雷火电竞

雷火电竞>>技术前沿>>网站系统安全
信息系统安全等级保护评测全过程解读
作者:西安APP开发 | 转载 来源:等级保护评测 | 时间:2019年1月13日| 点击:0次 | 【评论】

信息安全等级测评是测评机构依据国家信息安全等级保护制度规定,受有关单位委托,具有资质的等级保护测评机构按照有关管理规范和技术标准,运用科学的手段和方法,对处理特定应用的信息系统,采用安全技术测评和安全管理测评方式,对保护状况进行检测评估,判定受测系统的技术和管理级别与所定安全等级要求的符合程度,基于符合程度给出是否满足所定安全等级的结论,针对安全不符合项提出安全整改建议。

等级保护完全实施过程

等级保护评测

★XINXIXITONGDINGJI

DINGJIBEIANSHIXINXIANQUANDENGJIBAOHUDESHOUYAOHUANJIE。XINXIXITONGDINGJIGONGZUOYINGANZHAO“ZIZHUDINGJI、ZHUANJIAPINGSHEN、ZHUGUANBUMENSHENPI、GONGANJIGUANSHENHE”DEYUANZEJINXING。ZAIDENGJIBAOHUGONGZUOZHONG,XINXIXITONGYUNXINGSHIYONGDANWEIHEZHUGUANBUMENANZHAO“SHEIZHUGUANSHEIFUZE,SHEIYUNYINGSHEIFUZE”DEYUANZEKAIZHANGONGZUO,BINGJIESHOUXINXIANQUANJIANGUANBUMENDUIKAIZHANDENGJIBAOHUGONGZUODEJIANGUAN。

★ZONGTIANQUANGUIHUA

总体安全规划阶段的目标是根据信息系统的划分情况、信息系统的定级情况、信息系统承载业务情况,通过分析明确信息系统安全需求,设计合理的、满足等级保护要求的总体安全方案,并制定出安全实施计划,以指导后续的信息系统安全建设工程实施。对于已运营(运行)的信息系统,需求分析应当首先分析判断信息系统的安全保护现状与等级保护要求之间的差距。

★ANQUANSHEJIYUSHISHI

ANQUANSHEJIYUSHISHIJIEDUANDEMUBIAOSHIANZHAOXINXIXITONGANQUANZONGTIFANGANDEYAOQIU,JIEHEXINXIXITONGANQUANJIANSHEXIANGMUJIHUA,FENQIFENBULUOSHIANQUANCUOSHI

★ANQUANYUNXINGWEIHU

ANQUANYUNXINGYUWEIHUSHIDENGJIBAOHUSHISHIGUOCHENGZHONGQUEBAOXINXIXITONGZHENGCHANGYUNXINGDEBIYAOHUANJIE,SHEJIDENEIRONGJIAODUO,BAOKUOANQUANYUNXINGYUWEIHUJIGOUHEANQUANYUNXINGYUWEIHUJIZHIDEJIANLI,HUANJING、ZICHAN、SHEBEI、JIEZHIDEGUANLI,WANGLUO、XITONGDEGUANLI,MIMA、MIYAODEGUANLI,YUNXING、BIANGENGDEGUANLI,ANQUANZHUANGTAIJIANKONGHEANQUANSHIJIANCHULI,ANQUANSHENJIHEANQUANJIANCHADENGNEIRONG。

★XINXIXITONGZHONGZHI

XINXIXITONGZHONGZHIJIEDUANSHIDENGJIBAOHUSHISHIGUOCHENGZHONGZUIHOUHUANJIE。DANGXINXIXITONGBEIZHUANYI、ZHONGZHIHUOFEIQISHI,ZHENGQUECHULIXITONGNEIDEMINGANXINXIDUIYUQUEBAOJIGOUXINXIZICHANDEANQUANSHIZHIGUANZHONGYAODE。ZAIXINXIXITONGSHENGMINGZHOUQIZHONG,YOUXIEXITONGBINGBUSHIZHENZHENGYIYISHANGDEFEIQI,ERSHIGAIJINJISHUHUOZHUANBIANYEWUDAOXINDEXINXIXITONG,DUIYUZHEIXIEXINXIXITONGZAIZHONGZHICHULIGUOCHENGZHONGYINGQUEBAOXINXIZHUANYI、SHEBEIQIANYIHEJIEZHIXIAOHUIDENGFANGMIANDEANQUAN。

等级测评的工作流程

等级测评工作流程

★ CEPINGDUIXIANGQUEDING:GENJUYIJINGLEJIEDAODEBEICEXITONGXINXI,FENXIZHENGGEBEICEXITONGJIQISHEJIDEYEWUYINGYONGXITONG,QUEDINGCHUBENCICEPINGDECEPINGDUIXIANG。

★ CEPINGZHIBIAOQUEDING:GENJUYIJINGLEJIEDAODEBEICEXITONGDINGJIJIEGUO,QUEDINGCHUBENCICEPINGDECEPINGZHIBIAO。

★ CEPINGGONGJUJIERUDIANQUEDING:QUEDINGXUYAOJINXINGGONGJUCESHIDECEPINGDUIXIANG,XUANZECESHILUJING,GENJUCESHILUJINGQUEDINGCESHIGONGJUDEJIERUDIAN。

★ CEPINGNEIRONGQUEDING:QUEDINGXIANCHANGCEPINGDEJUTISHISHINEIRONG,JIDANYUANCEPINGNEIRONG。

★ CEPINGSHISHISHOUCEKAIFA:BIANZHICEPINGSHISHISHOUCE,XIANGXIMIAOSHUXIANCHANGCEPINGDEGONGJU、FANGFAHECAOZUOBUZHOUDENG,JUTIZHIDAOCEPINGRENYUANRUHEJINXINGCEPINGHUODONG。

现场测评阶段

XIANCHANGCEPINGSHIJISHANGJIUSHIDANXIANGCEPING,FENBIECONGJISHUSHANGDEWULIANQUAN、WANGLUOANQUAN、ZHUJIXITONGANQUAN、YINGYONGANQUANHESHUJUANQUANWUGECENGMIANHEGUANLISHANGDEANQUANGUANLIJIGOU、ANQUANGUANLIZHIDU、RENYUANANQUANGUANLI、XITONGJIANSHEGUANLIHEXITONGYUNWEIGUANLIWUGEFANGMIANFENBIEJINXING。

★ WULIANQUAN:TONGGUORENYUANFANGTAN、WENDANGSHENCHAHESHIDICHAKANDEFANGSHICEPINGXINXIXITONGDEWULIANQUANBAOZHANGQINGKUANG。ZHUYAOSHEJIDUIXIANGWEIWULIJICHUSHESHI。ZAINEIRONGSHANG,WULIANQUANCENGMIANCEPINGSHISHIGUOCHENGSHEJI10GECEPINGDANYUAN,BAOKUO:WULIWEIZHIDEXUANZE、WULIFANGWENKONGZHI、FANGDAOQIEHEFANGPOHUAI、FANGLEIJI、FANGHUO、FANGSHUIHEFANGCHAO、FANGJINGDIAN、WENSHIDUKONGZHI、DIANLIGONGYING、DIANCIFANGHU。

★ WANGLUOANQUAN:TONGGUOFANGRENYUANFANGTAN、PEIZHIJIANCHAHEGONGJUCESHIDEFANGSHICEPINGXINXIXITONGDEWANGLUOANQUANBAOZHANGQINGKUANG。ZHUYAOSHEJIDUIXIANGWEIWANGLUOHULIANSHEBEI、WANGLUOANQUANSHEBEIHEWANGLUOTUOPUJIEGOU。ZAINEIRONGSHANG,WANGLUOANQUANCENGMIANCEPINGSHISHIGUOCHENGSHEJI7GECEPINGDANYUAN,BAOKUO:JIEGOUANQUAN、FANGWENKONGZHI、ANQUANSHENJI、BIANJIEWANZHENGXINGJIANCHA、RUQINFANGFAN、WANGLUOSHEBEIFANGHU、EYIDAIMAFANGFAN(ZHENDUISANJIXITONG)。

★ ZHUJIANQUAN:TONGGUORENYUANFANGTAN、PEIZHIJIANCHAHEGONGJUCESHIDEFANGSHICEPINGXINXIXITONGDEZHUJIANQUANBAOZHANGQINGKUANG。ZHUYAOSHEJIDUIXIANGWEIGELEIFUWUQIDECAOZUOXITONG、SHUJUKUGUANLIXITONG。ZAINEIRONGSHANG,ZHUJIXITONGANQUANCENGMIANCEPINGSHISHIGUOCHENGSHEJI7GECEPINGDANYUAN,BAOKUO:SHENFENJIANBIE、FANGWENKONGZHI、ANQUANSHENJI、RUQINFANGFAN、EYIDAIMAFANGFAN、ZIYUANKONGZHI、SHENGYUXINXIBAOHU(ZHENDUISANJIXITONG)。

★ YINGYONGANQUAN:TONGGUORENYUANFANGTAN、PEIZHIJIANCHAHEGONGJUCESHIDEFANGSHICEPINGXINXIXITONGDEYINGYONGANQUANBAOZHANGQINGKUANG,ZHUYAOSHEJIDUIXIANGWEIGELEIYINGYONGXITONG。ZAINEIRONGSHANG,YINGYONGANQUANCENGMIANCEPINGSHISHIGUOCHENGSHEJI9GECEPINGDANYUAN,BAOKUO:SHENFENJIANBIE、FANGWENKONGZHI、ANQUANSHENJI、TONGXINWANZHENGXING、TONGXINBAOMIXING、RUANJIANRONGCUO、ZIYUANKONGZHI、SHENGYUXINXIBAOHU(ZHENDUISANJIXITONG)、KANGDILAI(ZHENDUISANJIXITONG)。

★ SHUJUANQUAN:TONGGUORENYUANFANGTAN、PEIZHIJIANCHADEFANGSHICEPINGXINXIXITONGDESHUJUANQUANBAOZHANGQINGKUANG,ZHUYAOSHEJIDUIXIANGWEIXINXIXITONGDEGUANLISHUJUJIYEWUSHUJUDENG。ZAINEIRONGSHANG,SHUJUANQUANCENGMIANCEPINGSHISHIGUOCHENGSHEJI3GECEPINGDANYUAN,BAOKUO:SHUJUWANZHENGXING、SHUJUBAOMIXING、BEIFENHEHUIFU。

★ ANQUANGUANLIZHIDU:TONGGUORENYUANFANGTAN、WENDANGSHENCHAHESHIDICHAKANDEFANGSHICEPINGXINXIXITONGDEANQUANGUANLIZHIDUQINGKUANG。ZAINEIRONGSHANG,ANQUANGUANLIZHIDUFANGMIANCEPINGSHISHIGUOCHENGSHEJI3GECEPINGDANYUAN,BAOKUO:GUANLIZHIDU、ZHIDINGHEFABU、PINGSHENHEXIUDING。

★ ANQUANGUANLIJIGOU:TONGGUORENYUANFANGTAN、WENDANGSHENCHADEFANGSHICEPINGXINXIXITONGDEANQUANGUANLIJIGOUQINGKUANG。ZAINEIRONGSHANG,ANQUANGUANLIJIGOUFANGMIANCEPINGSHISHIGUOCHENGSHEJI5GECEPINGDANYUAN,BAOKUO:GANGWEISHEZHI、RENYUANPEIBEI、SHOUQUANHESHENPI、GOUTONGHEHEZUO、SHENHEHEJIANCHA。

★ RENYUANANQUANGUANLI:TONGGUORENYUANFANGTAN、WENDANGSHENCHADEFANGSHICEPINGXINXIXITONGDERENYUANANQUANGUANLIQINGKUANG。ZAINEIRONGSHANG,RENYUANANQUANGUANLIFANGMIANCEPINGSHISHIGUOCHENGSHEJI5GECEPINGDANYUAN,BAOKUO:RENYUANLUYONG、RENYUANLIGANG、RENYUANKAOHE、ANQUANYISHIJIAOYUHEPEIXUN、WAIBURENYUANFANGWENGUANLI。

★ XITONGJIANSHEGUANLI:TONGGUORENYUANFANGTAN、WENDANGSHENCHADEFANGSHICEPINGXINXIXITONGDEXITONGJIANSHEGUANLIQINGKUANG。ZAINEIRONGSHANG,XITONGJIANSHEGUANLIFANGMIANCEPINGSHISHIGUOCHENGSHEJI11GECEPINGDANYUAN,BAOKUO:XITONGDINGJI、ANQUANFANGANSHEJI、CHANPINCAIGOUHESHIYONG、ZIXINGRUANJIANKAIFA、WAIBAORUANJIANKAIFA、GONGCHENGSHISHI、CESHIYANSHOU、XITONGJIAOFU、ANQUANFUWUSHANGXUANZE、XITONGBEIAN(ZHENDUISANJIXITONG)、XITONGCEPING(ZHENDUISANJIXITONG)。

★ XITONGYUNWEIGUANLI:TONGGUORENYUANFANGTAN、WENDANGSHENCHADEFANGSHICEPINGXINXIXITONGDEXITONGYUNWEIGUANLIQINGKUANG。ZAINEIRONGSHANG,XITONGYUNWEIGUANLIFANGMIANCEPINGSHISHIGUOCHENGSHEJI13GECEPINGDANYUAN,BAOKUO:HUANJINGGUANLI、ZICHANGUANLI、JIEZHIGUANLI、SHEBEIGUANLI、WANGLUOANQUANGUANLI、XITONGANQUANGUANLI、EYIDAIMAFANGFANGUANLI、MIMAGUANLI、BIANGENGGUANLI、BEIFENYUHUIFUGUANLI、ANQUANSHIJIANCHUZHI、YINGJIYUANGUANLI、JIANKONGGUANLIHEANQUANGUANLIZHONGXIN(ZHENDUISANJIXITONG)。

分析与报告编制阶段

等级保护评测

★ DANXIANGCEPINGJIEGUOFENXI:ZHENDUICEPINGZHIBIAOZHONGDEDANGECEPINGXIANG,JIEHEJUTICEPINGDUIXIANG,KEGUAN、ZHUNQUEDIFENXICEPINGZHENGJU。

★ DANYUANCEPINGJIEGUOPANDING:JIANGDANXIANGCEPINGJIEGUOJINXINGHUIZONG,FENBIETONGJIBUTONGCEPINGDUIXIANGDEDANXIANGCEPINGJIEGUO,CONGERPANDINGDANYUANCEPINGJIEGUO,BINGYIBIAOGEDEXINGSHIZHUYILIECHU。

★ ZHENGTICEPING:ZHENDUIDANXIANGCEPINGJIEGUODEBUFUHEXIANG,CAIQUZHUTIAOPANDINGDEFANGFA,CONGANQUANKONGZHIJIAN、CENGMIANJIANHEQUYUJIANCHUFAKAOLV,JICHUZHENGTICEPINGDEJUTIJIEGUO,BINGDUIXITONGJIEGOUJINXINGZHENGTIANQUANCEPING。

★ FENGXIANFENXI:JUDENGJIBAOHUDEXIANGGUANGUIFANHEBIAOZHUN,CAIYONGFENGXIANFENXIDEFANGFAFENXIDENGJICEPINGJIEGUOZHONGCUNZAIDEANQUANWENTIKENENGDUIBEICEXITONGANQUANZAOCHENGDEYINGXIANG。

★ DENGJICEPINGJIELUNXINGCHENG:ZAICEPINGJIEGUOHUIZONGDEJICHUSHANG,ZHAOCHUXITONGBAOHUXIANZHUANGYUDENGJIBAOHUJIBENYAOQIUZHIJIANDECHAJU,BINGXINGCHENGDENGJICEPINGJIELUN。 CEPINGBAOGAOBIANZHI:GENJUDENGJICEPINGJIELUN,BIANZHICEPINGBAOGAO,BAOKUOGAISHU、BEICEXITONGMIAOSHU、CEPINGDUIXIANGSHUOMING、CEPINGZHIBIAOSHUOMING、CEPINGNEIRONGHEFANGFASHUOMING、DANYUANCEPING、ZHENGTICEPING、CEPINGJIEGUOHUIZONG、FENGXIANFENXIHEPINGJIA、DENGJICEPINGJIELUN、ZHENGGAIJIANYIDENG。

此内容DOC下载 此内容PDF下载

【全文完】
0 ([$-顶稿人数-$])
0 ([$-踩稿人数-$])

版权声明:

1、XIANYICONGWANGZHANNEIRONGZHONGFANZHUMING“LAIYUAN:XXX(FEIXIANYICONGWANGZHAN)”DEZUOPIN,ZHUANZAIZIQITAMEITI,ZHUANZAIMUDEZAIYUCHUANDIGENGDUOXINXI,QIZHONGSHEJIDEWANGZHANJIANSHE,WANGZHANYOUHUA,BAIDUGUANJIANCIYOUHUA,XIANRUANJIANKAIFADENGJISHUXIJIEBINGBUDAIBIAOBENZHANZANTONGZHICHIQIGUANDIAN,BINGBUDUIQIZHENSHIXINGFUZE。DUIYUSHUMING“XIANYICONG”DEZUOPINXIBENZHANBANQUANSUOYOU,RENHERENZHUANZAIQINGSHUMINGLAIYUAN,FOUZEXIANYICONGJIANGZHUIJIUQIXIANGGUANFALVZEREN。

2、BENZHANNEIRONGZHONGWEISHENGMINGWEI“YUANCHUANG”DENEIRONGKENENGYUANZIQITAWANGZHAN,DANBINGBUDAIBIAOBENZHANZHICHIQIGUANDIAN,DUICIDAILAIDEFALVJIUFENJIQITAZERENYUWOFANGWUGUAN。RUGUOCINEIRONGQINFANLENINDEQUANYI,QINGLIANXIWOFANGJINXINGSHANCHU。