安言咨询信息安全服务白皮书-v3.4

V3.42005©„CISSPCertifiedInformationSystemSecurityProfessional„CISP„BS7799LABS7799„CISACertifiedInformationSystemAuditorIT„ITILFoundationIT„MCSEMCSDCCSECCIE2.2.1IATFSSE-CMMBS7799SSE-CMMSSE-CMMIATFBS7799ISMSPDCA‹Policy‹Preparation‹Assessment‹Design‹Implement‹Support‹TrainingP-PADIS-TPADISPADISP-PADIS-T‹‹‹BS77992‹‹‹3‹‹‹‹‹BS7799ISMSBS77993.3.1BS7799BS7799BS7799BritishStandardsInstituteBSI1995219995BSIBS7799200012BS7799ISOISO/IEC17799BS7799BS7799ISMS„PreparationISMSISMS¾¾¾BS7799¾¾„RealizationISMSISMS¾BCP¾ISMSReview¾ISMS¾ISMS„OperationISMSISMSBS7799¾¾¾Checklist¾ISMS„CertificationISMS¾¾15‹ISMS‹‹BS7799‹‹‹SoA‹ISMS‹ISMS‹‹BS7799‹‹‹‹3.2EnterpriseRiskAssessmentERABS7799ISO13335SSE-CMMOCTAVE‹‹‹‹‹‹‹‹z‹‹‹‹‹IT‹‹‹‹‹‹‹‹‹‹‹‹‹‹zzzzzzzzzzzzzzzzIDSVPNzWebzAUPzzzzzzzzz„BS7799„„„3.4„GDCBS7799GDCBearpointGlobalDevelopmentCenterCMMI5GDC20054BS7799GDCISMSGDCBS7799„BS7799BS7799„BS7799„BS7799BS779920045‹Windows‹Unix‹‹Web‹‹DoS‹‹‹‹‹IDS„„¾¾¾IP¾¾¾„¾¾¾¾Web¾SNMP¾LDAPSQLServerNetBIOS„¾Exploit¾¾¾IDS¾„¾¾„¾¾IDS„„¾¾zzzzzzNSSzzzz‹Windows‹UnixSolarisAIXLinuxFreeBSD‹Cisco‹OracleMSSQLServer‹WebApacheIISSSHzzzzz„„BS7799„„„CFCA„CNNIC„CNOOC„„„„@aryasec.com