????t???? ?sf??e?a? ?????f???a??? S?st? - PowerPoint PPT Presentation

About This Presentation
Title:

????t???? ?sf??e?a? ?????f???a??? S?st?

Description:

Title: IS Security Policies Author: Maria Karyda Last modified by: sak Created Date: 4/3/2003 2:26:15 PM Document presentation format: On-screen Show (4:3) – PowerPoint PPT presentation

Number of Views:50
Avg rating:3.0/5.0
Slides: 30
Provided by: MariaK1
Category:
Tags: iso27001

less

Transcript and Presenter's Notes

Title: ????t???? ?sf??e?a? ?????f???a??? S?st?


1
????t???? ?sf??e?a? ?????f???a??? S?st?µ?t??
  • S????af?a? ?a??a ?a??da

2
St???? t?? d???e???
  • ? d???e?? a?t? st??e?e? st?? ap??t?s? t?? e???
    e??t?µ?t??
  • ?? e??a? ?? ????t???? ?sf??e?a? ?S ?a? ??a p?????
    ?????? t?? ??e?a??µaste
  • ??? µp????µe ?a a?apt????µe µ?a ????t???
    ?sf??e?a? ?S ?a? t? ?a p??pe? ?a pe???aµß??e?
  • ????? pa?????te? s?µß?????? st?? ap?te?esµat???
    efa?µ??? µ?a? ????t???? ?sf??e?a? ?S

3
??a?e???s? ?sf??e?a? ?S ??ad??as?e? ?a?
??a?t????
  • ? ??a?e???s? t?? ?sf??e?a? ?S st??e?e? st??
    p??stas?a t?? ?S, pe????????ta? t??
    ep????d???t?ta se ap?de?t? ep?ped?. ?e???aµß??e?
    s???pt??? t?? a??????e? d?ad??as?e?
  • ?p?t?µ?s? t?? ep????d???t?ta? ?a? p??sd????sµ?
    t?? ap?de?t?? ep?p?d?? ep????d???t?ta?
  • ???pt??? ?a? efa?µ??? µ?a? ????t???? ?sf??e?a?
  • ??µ??????a ?at??????? ???a??t???? p?a?s??? ?a?
    e?asf???s? t?? apa?t??µe??? p???? ??a t??
    efa?µ??? t?? ????t???? ?sf??e?a?
  • ??pa?de?s?, e??µ???s? ?a? e?a?s??t?p???s? t??
    ???st?? t?? ?S

4
? ?????a t?? ????t???? ?sf??e?a? ?S
  • ? ????t??? ?sf??e?a? t?? ?????f???a??? S?st?µ?t??
    pe???aµß??e? t? s??p? ?a? t??? st????? t??
    asf??e?a?, ?d???e?, d?ad??as?e?, ?a???e?, ??????
    ?a? ?pe?????t?te? p?? af????? t?? p??stas?a t??
    ?S t?? ???a??sµ??
  • ? ????t??? ?sf??e?a? d?at?p??eta? se ??a ????af?,
    t? ?p??? ?a p??pe? ?a ????????? ?a? ?a efa?µ?????
    ???? ?? ???ste? t?? ?S

5
??t?a Asf??e?a? ?a? S??d?? ?sf??e?a?
  • ?? ?d???e? ?a? ?? d?ad??as?e? p?? pe???aµß????ta?
    st?? ????t??? ?sf??e?a? ???p?????ta? µe t??
    efa?µ??? t?? µ?t??? p??stas?a? ? asf??e?a?
    (security measures, security controls)
  • ? ????t??? ?sf??e?a? µa?? µe t? s????? t?? µ?t???
    p??stas?a? ap?te???? t? S??d?? ?sf??e?a?
    (Security Plan) ??a ta p????f???a?? s?st?µata
    e??? ???a??sµ??.

6
G?at? efa?µ????µe µ?a ????t??? ?sf??e?a? (1)
  • ??at? ??e?a??µaste ??a s?st?µat??? ?a?
    ????????µ??? p?a?s?? p?? ?a ?a??d???se? t??
    ???p???s? t?? µ?t??? asf??e?a?
  • ??at? ?e?t????e? ?? t? µ?s? ??a t?? ep????????a
    t?? eµp?e??µ???? sta ??t?µata asf??e?a? (???ste?,
    d?????s?, d?a?e???st?? s?st?µ?t?? ??p.)
  • ??at? de d?a??t??µe ape?????st??? p????? (se
    ???µata, ?????, a????p??? d??aµ???)

7
G?at? efa?µ????µe µ?a ????t??? ?sf??e?a? (2)
  • ??at? ?ts? ?eµe????eta? ? s?µas?a t?? asf??e?a?
    t?? ?S ??a ??a ta µ??? t?? ???a??sµ??
  • ??at? s?µß???e? st? d?µ??????a ????t???a?
    asf??e?a?
  • ??at? se ???sµ??e? pe??pt?se?? ap?te?e? ??µ???
    ?p?????s?
  • ??at? ap?te?e? pa?????ta eµp?st?s???? st??
    s??se?? t?? ???a??sµ?? µe s??e??a??µe???? f??e??
    ?a? pe??te?

8
??d? ????t???? ?sf??e?a?
  • ?e?????? ????t???? ?sf??e?a? (computer-oriented)
  • ????t???? ?sf??e?a? ?????f?????
  • ???p????? s???e???µ????? ?a???e? p??sßas?? sta
    ded?µ??a, ?p?? d?a???t? ??e??? p??sp??as??
    (Discretionary Access Control) ? ?p???e?t???
    ??e??? p??sp??as?? (Mandatory Access Control).
  • ????t???? ?sf??e?a? ?e?t???????? S?st?µ?t??
  • ????t???? ?sf??e?a? ???t??? ?p?????st??
  • ???a??s?a??? ????t???? ?sf??e?a? (human-oriented)
  • ????t???? ?sf??e?a? ?????f???a??? S?st?µ?t??

9
???f?? ????t???? ?sf??e?a? ?S (1)
  • ?t?µ???? ????t???? ?sf??e?a? (individual security
    policies) ??? s?st?µa ? efa?µ??? (p.?. ????t???
    ?sf??e?a? ??a t? ???s? t?? e-mail)
  • ?p?spasµat??? d?a?e???s? t?? asf??e?a? ?S, µe????
    p???p????t?ta st? s??t???s? t?? p???t????
  • ?p?te?esµat???? ?ta? ?p?????? a?t???µe? efa?µ????
    ?a? ?p?????st??? s?st?µata p?? de s??d???ta?
    µeta?? t???

10
???f?? ????t???? ?sf??e?a? ?S (2)
  • ??a??t???? ????t???? ?sf??e?a? (Comprehensive
    Security Policies)
  • ???a?? ????af? p?? a?af??eta? se ??a ta
    ?p?????st??? s?st?µata, t?? efa?µ???? ?a? t??
    d?ad??as?e? t?? ?S
  • ???a? µe???e? se ????, ??? p??? e????ste?
  • ?? ?d???e? ?a? d?ad??as?e? p?? pe???aµß????ta?
    e??a? se ?e???? ep?ped?, ????? ?ept?µ??e?e?
  • ?????t?? ????t???? ?sf??e?a? (Modular Security
    Policies)
  • ???a?? ????af? µe pa?a?t?µata p?? pe?????f??? t??
    ep?µ????? p???t????
  • ?p??e? ?a e??a? se µ??f? ?pe??e?µ???? (hypertext)

11
????? ?pa?t?se?? ?sf??e?a?
  • ?? apa?t?se?? ??a t?? asf??e?a t?? ?S p?? p??pe?
    ?a ??a??p??e? ? ????t??? ?sf??e?a? p???????ta?
    ap? ????? t??? eµp?e??µe???? st? ???s? ?a?
    ?e?t?????a t?? ?S e??? ???a??sµ??, ?p?? e??a?
  • ?? ???ste? ?a? d?a?e???st?? t?? ?S
  • ? d?????s? t?? ???a??sµ??
  • ?? pe??te? t?? ???a??sµ??
  • ?? ??µ???? ?a? ?a????st???? d?at??e?? p?? d??p???
    t? ?e?t?????a t??

12
???pt??? ????t???? ?sf??e?a? (1)
  • G?a ?a d?aµ??f?s??µe µ?a ????t??? ?sf??e?a? ?S
    p??pe? ?a a???????s??µe, ?ata????, t? ep?ped?
    t?? asf??e??? t??. G?a t? s??p? a?t?, µp????µe ?a
    ???s?µ?p???s??µe
  • ?e??d??? ?????s?? ?p????d???t?ta? (p.?. OCTAVE,
    CRAMM )
  • ???t?pa d?a?e???s?? t?? asf??e?a? t?? ?S (p.?.
    ISO27001, ISO 17799, GMITS)

13
???pt??? ????t???? ?sf??e?a? (2)
  • ? ????t??? ?sf??e?a? ?S p?? a?apt?ss??µe ?a
    p??pe? ?a pe???aµß??e? apa?t?se?? sta a??????a
    e??t?µata
  • ????? e??a? ? s??p?? ?a? p???? ?? st???? t??
    ????t????
  • ???a e??a? ta a?a?? (µ???) t?? ?S p?? ??e?????ta?
    p??stas?a
  • ????? e??a? ?? ?pe?????? ??a t?? p??stas?a t??
    a?a??? a?t?? ?a? p??e? e??a? ?? a?µ?d??t?t??
    t???
  • ???? e??a? t? e???? ?a? p??a ta ???a efa?µ????
    t??
  • ??? ?a ???eta? ? ??e???? t?? efa?µ???? t??
  • ???a e??a? ta ??????? p?a?s?a p?? ?s??e? ?
    ????t???

14
?e??e??µe?? ????t???? ?sf??e?a? ?S
  • ?? ?d???e? ?a? ta µ?t?a p??stas?a? p?? ?a?????e?
    ? p???t??? asf??e?a? ?S ?a p??pe? ?a ?a??pt???
    t?? a??????e? ?at?????e? apa?t?se?? asf??e?a?
  • ??t?µata ???s?p????
  • F?s??? ?sf??e?a
  • ??e???? ???sßas?? st? ?S
  • ??a?e???s? ?????? ?a? ????sµ????
  • ??µ???? ?p???e?se??
  • ??a?e???s? t?? ????t???? ?sf??e?a?
  • ???a??t??? ??µ?
  • S??d?? S?????s?? ?e?t?????a?

15
?e??e??µe?? ????t???? ?sf??e?a? ?S (1) ??t?µata
???s?p????
  • St???? t?? ?d????? ?a? t?? µ?t??? asf??e?a? p??
    a?????? se a?t? t?? ?at?????a e??a? ? µe??s? t??
    ep????d???t?ta? p?? ?fe??eta? se a????p??a ????,
    ap?t?, ???p? ? ?at????s? t?? p???? t?? ?S.
    ??af????ta? ?????? se
  • ?????? ?a? ?pe?????t?te? ??a t?? p??stas?a t??
    a?a??? t?? ?S
  • ??ad??as?e? ep?????? ???? p??s?p????
  • ??pa?de?s? ?a? e??µ???s? t?? ???st??
  • ??t?µet?p?s? ?a? a?af??? pe??stat???? pa?aß?as??
    t?? asf??e?a?

16
?e??e??µe?? ????t???? ?sf??e?a? ?S (2) F?s???
?sf??e?a
  • ?a µ?t?a p?? ?p?st??????? t? f?s??? asf??e?a
    ????? ?? ????? st??? t?? ap?t??p? t?? µ?
    e???s??d?t?µ???? p??sßas?? st??? ?????? t?? ?S
    ?a? t?? ?atast??f?? t?? a?a??? t??. ??af????ta?
    ?????? se
  • ??e??? f?s???? p??sßas?? se ???s?µ??? ??????
    (p.?. Server room)
  • ???stas?a t?? ??e?a? t?? ???st?? (safety)

17
?e??e??µe?? ????t???? ?sf??e?a? ?S (3) ??e????
???sßas??
  • ? p??sßas? t?? ???st?? t?? ?S st?? p????f???e?,
    ta ?p?????st??? s?st?µata ?a? t?? efa?µ???? ?a
    p??pe? ?a ?a?????eta? µe ß?s? t?? ep??e???µat????
    a????e? ?a? t?? apa?t?se?? asf??e?a?.
  • S???? efa?µ??eta? ? a??? need to know ??a t??
    ap???µ? d??a??µat?? p??sßas?? st??? ???ste?.

18
?e??e??µe?? ????t???? ?sf??e?a? ?S (4)
??a?e???s? ?????? ?a? ????sµ????
  • ???µ??e?a ?a? S??t???s? ??????
  • ?? ?d???e? a?t?? st??e???? st? d?at???s? t??
    ep???µ?t?? ep?p?d?? asf??e?a?, p??sd???????ta?
    t?? d?ad??as?e? ??a t?? a???? ?a? t? s??t???s?
    t?? ?????? (p.?. apa?t?s? p??µ??e?a?
    p?st?p???µ???? p?????t??)
  • ???pt??? ?a? S??t???s? ????sµ????
  • ?? ?d???e? p?? pe???aµß????ta? p??pe? ?a
    ?a??pt??? t?? a??????e? pe??pt?se??
  • ????? ?t??µ?? p?????t?? (pa??t?? ????sµ????) ap?
    e??te?????? p??µ??e?t??
  • ???pt??? ?a? s??t???s? ????sµ???? ap? a?ad?????
  • ?s?te???? a??pt??? ?a? s??t???s? t?? efa?µ????

19
?e??e??µe?? ????t???? ?sf??e?a? ?S (5) ??µ????
?pa?t?se??
  • S?µµ??f?s? µe t? ??µ??? ?a? ?a????st??? p?a?s??,
    ?p??
  • ? ??µ?? 2472 t?? 1997 ??a t?? ???stas?a t??
    at?µ?? ap? t?? epe?e??as?a ded?µ???? p??s?p????
    ?a?a?t??a.
  • ?? ??µ?? ??a t?? p??stas?a t?? p?e?µat????
    d??a??µ?t??
  • ?? ap?f?se?? t?? ??e???t?t?? ??????t???? ?????,
    ?p?? ? ???? ???stas?a? ?ed?µ???? ???s?p????
    ?a?a?t??a, ? ?????? ?p?t??p? ???ep??????????, ?
    ???? ??asf???s?? t?? ?p????t?? t?? ?p??????????

20
?e??e??µe?? ????t???? ?sf??e?a? ?S (6)
??ad??as?e? ??a?e???s?? t?? ????t???? ?sf??e?a?
  • ? ????t??? ?sf??e?a? ?a p??pe? ?a p??sd?????e?
    ?a? t?? apa?t??µe?e? d?ast????t?te? ??a t??
    efa?µ??? t??, p?? af?????
  • ??? a???????s? ?a? a?a?e???s? t?? ????t????
  • ??? ??e??? efa?µ???? t?? ?a? t?? ?a????sµ? t??
    e?e??e??? p?? p??ß??p??ta? st?? pe??pt?se?? µ?
    t???s?? t?? ap? t??? ???ste?

21
?e??e??µe?? ????t???? ?sf??e?a? ?S (7)
???a??t??? ??µ?
  • G?a ?a efa?µ?ste? ? ????t??? ?sf??e?a? ?a p??pe?
    ?a ?p???e? ? a?t?st???? ???a??t??? ?a? d?????t???
    d?µ?
  • ??µ??????a t?? ?at??????? ????? ?a? ?ata??µ?
    ?pe?????t?t?? (p.?. ?pe?????? ?sf??e?a?)
  • ??µ??????a d?ad??as??? ??a t?? e?t?p?sµ? ?a? t??
    a?af??? pe??stat???? pa?aß?as?? t?? asf??e?a?

22
?e??e??µe?? ????t???? ?sf??e?a? ?S (8) S??d??
S?????s?? ?e?t?????a?
  • ??d??? st?? pe??pt?se?? ???s?µ?? ?S, ? ????t???
    ?sf??e?a? p??pe? ?a pe???aµß??e? ?d???e? p??
    af????? t?? apa?t??µe?e? e????e?e? µet? t??
    p?a?µat?p???s? e??? s?µa?t???? pe??stat????
    pa?aß?as?? t?? asf??e?a?, ?ste ?? ?e?t?????e? t??
    ???a??sµ?? ?a e?a???????s??? ?a p?a?µat?p?????ta?
    µe ??p????? e?a??a?t????? t??p???, ??? ?t??
    a?t?µet?p?ste? t? p??ß??µa asf??e?a? t?? ?S (p.?.
    ?a ?p???e? efed???? Site).

23
?a?a?t???st??? ????t???? ?sf??e?a? ?S (1)
  • ?ta? a?apt?ss??µe µ?a ????t??? ?sf??e?a?,
    ep?d?????µe ta a??????a
  • ?? ?d???e? ?a? ta µ?t?a p??stas?a? ?a ?a??pt???
    t? s????? t?? a?a??? t?? ?S ?a? ??e? t??
    ?e?t?????e? t?? (p????t?ta)
  • ?a ??ß??µe ?p??? t? s??????? te???????a ?a? t??
    d?afa???µe?e? e?e???e?? (ep??a???t?ta)
  • ?e ??p??e? t??p?p???se?? ? p??s???e? ?a µp??e? ?
    ????t??? ?a ?a??pte? µ????? a??a??? ? epe?t?se??
    st? ?S (?e???e?s?µ?t?ta)

24
?a?a?t???st??? ????t???? ?sf??e?a? ?S (2)
  • ?a? p??pe? ?a ?aµß????µe ?p??? ?t?
  • ? ????t??? ?sf??e?a? ape????eta? st? s????? t??
    µe??? t?? ???a??sµ??, ?a? ?a p??pe? ?a e??a?
    e????a ?ata???t? ap? ????? (saf??e?a ?a? e?????a
    ?ata???s??)
  • ? pe????af? t?? µ?t??? asf??e?a? de ?a p??pe? ?a
    desµe?e? t?? ???a??sµ? se s???e???µ??a p?????ta
    ?a? te???????e? (te????????? a?e?a?t?s?a)
  • ?? apa?t?se?? asf??e?a? p??pe? ?a ?a??pt??? t??
    a????e? t?? s???e???µ???? ???a??sµ??
    (?ata?????t?ta)
  • ta µ?t?a p??stas?a? ?a p??pe? ?a µp????? ?a
    efa?µ?st??? ????? ?a d?s?e?a????? d?sa?????a t??
    d?ast????t?te? t?? ???st?? t?? ?S (efa?µ?s?µ?t?ta)

25
??aµ??f?s? ????t???? ?sf??e?a? ?S ???se???se??
  • ??????a µe t?? ???a??sµ? ?a? t? ?S ??a t? ?p???
    a?apt?ss??µe µ?a ????t??? ?sf??e?a?, µp????µe ?a
    a???????s??µe
  • ??? p??s????s? t?? ?p???e?t???? efa?µ????
  • ep?t?ept?? e????e?e? ?e?????ta? µ??? e?e??e? p??
    p??ß??p??ta? ?a? p??d?a???f??ta? st?? ????t???
    ?sf??e?a?
  • ??? p??s????s? t?? d?a???t?? e??????
  • ??e? ?? e????e?e? p?? de? pe???aµß????ta? st??
    apa???e?µ??e? ?e?????ta? ep?t?ept?? ?a? s?µf??e?
    µe t?? p???t???
  • ??? p??s????s? t?? ?at? pe??pt?s? efa?µ????
  • ?? ?d???e? asf??e?a? t?? ????t???? ?e?????ta?
    ?p???e?t????, ?p???e? ?µ?? ? d??at?t?ta ?a
    pa?a?aµf???? ?at? pe??pt?s?

26
?fa?µ??? ????t???? ?sf??e?a? ?S ?a?????te?
?p?t???a? (1)
  • ??a ????t??? ?sf??e?a? ?S ep?t?????e? ?a??te?a
    t??? st????? t?? ?ta?
  • ?p?st????e? t??? ep??e???µat????? st????? t??
    ???a??sµ??
  • ? a??te?? d?????s? t?? ???a??sµ?? ?p?st????e? ?a?
    s?µµet??e? e?e??? st?? efa?µ??? t??
  • e??a? ?at?????? ??a t? s???e???µ??? pe??ß?????
    ?p?? efa?µ??eta? (???a??s?a?? ????t???a)
  • ?? ???ste? e?pa?de???ta? ?a? e??µe?????ta?
    ?at?????a

27
?fa?µ??? ????t???? ?sf??e?a? ?S ?a?????te?
?p?t???a? (2)
  • ?a? ?ta?
  • ?p?????? d?ad??as?e? a???????s?? t??
    ap?te?esµat???t?t?? t??, ?ste ?a a?a?e??e?ta?
    a?a?????
  • efa?µ??eta? stad?a??, a?????a µe t? ßa?µ? t??
    a??a??? p?? ep?f??e? ? efa?µ??? t?? ????t????
    st?? d?ast????t?te? t?? ???st??
  • ????? e????? ?a? ?µes? p??sßas? se a?t?? ???? ??
    ???ste? t?? ?S

28
??a?e???s? t?? ????t???? ?sf??e?a? ?S
  • ?? pe??e??µe?? ?a? ?? d?ad??as?e? efa?µ???? t??
    ????t???? ?sf??e?a? ?a p??pe? ?a a?a?e?????ta?
  • Se ta?t??? ??????? d?ast?µata (?a?t????
    a?a?e???se??)
  • ?pe?ta ap? s?µa?t??? pe??stat??? pa?aß?as?? t??
    asf??e?a?, ??s??de?? a??a??? st? ????? ? t?
    ????sµ???, ep??tas? ? d?as??des? t?? ?S µe ???a
    s?st?µata (??ta?te? a?a?e???se??)

29
S?????
  • H ????t??? ?sf??e?a? ?S ap?te?e? t? ßas???
    e??a?e?? ??a t? d?a?e???s? t?? asf??e?a? t?? ?S
  • ? a??pt??? µ?a? ????t???? apa?te? t?? ?ata??af?,
    se ??a ????af?, t?? ßas???? st???? t?? asf??e?a?,
    µa?? µe t??? t??p??? ?a? ta µ?sa ep?te???? t??
    st???? a?t??
  • ?? pe??e??µe??, ? µ??f? ?a? ? t??p?? efa?µ????
    µ?a? ????t???? µp??e? ?a d?af???p??????? a?????a
    µe t?? ???a??sµ? ?a? t? ?S
  • ? ap?te?esµat??? efa?µ??? t?? e?a?t?ta?, µeta??
    ?????, ap? t?? ?p?st????? ?a? s?µµet??? t??
    d?????s??, t? stad?a?? efa?µ??? ?a? t? s?µß???
    t?? ????t???? st?? ep?te??? t?? st???? t??
    ???a??sµ??
Write a Comment
User Comments (0)
About PowerShow.com