b. ö. D CISO pp k m. b. D CISO b b m, z pp u, f m.b.. b m m w f, u ukm mpm.q. p p p b fmb m. V I pub fmbb p b BIG zj wjk p b b bm? I fmbb fp 3 j p, z w? I pz, b wk m fp j f j bpk b B&W? Zj CISO f uy Off jmm b m bkk fmb zj pp pm? Awz Vp / pmk E Su Au W? Gp? Gk/ PIOFAH pfk /w p Gk IBF 2014 bk N z Gk IBF bk N z Gk IBF bk N z Gk IBF/P&O bk N z 6.1.3.1 V[A] Ek jm wjk b Zj wjk w bf Gk IBF/P&O bk N z zj f. fmb jm b? 6.1.4.1 GE kup uw IT z I wjzb p (bj ICT) k wkjk Gk I&A bk N z wjz IT z. ( ITIL m : wjzb) buk w, b b p? 6.1.5.1 G[A] D m mup mb I b m muk k Gk P&O bk N z Ambw. 125, 3. (bjb fmbb um 6.1.6.1 C[A] H jmm wk w I buk w w u Gk B&W bk N z m u (bw, zu, z.) w m u? u. 6.1.7.1 CIB-pfk fm xpp, I pf p w fmb pfk Gk IBF bk N z w, fw w buk m fm w buk, bjb f fmb b. fm IBD (z jk) f fw? Zj mpp? 6.1.7.2 C[A] D CISO u m IBD m zk I CISO? W u z u z Gk IBF bk N z IBD-. m IBD? 6.1.8.1 B[A] H fmbb w mm éé k Bjk u IB b m z Gk IBF bk N z j ëu ( fkjk ku) w ëu bj? I pm PDCA-yu? 6.1.8.2 B[A] Pk bu w u p W pk b u u f Gk IBF bk N z jmm. x u f p jmm? Bjk u buk pp m w 6.1.8.3 BO fu fmb w, fm Gk IBF bk N z (bjb fmbb f P&C-yu b) P&C-yu, jjk pp jmm. bjk u pp fmb w pp? 6.2.1.1 IIfmb b (p b fw) Bjk u IB b m f f pfk I&A / bk N z mw bj bu x pj w f p b fw b x pj ff k. () w f k? 6.2.1.2 IVf fu ub f Zj x mjk ym pfk I&A / bk N z x uu bp wk (fyk, wk f m bb m ym b m zj ff ) x pj() m() bb m fpk mk (f), zj ' k b km p u wk w pu f? zkjk bm zj. 6.2.1.3 IVf fu ub f Zj x mjk ym, f pfk I&A / bk N z x uu bp wk w fm uu, w m k k km m ff (bj. k II Wbp f uwjkk) f p f (b) m bb m wm pj k k km f bj ym b m zj fpk mk u u bm zj. (f) w pu f? b bm? f 6.2.1.4 IVf fu ub Z b, zj "bu", Gk IBF bk N z x uu bp u u fpk mk ym w f? w. 6.2.1.5 I[A] I x pj ym b w W ym m m p x pfk ff bk? N z p wk w, w, z j, ujk k bwkkm (fm Wbp k 14) f. bwkkm? Vu k bjb 5 ym zj x w m 1 ym bwk km ) f P 2 f 20
20160809 GAP-y 1.2.5.xx j BIG Numm GM 6.2.1.6 IE m x pj wk bm zj, z x pj zj ff w f b mjk w pp. (z k 6.2.3.3). Ok w b bm ub pj zj (bj. u p) fz. 6.2.1.7 IO fpk x pj w jjk pp. 6.2.2.1 BA zkjk b w p b fw ïmpm buk fm p bjfm w. 6.2.3.1 BD m b bj 6.2.1 zj f fu f ïmpm. 6.2.3.2 BUb (wkk p) fw fm w.. u m, kwp, bp, pkjk, w w w. 6.2.3.3 BI m x pj m m m wjz z w b w wjz. 6.2.3.4 BI m x pj w m m mu muk. 6.2.3.5 BE p bë uu w w b bkb, uwjk. 6.2.3.6 BI m x pj pkjk zj. 6.2.3.7 BA buk mk w m zf b. D fm wjk b bj m mk fpk. 6.2.3.8 BD pu, bj w, pp pj w, w b p km fpk km. Vb w ï w fpk u w p. 7.1.1.1 IE u bjfm b w, z fm(zm), fw, w,, m u k/. V k m w, bmu wjk jm bk. 7.1.2.1 EV k bjfp, pp, zm ICT- wjk jm bm. f 7.1.3.1 A[A] E zj pb buk bjfm (m m, -m mb ppuu). D CAR-UWO p mb z u. V x p. 7.1.3.2 AGbuk bb k. 7.1.3.3 AAppuu, fm pmmuu m z mm f w mm. D mm k k w k fufpk u m mwk. 7.1.3.4 A[A] Ifm w u buk uwjk fm bkb k km b p. 7.2.1.1 R[A] D f ubj p. 7.2.1.2 RI mm m Wbp, zj b (k 16 Wbp) b p. V I /f bwkkm wk bm zj (bjb m u z b), f p b y b w pp, m w z? Zj jjk pp fpk, u u u x pj? Dz b b w u k w, b ym zj fw? D m 6.2.1., zj f f ïmpm, bjk bjb u u. E b m pm u zj bm fpk ub fw wkk ( k SAAS / Cu u). D p ub (wkk p fw) m k z fw bj m. Gk/ PIOFAH pfk /w p pfk ff pfk pfk pfk Aff ff ff Awz Vp / pmk E Su Au W? Gp? bk bk bk bk N z N z N z N z k Ikp bk N z k ff C p. k ff C p. k ff C p. pfk ff C p. k ff C p. k ff I u bjfm b w z, fm(zm), fw, w,, m u k/? V k m w, bmu wjk jm bk. I k bjfp, pp, zm ICTf wjk jm bm? Zj pb buk bjfm (m m, -m mb ppuu). Bjb b fmbb f p? I bwuw uu m w, w k? I b f fpk w w m bu ppuu f fm f pmmuu m w mm A w buk uwjk fm zj m m m fm p b z bm. (zk b, ICT pu.) E zj ubj b m? (Dz ku bb f p ubb um). I u b b p? bk bk bk bk bk bk N z N z N z N z N z N z Gk I&A bk N z Gk I&A bk N z Gk I&A bk N z Gk IBF bk N z Gk I&A/IBF bk N z Gk I&A bk N z Gk IBF bk N z pfk ff bk N z P 3 f 20
20160809 GAP-y 1.2.5.xx j BIG Numm GM 7.2.2.1 L[A] D jm f m ff m km -u k ku m ub bfm. 7.2.2.2 L[A] D p fm ub b z p fm. D u bfm ub. 8.1.1.1 RD k wjk mwk zj pm fubj w u. I fubj w mm b : u fmpbb bm bjfm pp b xp m wjk b p 8.1.1.2 R[A] A mb uu mwk kj bj u u wjk z fmb z. D fjk u z fmb, wk zj bj u u bb, w p mkkjk kjk p z. Okm f mk u m x pj. Ok kjk u. 8.1.1.3 R[A] I mwk p wjk f... fmb m (f bj fuwjz), bj ku bf f bj fu, b ujk mk. 8.1.1.4 RD m w b mwk b wzj wjk z b. H b mwk bk zj m u wjk p b b. 8.1.2.1 S[A] V mwk (mb x mwk) mm Vk Om G (VOG). I uwfu bf w k zk (Vk G Bzw) u. 8.1.2.2 SBj w mwk f k zj b f. 8.1.2.3 S[A] H zkjk m VOG f pk f. 8.1.3.1 AA u u p b wkm, uu p x buk m w b k u b, w u wjk z fmb b zj. 8.2.1.1 DH jmm f wkk ïmpm m bj p k mmb uu p ( k bjf p b IB uf) ku bkk. 8.2.1.2 DH jmm b mmb, uu p (w p) x buk ym m bp p u km b. 8.2.2.1 ba mwk w m mk p bb bpu w, z u fu. u 8.2.2.2 b[a] Bpk wp fmb fu- bpkk mwk fu wbk u 8.2.3.1 D[A] E p p mwk buk mk p bb (z k: CAR/UWO 16, p ff). 8.3.1.1 BV mb mb f bf wk p k bë b f bj ëfuwjz k bj. V uu p (zw bjf f u) u. I w muk k. V Dk bj z m b, my, buw / fm,. B ub pu b w z k buk. Zj fubj b m fubj m p. B " " pu w mb uu mwk bj u u wjk, z fmb, z kj? Okm f mk u m x pj. Ok kjk u. I p b fubj f wkzm ujk mk wk wjk z fmb mwk, bj ku bf f? B b wzj wjk z b? Zj mwk m bk? Zj mwk VOG? I uwfu VGB. M p m. I pu p b w f Gk/ PIOFAH pfk /w p pfk P f / Awz Vp / pmk E Su Au W? Gp? bk N z Gk IBF bk N z Gk P&O bk N z Gk P&O bk N z Gk P&O bk N z Gk P&O bk N z Gk P&O bk N z Gk P&O bk N z z 8.1.2.1 bjk u m? Gk P&O bk N z b p Gk P&O bk N z Dz k b u: B, pp, p, uu, uu. D b k bu, p, bwuw mp, p myy u bzk (bjb). D b k bu buk, p, bwuw mp, p myy u bzk (bjb). wjz f pu w km bjb k? Gk P&O bk N z Gk P&O bk N z Gk IBF bk N z Gk P&O bk N z Z HR-b m? Gk P&O bk N z C f z uu b Gk P&O bk N z P 4 f 20
20160809 GAP-y 1.2.5.xx j BIG Numm GM 8.3.1.2 BH jmm f pu bë b, f km w mm ë b w kk, m bjfm wk p k bë b bj. 8.3.1.3 BH jmm f pu fu b, w mm b ëw kk m bjfm m zj bë u fu. 8.3.2.1 RRu bjfm: Z 8.3.1.3 (8.3.1.3. H jmm f pu fu b, w mm b w kk 8.3.3.1 BBkk : Z 8.3.1.3 (8.3.1.3. H jmm f pu fu b, w mm k b w kk 9.1.1.1 FD m m w yz. Dz z b u:.z 0: m buw b.z 1: wum pkkm.z 2: wkum k.z 3: ICT-um / b um bjb pp p. 9.1.1.2 FV z (b f bu buw) zj ujk ybz bp. 9.1.1.3 FGbuw b w (bp p b yfw) bj w z bk ICT m. 9.1.1.4 F[A] E zj p pkk zm mkpp yp, m m b wum pkkm um w bzk km m m mb. 9.1.1.5 FE 24 uu, 7 p wk bwk; bkm kpp y m mmum. 9.1.1.6 F[A] V uu bwk f f zj y wjk W Pu B Rbuu. Dz f w mm jjk. 9.1.1.7 FI buw m um u bp z yp. H w bju. 9.1.1.8 F[A] V p um b, yw z p p u wkzm k w. (bjb B, B ) 9.1.2.1 FT buw f bz mjk yu. 9.1.2.2 F[A] D bz b zj yfm mjk b. 9.1.2.3 FI buw m b z u bp yz p. H w bju. 9.1.2.4 FD kw m (u, u,, yp) fm p z. 9.1.2.5 FD uf m w. y 9.1.2.6 FN u m w pb yb pbm. 9.1.2.7 FAppuu bkb kbum pum y zf... b z w mpuum. 9.1.2.8 F[A] E mm éé k p f j pk y/u p p u fyk. 9.1.3.1 BPp um mb uwjk fm b w b p, zj uwjk fm p mb u. V Gk/ PIOFAH pfk /w C f z pu pu b. Gk P&O / jm C fu pu z pu. Gk P&O / jm Gk P&O / jm Gk P&O / jm p Awz Vp / pmk E Su Au W? Gp? bk bk bk bk N z N z N z N z C zb m. Gk Hu bk N z C f bz bp zj. Gk Hu bk N z C f buw w b (bjb kumk, uwk ). Zj bj pubkb f p w pubk w mkpp p? Gk Hu bk N z Gk Hu bk N z C fpk f z. Gk Hu bk N z C /pu. Gk Hu bk N z Zj um? Hu bp z p? I pu? W b bj bjk u pu? I buw bz mjk u? W w? I mjk b w bz b? Zj b z? Hu bp z p? I pu? V wk m kw m fm p z? I m uf (p u)? Zj u m b pbm pb? Zj kbum? Hu bp z p? I pu? W u fjjk? I? W pp um mb m uwjk fm b p? Gk Hu / I&A bk N z Gk Hu bk N z Gk Hu bk N z Gk Hu bk N z Gk Hu bk N z Gk Hu bk N z Gk Hu bk N z Gk Hu bk N z Gk I&A bk N z Gk Hu bk N z pfk P f / bk N z P 5 f 20
20160809 GAP-y 1.2.5.xx j BIG Numm GM 9.1.3.2 S[A] E f b kuz m pu wjz mb m up, b p ub fm. u 9.1.3.3 [A] Sum, kpp bkbym zj j m b p. E b z b p Tmmu Ifuu S f D C (TIA-942) f NEN-m NPR 5313 f Eup m NEN-EN 50600 9.1.4.1 BBj m k u m pfk b z p f. 9.1.4.2 BR ppuu bkup zj p z f b éé zf m k z zw f bkup/ m kjk zj. 9.1.4.3 B[A] B um w z bjfk ppuu b zj b w. 9.1.4.4 B[A] Bj bkk uw buw w kz wbj k w u m k p uump m zk mp. 9.1.4.5 BGjk f bb m zj p z f b um p m m z m f p b um. 9.1.4.6 B[A] E bw ku u k bbuppuu p. D w jjk. 9.1.5.1 WMwk zf u zj m b b p ujk zk kj fyk b um w ICT kz zj p f w m uwjk fm w wk. 9.1.5.2 WB um (z um f ku) w z p b zj f w m. k 9.1.5.3 WZ xp mm m b b um pm (f, f u) w mk. k 9.1.6.1 O[A] E b pu m m ppkk b pkm - um. 9.2.1.1 PAppuu w p fm f. D mm mpuu u,, pb pb. 9.2.1.2 PS u ppuu w wjz bjb ww w wjz bj bukm ppuu. 9.2.1.3 PGbuw zj b bkm. 9.2.1.4 PE k b mpuum. 9.2.1.5 P[A] Appuu j b ku km bj wk fm. I mjk w ym buk fmwk w w. 9.2.2.1 NAppuu b w bm mu u bk uz. 9.2.3.1 BV- mmukb k f u fm w buk, b p f b w bm fm m NEN 1010. 9.2.4.1 O[A] Rp u ppuu (w) p p b p, zj p pp wz f kjk. 9.2.5.1 BA ppuu bu w b m fyk bm z m z zj p b fw. V E fm b pu b kuz wjz mb, m up b ub fm Zj um, bkbym b p z TIA-942? Zj m buk? I bj m k u m pfk b z buw f? I bkup pu w k bkup ff bw w? W z pu f? Zj um m bjfk ppuu b w? Dk m buw f bjb w f um p m bjfk ppuu. I bj bkk buw kz wbj k u m k p uump m zk mp? Zj b um bb f jk m p? Bjb pkkm f jk ff? I u k bbu ppuu? W z bbu ppuu jjk? I p b b pu fyk b um u p? B um f zj w m zj w m, bjk u pu? Bjk u pp? I b w b b um pm m w mk? S ujk? Awz Vp / pmk E Su Au W? Gp? Gk/ PIOFAH pfk /w p Gk Hu bk N z Gk I&A bk N z Gk Hu bk N z Gk I&A bk N z Gk I&A bk N z Gk Hu bk N z Gk Hu bk N z Gk Hu bk N z Gk Hu bk N z Gk Hu bk N z Gk Hu bk N z I pu m m p/pkk? Gk Hu bk N z C z mjk f ppuu fm f p. - Tmpuu - u - - pb - pb C f pu p ww. C f f p ww. Zj m m bkm, z j wk? B b pu mpuum b p k? W wuw? I BIG w zj ym b k wk m uwjk. I fm wk w f ym buk w. W pum bm ppuu UPS ym z mu pkm? Zj - mmukb bm fm NEN 1010? W u ppuu m p m bu? I pu u ppuu bu w buu? I ppuu bu p b fw fyk bm bb? Zj m ïmpm? Gk I&A bk N z Gk I&A/IBF bk N z Gk I&A bk N z Gk I&A bk N z Gk I&A bk N z Gk I&A bk N z Gk I&A bk N z Gk I&A bk N z Gk Hu bk N z P 6 f 20
20160809 GAP-y 1.2.5.xx j BIG Numm GM 9.2.6.1 V[A] Bj bë buk f bj f w pp fm bj b. D b z w f z p pp wz f kjk. A k w pp f fm fyk. H f f w p bjf. 9.2.6.2 V[A] Hbuk ppuu bu fm wj m m. E m Su E pp u. I w w k m, éé k m m w f f j uk. V W fm bj bë buk f f bj ICT? I pu w f ICT m? I pu wj ppuu? I f / ppuu? I pu wj ppuu w z wk? Awz Vp / pmk E Su Au W? Gp? Gk/ PIOFAH pfk /w p Gk I&A bk N z Gk I&A bk N z 9.2.7.1 VAppuu, fm pmmuu m z mm f w mm. w 10.1.1.1 GBpu b fm p, fu, bk-up-, f fu, b, p, pu p m b. u m 10.1.1.2 GE zj pu b m p, p, ub, bpk, z, buk. 10.1.2.1 WI pu wjzb mm b : j m f wjz z mpy mjk wjz kupu wjz 10.1.2.2 W[A] I fmbfu (bjb uy fw) p kppk u uw juw wk, w um p wjz z. 10.1.3.1 FNm f p m p u u u bb m yu k fmym b. D b m j f zj zzf f m b f b. D zw fmwk b. 10.1.3.2 F[A] E u bk bukk. ubwkzm w u w b, m bukk w buk. 10.1.3.3 F[A] Vóó wk kk ufm f kk fm ym ku w z w p ïp p. V p w bju. 10.1.3.4 F[A] Vwjk b, wjz ubjb fmymfu, m u wz zj éé pfk (b). 10.1.4.1 E zj mm ym Owkk, T /f Ap Pu (OTAP). D ym pp z z bï ym pp z. 10.1.4.2 Gbuk bb bukpf Owkk, T /f Ap Puym m fu m. H m ujk zb zj wk ym wk w. I pu mm ppuu, fm Gk I&A bk N z f pmmuu. I w mm m m ppuu, pmmuu f m m? Zj bpu : Gk I&A bk N z - p - fu - bk-up - f fu - b - p - pu p m b? Zj pu b m Gk I&A bk N z p, p, ub, bpk, z, buk. I wjzb pu? Gk I&A bk N z W b m pu? W fmbfu (b.. uy Gk I&A bk N z fw) p kppk u uw uw wk, um p wjz? I k u b ym buk Gk I&A bk N z ym? Bjb: p ub b f kumm ub k k ub bj ku zj. A b, b ku w bkup mk f b b, m pp zf. I k u bk bukk, m Gk I&A bk N z u? W wk kk pfk I&A bk N z fm f kk fm ym ku p u w p? E w bju? Zj wjk b, wjz Gk I&A bk N z bjb fmymfu u wz éé pfk (b)? Zj mm ym Owkk, T Gk I&A bk N z /f Ap Pu (OTAP)? (D ym pp z z bï ym pp z.) Hbb buk bukpf Owkk, Gk I&A bk N z T /f Ap Puym? W ym w p / m wk ym wk w? 10.1.4.3 [A] I xpm f bum m, z fyk pum. I xpm f bum m? A xpm f bum m, z fyk pu m? Gk I&A bk N z 10.2.1.1 DD ub pj bjf wjk buwb ub. 10.2.1.2 DUb ku fmym wjk jm. 10.2.2.1 CE w fpk mk u pp, z m ub. 10.2.2.2 CD buwb w m. D k bjb m u f pp bu mm p j ( ym). Zj ub IT ym? I wjk ub pj? Hf wjk m ub fmym ku? I ku? Zj fpk mk u pp, z m ub? I buwb jjk w m m u / f pp? Zj bwjz m pp/u? Gk I&A bk N z pfk I&A bk N z Gk I&A bk N z pfk ff bk N z P 7 f 20
20160809 GAP-y 1.2.5.xx j BIG Numm GM 10.2.2.3 CE zj b pj u pkpu. V Zj x pkpu/ bk? Gk/ PIOFAH pfk /w p pfk ff k / I&A Awz Vp / pmk E Su Au W? Gp? bk N z 10.2.3.1 BZ 10.1.2 Bj ub fmym: I wjzb pu? W b m pu: m f wjz mpy mjk wjz kupu wjz Spfk ff bk N z 10.3.1.1 C[A] D ICT-z V ICT z pfk ff bk N z km u bkb. E w km u bkb? k / I&A pz ïmpm m bkb Zj bkb? mp bwk (bjb p wz I pb p? mp m buk mp ). 10.3.1.2 C[A] E w bpk p buk ym I p b, m m u m, w Gk I&A bk N z z buk mppjk m, z buk mppjk m ku p z pk buk (f ym) m z m k f? p u zj f k m bkb ym buk (f ym) k b. 10.3.1.3 C[A] I kpppu m x f uw z w Zj kpppu m uw f x z? Gk I&A bk N z m ff m DDOS (D f S) Zj m m m DDOS p p. H m p p? zj wkp z p, bkb f u mpu. 10.3.2.1 S[A] V p w bju. Zj ym p? pfk ff bk N z y k / I&A 10.3.2.2 SE zj p b. Zj b p ym mm OWASP pfk ff bk N z yd bf mm OWASP f jkw. f jkw? k / I&A Bjk z p buk w u bjb um ym? 10.4.1.1 M[A] Bj p b w z um Zj p ym u ï b Gk I&A bk N z p u, j mw. D up bj p? f fqu, mm éé k p, V up f jk p? um p. 10.4.1.2 M[A] Ikm u -m w p Zj p m ym u ï Gk I&A bk N z u, j mw. D up b bj p? f fqu, mm éé k p, V up f jk p? (um) p. 10.4.1.3 MI k k b fuuu W k fuuu Gk I&A bk N z w bj ku upmmuu u pmmuu buk? p. 10.4.1.4 M[A] E zj m m p u Zj m m p u Gk I&A bk N z m bpk (bj. qu mpm). m? I j, wk m? 10.4.1.5 ME zj uïp m u Zj uïp m u? Gk I&A bk N z w mm m bkup Zj m bkup pmmuu zj b. pmmuu b. 10.4.1.6 MOp mb w u fw p, wbj bj Zj mb buk? Gk I&A bk N z BYOD buk p z zf p. I u fw z mb? I BYOD b m? I b buk p w u fw buk? 10.4.2.1 Mb w u ï m W buk mk ï m m Gk I&A bk N z (bx) m k p ym mb u? (Mb fw u k. D mb w j u m mm ym w wk w u z ym w. p ym, k bjb jp f f m. M bu bw m k k 10.4.2.2 ME buk m x ku k I k x pmm' mb Gk I&A bk N z pmm (bj. bw) mb u. u bkk bjb py? 10.5.1.1 RE zj () pu bk-up y fm Zj bkup y pu f pfk ff bk N z fu wk. fm /f wk? k / I&A Zj z pu k? 10.5.1.2 RBk-upë zj p b Zj p bk-up ë? E Gk I&A bk N z (b, b, z.), mxm p k u m pu? w m k, mxm b bk-up- j. 10.5.1.3 RV bk-up bjfp m w I w u bkup zj Gk I&A bk N z bju, m kp p. D kpë p k u z kz /m p m mxm p b? pkjk f kp. P 8 f 20
20160809 GAP-y 1.2.5.xx j BIG Numm GM 10.5.1.4 RBkup w bw p z kz p pkjk bk- up. 10.5.1.5 RD fyk bkup, zw ymj, z u p z ku ff z bkup. 10.6.1.1 MH wk w m b z, f fu k ku w buwb wk fpk mmum u km. 10.6.1.2 M[A] Guw u uw uw z ujk um w p wz mw. 10.6.1.3 M[A] Bj p uwjk fm uw wk, z, j k yp w p. Z 12.3.1.3. V Zj bk-up bw wj pkjk? I z bkup mjk u p? W buk mk wkm z fu j k w? W buk mk mw p kppkk (uw uw z)? W buk mk yp uw fm uw wk p w? Awz Vp / pmk E Su Au W? Gp? Gk/ PIOFAH pfk /w p Gk I&A bk N z Gk I&A bk N z Gk I&A bk N z Gk I&A bk N z Gk I&A bk N z 10.6.1.4 ME zj pu b ppuu p f. W b p f p zj pu? Gk I&A bk N z 10.6.2.1 BBkmk, u b wk b w ïf pm k km wk, zw w ub. 10.7.1.1 B[A] E zj pu p ïmpm p uwjk fm wjb m. 10.7.1.2 B[A] Vwjb m m uwjk fm m b w p p kjk zj z. 10.7.1.3 BI m k w uu bb z b, w kp w 75% uu mum k. 10.7.1.4 BG w b f fbk. 10.7.2.1 V[A] E zj pu wk wj uwjk wjb m. Vwj w m wsu E pp w mjk. I w w k m, éé k m jm w f f j uk. Z k 9.2.6. 10.7.3.1 PE b pu w b p fm m z bm b pbmk f mbuk. 10.7.4.1 BSymum uwjk fm b j kjk. 10.7.4.2 B[A] W xp k m ub ymum bu m b, j z fw. 10.8.1.1 B[A] H mm Dpm Vuwjk f jkb f fm, f, bu m uu p uf fu zkjk. 10.8.1.2 BMwk zj ïu m z m m (f)pkk, -m, fx, pk b p wpp buk b k p ukk uwjk fm mm w. 10.8.1.3 BMwk zj ïu m z m m mb ppuu wjb m k p ukk uwjk fm mm w. Hbj w m b j p bpp mb f. 10.8.1.4 BMwk zj ïu m uwjk um bj p. 10.8.1.5 BE zj m ff m um u -m b x -m km. Zj bkmk, u b x wk. Ok ub? Zj pu p uwjk fm p wjb m z k, ub-k? Zj pu NIET b wjb m p uw p? W bju w mum buk m pu z z j w ( uu mum p 75% ) (j, p, k) W b fm f fbk? Zj pu wj uwjk wjb m? Wk m w bj? Zj pu z fm k km b p z fm mbuk k w f pbmk? W ymum uwjk fm b ju b? W ymum ub fm b z fw bu m b? I j, w bjk u? W uwjk fm bu m b uf fu zkjk? W bjk u? Zj pu zj z bk bj mwk w m m uwjk fm? Zj pu zj z bk bj mwk w m m mb ppuu wjb m? G k j p bpp p mb f? I p pu uwjk um f pu-p? W m p um z m x m b p z m? Gk I&A bk N z Gk I&A bk N z Gk I&A bk N z Gk I&A bk N z Gk I&A bk N z Gk I&A bk N z Gk I&A bk N z Gk I&A bk N z Spfk E bk N z Spfk E bk N z Gk P&O bk N z Gk I&A bk N z Gk I&A bk N z Gk I&A bk N z P 9 f 20
20160809 GAP-y 1.2.5.xx j BIG Numm GM 10.8.2.1 UE zj fpk mk b uw fw u w m m buwb - w b wb - w wb zj b. 10.8.2.2 UVwjk pkjk fmb zj b, m pu m. w 10.8.2.3 UH p pmmuu wjk bm, uu, pmmuu zj. w 10.8.2.4 U[A] I mjk w bkm pmmuu (zw p fyk m w) p u wjz w k kum f f. 10.8.3.1 FOm uwjk fm bm w m ym, z: u bm fyk m, z f buk pkkm w z f k p pjk f pp z m u z m u 10.8.3.2 F[A] Fyk z bjz fm ym ku m, w u zb, kb buk b. 10.8.4.1 E[A] D um b m w buk ku mk buk PKI O f k /f yp. k V Gk/ PIOFAH pfk /w p Zj pu w wkfpk f mm pfk P f / b wb wb zj z? Awz Vp / pmk E Su Au W? Gp? bk N z I mm p z wk? Gk I&A bk N z I w pmmuu? Gk I&A bk N z I mm bkm pmmuu? Zj m m m uw fm bm? (z b) Gk I&A bk N z Gk I&A bk N z Zj pu fyk z bjz fm? Gk Hu bk N z W buk mk f buk ku um? Gk I&A bk N z 10.8.4.2 EE (pm) f -m b. I pmf -m? Gk I&A bk N z k 10.8.5.1 SE zj j m bkk bp ' ybuk mjk fm kpp m z mb j bp b z fm b z kpp. H mm b fmz, mkjk ', fm um, py, bkb, bkup km Cu. Zj j w b w z bm bj buk bp b k pp? Gk IBF bk N z 10.9.1.1 E[A] Cfm p w uk b W uk b Gk I&A bk N z - buk (b.. BRP). (m, mu buk? buk) 10.9.2.1 OE w b (u) W b m k k f Gk I&A bk N z (kwf) k k f wu wu? (bj. TAN ) buk. 10.9.2.2 OE u, pj zj u W u pj u Gk I&A bk N z py bkk pj wb. py wb? 10.9.3.1 OE zj pu wb pub fm Zj pu u mwk fm Gk mmu bk N z p u mwk. ku pub? 10.10.1.1 LV b w pp mk pk w Zj pp? pfk ff bk N z b. Dz p w mjk mbuk k p. D BRP k bjb jk p w, fë ym, I buk k bjb p m f kw. 10.10.1.2 LE b mm: I w m (z )? Gk I&A bk N z uujk p b bukm f ID bu (z 10.10.2.1) w mjk P wkp f P bj wp w u u um PjPp bu 10.10.1.3 L[A] I w pm. D bf m wm b bk k w (z ww, bumm, z.). B z ww? Gk I&A bk N z P 10 f 20
20160809 GAP-y 1.2.5.xx j BIG Numm GM 10.10.1.4 L[A] Lb w zjk m. D zj ym b bj ku p Suy Ifm E Mm ym (SIEM) wm m mpp b w. E bj wk mpw m mpp w. 10.10.1.5 LC p p : p pmum b b bp w um m b. D k bw (m) mjk (bj. bkb ). 10.10.2.1 LD bu w pm : buk bfup, z wjz fu f ; u ymmm, pp, u bk-up f buk fup bfup, z wjz fu, uw fu, p (w b) bb, z p f buk, k kk, ww, uf kk ypu 10.10.3.1 LH (um) j f wj b w uw. 10.10.3.2 L[A] H p b bu u buk. Hbj bpk. 10.10.3.3 LLb w z bm z p f mpu ku w. 10.10.3.4 LD mm w z bm z p f mpu ku w. I p m w z bj j pp p w. 10.10.3.5 L[A] D bkb fm wb b mj w y zkjk w, m mmum m, fm w ym. Bj (m) fmb bwmj mm j. 10.10.3.6 LC p p : p pmum b b bp w um m b. D k bw (m) mjk (bj. bkb ). V Awz Vp / pmk E Su Au W? Gp? Gk/ PIOFAH pfk /w p Gk I&A W b zjk m? bk N z I p p pmum? Gk I&A bk N z W bu z m pm? W j, wj w p? I -y u buk bkb? Gk I&A bk N z Gk I&A bk N z Gk I&A bk N z W mpu p km? Gk I&A bk N z W bm? Gk I&A bk N z I mm mj 3 m m w mm 3 j? Gk I&A bk N z I m p? Gk I&A bk N z 10.10.4.1 LZ 10.10.1 Gk I&A bk N z 10.10.5.1 LZ 10.10.1 Gk I&A bk N z 10.10.6.1 LSymkkk w z y j buwb y b mjk. 11.1.1.1 TE b b w, um b p b bjf b. 11.2.1.1 RGbuk w f ïf u. V w m bju. 11.2.1.2 R[A] Au w bju éé bb z. 11.2.1.3 R[A] Op b fw w bp w p wk wjz fu w p wk w. 11.2.2.1 BGbuk bb p b z uf u k zkjk ( kw, u). 11.2.2.2 BSymp bukm ( fu u), z z p ym f buk. Lp ymkkk jk? Gk I&A bk N z I b? Gk I&A bk N z I pu uw buk? pfk k ff / I&A bk N z W u 1 bb bj k u? Gk I&A bk N z I fw bj bp fu? pfk k ff / I&A bk N z W p b buk z zj? Gk I&A bk N z D ymp u? Gk I&A bk N z P 11 f 20
20160809 GAP-y 1.2.5.xx j BIG Numm GM 11.2.2.3 BGbuk kj zkjk pp mm. 11.2.2.4 BE wjz b bj fu / f. 11.2.3.1 BWw w m (px) p f uu, m p w bjb w ww mb m p. 11.2.3.2 BT z ww : Ww w p m u ( buk). Tjjk ww f ww Xw f w w m w bj buk pjk ww. Gbuk bp ww. Ww zj bj buk bk. Ww b u mm 8 kk, w m 1 f, 1 jf 1 m k. Ww zj mxm 60 m b 6 k w. 11.2.4.1 BT buk w pk, mm jjk, ëu. H b b bp p b u. 11.3.1.1 GA buk k m mm : b Ww w p. Gbuk u ww m. u Ww m p zj E ww w mjk wjz m kb bk w. Ww w buk um pu (bj. p fu f m). 11.3.2.1 OD buk wkpk j fwz. (z k : 11.5.5) b 11.3.3.1 CI k b mm buk uwjk fm p buu m. Dz fm m j w pb fub pbmjk (k, k, buu f km). 11.3.3.2 CBj fukk fm w, w mjk, buk mk fu b fukk (p f). 11.3.3.3 C[A] Smbpmmuu ( ) mk p mxm 15 mu fm p bm b kjk. 11.3.3.4 C[A] Tb k w um bj wj k ( wz). 11.4.1.1 BE um b m bkk buk wk wk. Gbuk kj wk wk zkjk zj. Z k 11.2.2.3. V Awz Vp / pmk E Su Au W? Gp? Gk/ PIOFAH pfk /w p Gk I&A Kj buk z bb? bk N z I b bj wk..m. wjz b? W ww bm p f uu ( + SALT) I ww pu f b w m m p w? pfk k ff bk N z Gk I&A bk N z Gk I&A bk N z W mm jjk ëu? Gk I&A bk N z Zj buk bz? Gk IBF bk N z I k py? Gk IBF bk N z E : D buk uwjk fm p buu m. Dz fm m j w pb fub pbmjk (k, k, buu f km). Gk IBF bk N z I fu b fukk fm? Gk IBF bk N z I um wk mxm 15 mu? I k/ um wk k wj w? I wz! Gk I&A bk N z Gk I&A bk N z I wkbuk b? Gk I&A bk N z 11.4.2.1 AZ k 11.6.1.3. Gk I&A bk N z u 11.4.3.1 I[A] A ïf u ppuu k w p uw z. E, u, ppuu (B Yu Ow D) w p uw z. 11.4.4.1 BP, jk z p wk f mpu zj w f. 11.4.5.1 S[A] Wk w z u k u z f wk mjk. 11.4.5.2 S[A] D z b fuuu p p bum w wk upu z w. V ym w bju wk z z. E w pk, mm éé k p j, ëu f ym pm z z f p m w. I u ppuu k w p uw z? Gk I&A bk N z I p p mm? Gk I&A bk N z I k u wk z mjk? Gk I&A bk N z I b z w z ëu? Gk I&A bk N z P 12 f 20
20160809 GAP-y 1.2.5.xx j BIG Numm GM 11.4.5.3 S[A] Ek z f f bu Z f u z fm p z bu bu. Hbj p p p, u mmu. 11.4.5.4 S[A] B u z p u mm, p z. 11.4.5.5 SZ w m z w fu bpk k zkjk ( z). 11.4.6.1 BV mppjk wk, w z z j, b mjk buk w bpk, km b bjfp (z 11.1). 11.4.7.1 BNwk zj z bm u b p mm f b bmm. 11.5.1.1 B[A] T k p f p m b w p b w-f u. 11.5.1.2 BH ww w p m j. E w fm b u. 11.5.1.3 BVf m w buk m u buk xp. 11.5.1.4 BBj u p w um j f p. Dz fm k buk fm ff u /f mbuk ym. 11.5.1.5 B[A] N bukm 3 k fuf ww, w u mm 10 mu bkk. I k-u p k w, w u bkk buk zk z k-u p ff f ww. 11.5.2.1 GBj uf um w mm f buk f p bum. 11.5.2.2 GBj buk IT z w buk mm u p b ww. b 11.5.2.3 G[A] App m zkjk ymu ( p u z m f b). D u w zj, w w uk u u w buk ( up u). 11.5.3.1 SE w um p buk yww (.. k ww, m wjz, wjz ww). 11.5.3.2 S[A] Ww bb uu z b bj y11.2.3. Db ww w wjz. W ww p, w u bkk. 11.5.3.3 S[A] Ww zj ë ww bb y z bpk uu m bj buk w wjz. 11.5.3.4 SD buk bb mjk u ww ykz wjz. Hbj : buk zj ww k wjz, w buk puw u. km ypfu uw kz ww m bpu. 11.5.4.1 GH buk uppmmuu wm ym- pbm zu ku w p bb w bpk b k w b. 11.5.5.1 T[A] D p wk p mxm 15 mu. D w PC. Bj m mkp mxm 15 mu bk w. - 11.5.6.1 B[A] D u p f w p p b wjzzk f m. pm 2-f u u. V Awz Vp / pmk E Su Au W? Gp? Gk/ PIOFAH pfk /w p Gk I&A Hbb z f bu? bk N z I b u z? Gk I&A bk N z I? Gk I&A bk N z I b bj z j mppjk wk? Zj bm u f b bmm? W buk mk w-f bj k f b p? I ww bj b? I m u buk bj? Gk I&A bk N z Gk I&A bk N z pfk k pfk k pfk k I bj u m? pfk k ff / I&A ff / I&A ff / I&A ff / I&A bk bk bk bk N z N z N z N z I kup? Gk I&A bk N z I p uf um? Gk I&A bk N z I mm ww bj u buk ()? Gk I&A bk N z Hbb pp m? Gk I&A bk N z W um p buk ww, bjb py ym f pp? I uu ww w fw, bjb py ym f pp? I k jjk ww bpk uu, /py fw ww bj buk w wjz? Hbb buk mjk u ww kz wjz? Hbj : buk zj ww k wjz, w buk puw u. km ypfu uw kz ww bpu. buk uppmmuu wm ym pbm zu ku w p, bpk b? I m u 15 mu f k wk? I k m z? W ym u f f bj m, wbj p b wjzzk f m w m 2 f u u? Gk I&A bk N z Gk I&A bk N z Gk I&A bk N z pfk k ff / I&A bk N z Gk I&A bk N z k I&A bk N z k I&A bk N z P 13 f 20
20160809 GAP-y 1.2.5.xx j BIG Numm GM 11.6.1.1 BI w m mk u - jfb. p 11.6.1.2 B[A] Mmfw f mjk buk f u. p 11.6.1.3 B[A] Bj x buk u uw m k u (w-f) buk p. p 11.6.1.4 B[A] E b buk w-f u b k pp. Bjb u b um p pw f k pw. 11.6.2.1 I[A] G ym (m bkb f uwjk) b wz (ï) mpum bb. I k w bk fyk f m. 11.7.1.1 D[A] H mb pp w mjk z bjffm w p ( z fp ). V z fp () b, f fu wjk, : mb pp (z mpu, b, bmp, PDA) b mjk m bm.m.. ww u. V p uw m fw p V V bj u uw m 2 f u p? W b ym buk mk 2 f u, z b m? Awz Vp / pmk E Su Au W? Gp? Gk/ PIOFAH pfk /w p k I&A bk N z Gk I&A bk N z pfk k ff / I&A bk N z Gk I&A bk N z Zj ym ï ym? Gk I&A bk N z W mb pp b m bjffm? I z fp fw buk f ww (p) u? Gk I&A bk N z 11.7.1.2 D[A] E zj, w mjk, z m u - pmmuu p mb pp. buk wk m w up. Op mb pp m w mw fw Gk I&A bk N z mw 11.7.1.3 D[A] Bj m f f w W bj m f f Gk I&A bk N z mmumjk m pp f. mmumjk m pp f? 11.7.2.1 TE w b m k mpm I wk b b m ( p?) Gk P&O bk N z k p... wk. 11.7.2.2 TE w b m uwk wk ym I wk b wk ym w wk Gk P&O bk N z wk ym w u uwkpk f ym m w p? wkz m w p. D b w I p fw u? bj ku u MDM-p (mb wmm). 11.7.2.3 T[A] D wkz zj w mjk z p I wk z z p wk wkpk Gk P&O bk N z wkpk (u f p ) bjffm k k w p? w p ( z fp ) mjk mw f E u mw uw k wkpk uw k km. km? wv p uw m f fw p wjk m. 12.1.1.1 AI pj w by I pu f w bj pj Gk IBF bk N z mbp pm wp. Ok bj y mbp wp? wjz w qu mm. W k wjzb pu? 12.1.1.2 AI y, wkk W bj y, wkk fmym Gk I&A bk N z fmym w uu b b bp? bp. W mjk w buk mk b j (bj. u u ). y 12.1.1.3 ABj f pu w p wbj W bj b pu b mm pfk ff bk N z b pf. pf? k / I&A 12.1.1.4 AW m b pu w kuz Zj b pu buk w Gk I&A bk N z bp pu w buw. w buw? 12.1.1.5 AV b w mp buk b b buk mp b Gk I&A bk N z p b z NBV ku b NBV f ISO/IEC 15408? f f ISO/IEC 15408 (mm ). y 12.1.1.6 AE xp u, C f pu p Gk I&A bk N z ww mjk uj. ww. C f f p ww. 12.2.1.1 VE m w u p. C f bj pp pfk ff bk N z Dbj w mm p w,. M m bb wb k / I&A k,, ju fm pp, bj NCSC f OWASP j., pm (SQL-Ij). 12.2.2.1 BE b mjk m Zj mjk m pfk ff bk N z ku ku. u. P 14 f 20
20160809 GAP-y 1.2.5.xx j BIG Numm GM 12.2.2.2 BH fmym m fu b wm k w f wk zj. Hm w um b wm (ujk) wkfu ku w. 12.2.2.3 BSp fu w km p p mm. 12.2.2.4 BVwk zj bj ku b z bj p fu /f wk fm k w puw wk fm. 12.2.3.1 IE b w, k bm w ïmpm, bwk u bm b p. 12.2.4.1 VD ufu pmm' mk mjk m ju ku (bj. kum). 12.2.4.2 VBj u w z m ju u uwjk bkb w (bj. b p). 12.2.4.3 VA zkjk zj buk w u ( kw). 12.3.1.1 BD buk ypf m u zj p um zj fkjk buwb ku. 12.3.1.2 BBj z ypf pu fw, p b pj. 12.3.1.3 B[A] D ypf bz mp m b b (z FIPS 140-2 w mjk NBV). 12.3.2.1 SI ub mm b p, u wjk. u 12.3.2.2 SD uu ypf u w bp b p ypf b. u 12.3.2.3 SD uwjk ypf u zj wb j, buk, p p u. u 12.3.2.4 SE pu w bp w m m mpm u. u V W /f wkfu m um m / mjk wk p w? Zj p mm z p fu w km? Zj wk b fu? (bjb wk bjb, bwk ). Zj z bm ïmpm bwk u bm b p. (k fz, yp, pp u ). Zj pmm' m ufu wbj ju k w. W u w m ju u uwjk bkb (b bj f?) W buk mk kw pp, z zkjk zj buk w u? W ypf m buk p zj f fkjk ku? (bjb AES) I b z ypf pu wbj fw mk, p b pj? V ypf bz m b b? I, buk mk w ypf ub p m wjk? I ypf b wk uu u p? I b ubp wb uwjk u j, buk, p p? I pu w bp w m m mpm u? Gk/ PIOFAH pfk /w p pfk ff pfk k pfk k pfk k pfk k pfk k pfk k ff / I&A ff / I&A ff / I&A ff / I&A ff / I&A ff / I&A Awz Vp / pmk E Su Au W? Gp? bk bk bk bk bk bk bk N z N z N z N z N z N z N z Gk I&A bk N z Gk I&A bk N z Gk I&A bk N z Gk I&A bk N z Gk I&A bk N z Gk I&A bk N z Gk I&A bk N z 12.3.2.5 S[A] Bj ku umm PKI O I umm bj ku PKI? Gk I&A bk N z u 12.4.1.1 BA u p k fu fw f. 12.4.1.2 BPmmuu b p w ï p pum u p. 12.4.1.3 BGï pmmuu, fu um w bju fub. 12.4.1.4 BE w u ( ) fw buk. K u p fu fw f? W pmmuu ï p pum u p? W ï pmmuu, fu um bju fub? W u ( ) fw buk? Gk I&A bk N z Gk I&A bk N z Gk I&A bk N z Gk I&A bk N z 12.4.1.5 BV up w bju. I bju pmmuu up? Gk I&A bk N z 12.4.1.6 BE bk. 12.4.2.1 BH buk kpë p b w m. I zkjk, w z mjk m zu wj. I u uw f wjz pmmuu bk p u / /? W buk p b m? E mjk, w buk mk m wk zu w wj? Gk I&A bk N z Gk I&A bk N z P 15 f 20
20160809 GAP-y 1.2.5.xx j BIG Numm GM 12.4.3.1 TD b w z mjk bpk m b wjz bm. A u p bb. V W b z mjk bpk u p, m b wjz bm? Awz Vp / pmk E Su Au W? Gp? Gk/ PIOFAH pfk /w p Gk I&A bk N z 12.4.3.2 TB p p () ym. S b p p () ym. (O-m)? Gk I&A bk N z 12.5.1.1 PE b wjzmm b b p z ITIL pp ASL. 12.5.2.1 TV p (z up) fwm mp fuuu w z ju wk mp b. 12.5.3.1 RBj bupmmuu pmmpkk w u wjz. 12.5.4.1 UOp k uw uw m - p. 12.5.4.2 UE p zj m m (p) fm uk. (z 13.1.1) 12.5.5.1 UUb wkk pmmuu km up wjk ub. E w m ff m kw uwjk b b (bj., bkb m, f, kwu, pkjk). 12.6.1.1 BE p b kwb; m mm m IBD, pk p, y kwb p. 12.6.1.2 BV fwm z fuuu k (bj ku um) w f up (p) zj. H up um p, zj p fpk zj m. 12.6.1.3 BI p bkb, ' b m p w ëu ( ' b m kwb k w m ' p). 12.6.1.4 B[A] Up/p kwb w k p mbuk w w z p mjk, mm b éé wk. M k b-up/p m w p bj u. 12.6.1.5 BI p bkb w IBD f CERT z bjb NCSC. 13.1.1.1 RE pu pp bbu, mb m p pu, w w p m w m pp b. I b wjzmm b b p z ITIL pp ASL? W p (z up) fwm mp fuuu z ju wk mp b m? W bj bupmmuu pmmpkk u wjz? V p k uw uw m - p m ukk fm? I p m m (p) fm uk? (z 13.1.1) W up wjk ub ub wkk pmmuu u? W m ff m kw uwjk b (bj., bkb m, f, kwu, pkjk)? E p b kwb; m mm m IBD, pk p, y kwb p. W fwm z fuuu k (bj ku um) f up (p) zj? I m pmm wbj p bkb, ' b m p w ëu? W k p z p mjk, b wk,, ïmpm? I p w NCSC f CERT w mm m m kwb m. Gk I&A bk N z Gk I&A bk N z Gk I&A bk N z Gk IBF bk N z Gk IBF bk N z Gk IBF bk N z Gk IBF bk N z Gk I&A bk N z Gk I&A bk N z Gk I&A bk N z Gk I&A bk N z I mm pu z wk? Gk IBF bk N z 13.1.1.2 RE pu mmu m IBD. I pu mmu m IBD? Gk IBF bk N z p p 13.1.1.3 R[A] E p Dm Suy C (DSC) f VCIB f ACIB wz pp b. pv k uwp pwz m m. 13.1.1.4 RA b w ym ë IBD. p 13.1.1.5 RVm f f ppuu f m m ku b w j k mk pfmb. p 13.1.1.6 RIfm b, bjb, fu p, buk w pm kk. D CISO bkjk pk bj ku pmjk - m fm. I b m ACIB /f VCIB wz? I k uwp b m? W b ym IBD p? W m f f ppuu f m b f ku b mk fmb? W fm b pk kk bjb b. Kjk CISO pk m fm (bj ku mjk)? Gk Gm S bk N z Gk I&A bk N z Gk IBF bk N z Gk I&A bk N z P 16 f 20
20160809 GAP-y 1.2.5.xx j BIG Numm GM 13.1.2.1 RE p m u b zwkk pkk b m. p p 13.2.1.1 VE zj pu pp bu. A mwk b p zj z pu. 13.2.2.1 LD fm k u b bm w ëu m bm b. (PDCA Cyu) 13.2.3.1 VV pu b b bwjm w zm, bw p km f zbwj b zj. m 14.1.1.1 I[A] Cmp w buk jjk bwuw-, -. f 14.1.2.1 BE Bu Imp Ay (BIA) w bu w ïf ku uï bjfp. A y zj wjjk uï k b m j, p. j f 14.1.3.1 CI uïp w mm b : PfP Pë pu bjfpuï. w p m P w, m k w w u w. fmp (b fm). u p up. ï ump ym p. k ku p m p w p. 14.1.4.1 KE b ku k bjfuïp w f m bwk p zj, m fmb p wjz b m p u. V I p m u b zwkk pkk b m? Zj pu pp bu? Zj mwk p z pu? W fm k u b bm w ëu m bm b? I p/pk zm, bw p bwjm bm (km f bwj b zj )? I Bu Imp Ay (BIA) w bu w ïf ku uï bjfp? I bj k b wjjk uï m j, p? Zj uïp? w mm w b : PfP Pë pu bjfpuï. w p m P w, m k w w u w. fmp (b fm). p up. ump ym p. k ku p m p w p. W ku k bjfuïp f m bwk p zj, m fmb p wjz b m p u? Awz Vp / pmk E Su Au W? Gp? Gk/ PIOFAH pfk /w p Gk I&A bk N z Gk I&A bk N z Gk IBF bk N z Gk IBF bk N z Gk I&A bk N z Gk IBF bk N z Gk IBF bk N z Gk IBF bk N z 14.1.5.1 [A] E w mm jjk f /f u m [A] E w mm jjk f /f u bjfuïp m m bjfuïp m (pz, b wk). A (pz, b wk). A u w p bj w u w p bj w bj. bj. Gk IBF bk N z W mp buk jjk bwuw-, -? W bjk u? 15.1.1.1 IE wk w wjk m E z wz w wk w /f Gk IBF bk N z p zj p f. wjk m p zj p Dz j pm p: ()? Z j w z z u? p://www.bm./wp- /up/2014/04/20101126_cpj-u-u- Ifmb-040.pf f 15.1.2.1 IE z p wjk p m.b.. I z p wjk p m.b.. Gk Ikp bk N z u m, uu buk. u m, uu buk? 15.1.3.1 BBjk b w bm, W bjk b w bm pfk ff bk N z, km wjk,, km wjk k / I&A, u p bjfm., u p bjfm? 15.1.4.1 BD bm py b w W bm py bwk pfk ff bk N z bwk km w, f km w, f k / I&A p u bp. p u bp? 15.1.5.1 VE b m bkk buk ICT z I b m bkk buk IT z Gk I&A bk N z buk. D b bkmk p wk buk? w z D b bkmk p wk w z 15.1.6.1 VE wk km, w f I bk wk km, w f Gk I&A bk N z p ypf k m. Z k buk ypf p wk m 12.3. w? 15.2.1.1 NH jmm wjk u I u zj p bu Gk IBF bk N z bpu p (.. jjk mm. Dz u ku x u zj. k). Cfm BIG ( k) z CISO, m W pp? Gm S, z p u bb. Dbj b k pk bu. Dz ku w u f w CISO w f x um. 15.2.1.2 N[A] I P&C yu w pp fmb W P&C yu pp fmb pfk ff bk N z m. m? k / I&A P 17 f 20
20160809 GAP-y 1.2.5.xx j BIG Numm GM 15.2.2.1 CIfmym w m p bm. D k bj. kwby p. Z k 12.6.1.1. 15.3.1.1 BE u wbj w u p puym, b zu w p ku m bjfp mmum bpk. 15.3.2.1 BT upm u fmym b w bm m mjk mbuk f mpm km. 104.1.1.1 ID um ISMS wkk, Su b, b k Mbjf. S T b z w p b p PDCA m (P, D, Ck, A). Dz m p z j wk z b u m 5.1.1.1 6.1.8.1 13.2.2.1 b (wjk p). V W fmym m p bm? Bjb kwby p W u wbj w u p puym, zu p ku m bjfp mmum bpk? W upm u fmym b bm m mjk mbuk f mpm km? I um ISMS? W ISMS u b? Dz m pkjk BIG m m m b k m m. Bw m JA pu. Awz Vp / pmk E Su Au W? Gp? Gk/ PIOFAH pfk /w p pfk ff bk N z k / I&A pfk ff bk N z k / I&A Gk I&A bk N z Gk IBF bk N z P 18 f 20
20160809 GAP-y 1.2.5.xx u um 9-u-16 1.2.5 Ru GAP-y Rjb Pu Mxmum S 5. Bb 0 / 2 = 0% 6. O fmb 0 / 27 = 0% 7. B bjfm 0 / 10 = 0% 8. P b 0 / 18 = 0% 9. Fyk b 0 / 41 = 0% 10. B mmu bp 0 / 81 = 0% 11. Tb 0 / 54 = 0% 12. Vw, u wkk 0 / 43 = 0% 13. B 0 / 10 = 0% 14. Bjfub 0 / 5 = 0% 15. N 0 / 11 = 0% 104. ISMS 0 / 1 = 0% Su fmb p b BIG m 14. Bjfub Su GAP y m (GAP-y) 15. N 104. ISMS 5. Bb 0% 0% 0% 0% 0% 0% 0% 0% 0% 0% 0% 0% 6. O fmb 7. B bjfm 8. P b E 0 303 (m fk k, b b m mukk, k f) 13. B 9. Fyk b 12. Vw, u wkk 10. B mmu bp 11. Tb Su up mm bu 5. Bb IMPACT-y, u bu, 0-m ( ) Rjb Pu Mxmum S 5. Bb 0 / 4 = 0% 6. O fmb 0 / 54 = 0% 7. B bjfm 0 / 20 = 0% 8. P b 0 / 36 = 0% 9. Fyk b 0 / 82 = 0% 10. B mmu bp 0 / 162 = 0% 11. Tb 0 / 108 = 0% 12. Vw, u wkk 0 / 86 = 0% 13. B 0 / 20 = 0% 14. Bjfub 0 / 10 = 0% 15. N 0 / 22 = 0% 104. ISMS 0 / 2 = 0% E 0 606 (m fk k, b b m mukk, k f) 15. N 14. Bjfub 13. B 104. ISMS 0% 0% 0% 0% 0% 0% 0% 0% 0% 0% 0% 0% 6. O fmb 7. B bjfm 8. P b 9. Fyk b 12. Vw, u wkk 11. Tb 10. B mmu bp P 19 f 20
20160809 GAP-y 1.2.5.xx k L, k. P 20 f 20