ÐÅÏ¢Çå¾²ÖÎÀíϵͳ

Ðû²¼Ê±¼ä 2019-08-14

ISO27001 ÐÅÏ¢Çå¾²ÖÎÀíÊÊÓùæÔòISO/IEC27001µÄǰÉíΪӢ¹úµÄBS7799±ê×¼£¬£¬£¬£¬£¬ £¬ £¬¸Ã±ê×¼ÓÉÓ¢¹ú±ê׼Э»á£¨BSI£©ÓÚ1995Äê2ÔÂÌá³ö£¬£¬£¬£¬£¬ £¬ £¬²¢ÓÚ1995Äê5ÔÂÐÞ¶©¶ø³ÉµÄ¡£¡£¡£¡£1999ÄêBSIÖØÐÂÐÞ¸ÄÁ˸ñê×¼¡£¡£¡£¡£BS7799·ÖΪÁ½¸ö²¿·Ö£ºBS7799-1£¬£¬£¬£¬£¬ £¬ £¬ÐÅÏ¢Çå¾²ÖÎÀíʵÑ鹿ÔòBS7799-2£¬£¬£¬£¬£¬ £¬ £¬ÐÅÏ¢Çå¾²ÖÎÀíϵͳ¹æ·¶¡£¡£¡£¡£µÚÒ»²¿·Ö¶ÔÐÅÏ¢Çå¾²ÖÎÀí¸ø³ö½¨Ò飬£¬£¬£¬£¬ £¬ £¬¹©ÈÏÕæÔÚÆä×éÖ¯Æô¶¯¡¢ÊµÑé»òά»¤Çå¾²µÄְԱʹÓ㻣»£»£»µÚ¶þ²¿±ç°×Ã÷Îú½¨É衢ʵÑéºÍÎļþ»¯ÐÅÏ¢Çå¾²ÖÎÀíϵͳ£¨ISMS£©µÄÒªÇ󣬣¬£¬£¬£¬ £¬ £¬»®¶¨ÁËÆ¾Ö¤×ÔÁ¦×éÖ¯µÄÐèҪӦʵÑéÇå¾²¿ØÖƵÄÒªÇ󡣡£¡£¡£ÏÖÔÚ£¬£¬£¬£¬£¬ £¬ £¬ÔÚÐÅÏ¢Çå¾²ÖÎÀí·½Ãæ£¬£¬£¬£¬£¬ £¬ £¬Ó¢¹ú±ê×¼ISO27001:2005ÒѾ­³ÉΪÌìÏÂÉÏÓ¦ÓÃ×îÆÕ±éÓëµä·¶µÄÐÅÏ¢Çå¾²ÖÎÀí±ê×¼£¬£¬£¬£¬£¬ £¬ £¬ËüÊÇÔÚBSI/DISCµÄBDD/2ÐÅÏ¢Çå¾²ÖÎÀíίԱ»áÖ¸µ¼ÏÂÖÆ¶©Íê³É£¬£¬£¬£¬£¬ £¬ £¬×îа汾ΪISO27001:2013¡£¡£¡£¡£


ISO 27001FoundationÅàѵÄÚÈÝ×ÅÖØÓÚʵÑéÐÅÏ¢Çå¾²ÖÎÀíϵͳ£¨ISO 27001£©µÄÀú³ÌÓëÒªÁ죬£¬£¬£¬£¬ £¬ £¬¸ü¶àµÄÊǽâ˵ÔõÑùÔËÓúÃISO 27001±ê×¼£¬£¬£¬£¬£¬ £¬ £¬ÒÔ¼°¹ØÓÚÐÅÏ¢Çå¾²ÖÎÀíÔÚ¸÷ÐÐÒµ¡¢ÆóÒµµÄʵÑéÒªÁì˼Ð÷Óë×î¼Ñʵ¼ù£¬£¬£¬£¬£¬ £¬ £¬ÀàËÆÓÚÐÅÏ¢Çå¾²ÖÎÀíϵͳ½¨ÉèÀú³ÌÖС°½ÌÁ·Ô±¡±µÄÅàѵ¡£¡£¡£¡£ISO 27001 FoundationÊÇÓÉÅàѵ»ú¹¹¾ÙÐÐÅàѵ£¬£¬£¬£¬£¬ £¬ £¬²¢Í¨¹ý¿¼ÊÔÈÏÖ¤»ú¹¹£¨APMG£¬£¬£¬£¬£¬ £¬ £¬APM Group´ú±íÓ¢¹úÉÌÎñ²¿OGCÔÚÈ«ÇòÍÆ¹ãÐÅÏ¢Ç徲ϵͳÅàѵ£©¿¼ÊÔ¼°¸ñºóËù½ÒÏþµÄÖ¤Êé¡£¡£¡£¡£


¡ñ ÈÏÖ¤ÀûÒæ


1.ÇкÏÖ´ÂÉÀýÔòÒªÇó

Ö¤ÊéµÄ»ñµÃ£¬£¬£¬£¬£¬ £¬ £¬¿ÉÒÔÏòȨÍþ»ú¹¹Åú×¢£¬£¬£¬£¬£¬ £¬ £¬×éÖ¯×ñÊØÁËËùÓÐÊÊÓõÄÖ´ÂÉÀýÔò¡£¡£¡£¡£´Ó¶ø±£»£»£»£»¤ÆóÒµºÍÏà¹Ø·½µÄÐÅϢϵͳÇå¾²¡¢ÖªÊ¶²úȨ¡¢ÉÌÒµÉñÃØµÈ¡£¡£¡£¡£


2.ά»¤ÆóÒµµÄÉùÓþ¡¢Æ·ÅƺͿͻ§ÐÅÈÎ

Ö¤ÊéµÄ»ñµÃ£¬£¬£¬£¬£¬ £¬ £¬¿ÉÒÔÇ¿»¯Ô±¹¤µÄÐÅÏ¢Çå¾²Òâʶ£¬£¬£¬£¬£¬ £¬ £¬¹æ·¶×éÖ¯ÐÅÏ¢Çå¾²ÐÐΪ£¬£¬£¬£¬£¬ £¬ £¬ïÔÌ­ÈËΪԵ¹ÊÔ­ÓÉÔì³ÉµÄ²»ÐëÒªµÄËðʧ¡£¡£¡£¡£


3.ÍÆÐÐÐÅÏ¢Çå¾²ÖÎÀíÔðÈÎ

Ö¤ÊéµÄ»ñµÃ£¬£¬£¬£¬£¬ £¬ £¬×Ô¼º¾ÍÄÜ֤ʵ×éÖ¯ÔÚ¸÷¸ö²ãÃæµÄÇå¾²±£»£»£»£»¤É϶¼Ö§¸¶ÁË׿ÓÐЧ¹ûµÄÆð¾¢£¬£¬£¬£¬£¬ £¬ £¬Åú×¢ÖÎÀí²ãÍÆÐÐÁËÏà¹ØÔðÈΡ£¡£¡£¡£


4.ÔöǿԱ¹¤µÄÒâʶ¡¢ÔðÈθкÍÏà¹ØÊÖÒÕ

Ö¤ÊéµÄ»ñµÃ£¬£¬£¬£¬£¬ £¬ £¬¿ÉÒÔÇ¿»¯Ô±¹¤µÄÐÅÏ¢Çå¾²Òâʶ£¬£¬£¬£¬£¬ £¬ £¬¹æ·¶×éÖ¯ÐÅÏ¢Çå¾²ÐÐΪ£¬£¬£¬£¬£¬ £¬ £¬ïÔÌ­ÈËΪԵ¹ÊÔ­ÓÉÔì³ÉµÄ²»ÐëÒªµÄËðʧ¡£¡£¡£¡£


5.¼á³ÖÓªÒµÒ»Á¬Éú³¤ºÍ¾ºÕùÓÅÊÆ

ÖÜÈ«µÄÐÅÏ¢Çå¾²ÖÎÀíϵͳµÄ½¨É裬£¬£¬£¬£¬ £¬ £¬Òâζ×Å×éÖ¯½¹µãÓªÒµËùÀµÒÔÒ»Á¬µÄ¸÷ÏîÐÅÏ¢×ʲú»ñµÃÁËÍ×ÉÆ±£»£»£»£»¤£¬£¬£¬£¬£¬ £¬ £¬²¢ÇÒ½¨ÉèÓÐÓõÄÓªÒµÒ»Á¬ÐÔÍýÏë¿ò¼Ü£¬£¬£¬£¬£¬ £¬ £¬ÌáÉýÁË×éÖ¯µÄ½¹µã¾ºÕùÁ¦¡£¡£¡£¡£


6.ʵÏÖΣº¦ÖÎÀí

ÓÐÖúÓÚ¸üºÃµØÏàʶÐÅϢϵͳ£¬£¬£¬£¬£¬ £¬ £¬²¢ÕÒµ½±£´æµÄÎÊÌâÒÔ¼°±£»£»£»£»¤µÄ²½·¥£¬£¬£¬£¬£¬ £¬ £¬°ü¹Ü×éÖ¯×ÔÉíµÄÐÅÏ¢×ʲúÄܹ»ÔÚÒ»¸öºÏÀí¶øÍêÕûµÄ¿ò¼ÜÏ»ñµÃÍ×ÉÆ±£»£»£»£»¤£¬£¬£¬£¬£¬ £¬ £¬È·±£ÐÅÏ¢ÇéÐÎÓÐÐò¶øÎȹ̵ØÔË×÷¡£¡£¡£¡£


7.ïÔÌ­Ëðʧ£¬£¬£¬£¬£¬ £¬ £¬½µµÍ±¾Ç®

ISMSµÄʵÑ飬£¬£¬£¬£¬ £¬ £¬ÄܽµµÍÓÉÓÚDZÔÚÇå¾²ÊÂÎñ±¬·¢¶ø¸ø×éÖ¯´øÀ´µÄËðʧ£¬£¬£¬£¬£¬ £¬ £¬ÔÚÐÅϢϵͳÊܵ½ÇÖϮʱ£¬£¬£¬£¬£¬ £¬ £¬ÄÜÈ·±£ÓªÒµÒ»Á¬¿ªÕ¹²¢½«Ëðʧ½µµ½×îµÍˮƽ


¡ñ ¿Î³Ì¹¤¾ß


¡ù  IT˾Àí¡¢ÐÅÏ¢Çå¾²ÈÏÕæÈË

¡ù  ×éÖ¯ÖÐÖ´ÐÐÐÅÏ¢Çå¾²ÖÎÀíϵͳÄÚÉó¼°ITÉó¼ÆÈËÊ¿

¡ù  ÐÅÏ¢Çå¾²ÖÎÀíÁìÓòרҵ´ÓÒµÈËÊ¿


¡ñ ¿Î³ÌÄ¿µÄ


¡ù  Ã÷È·ÐÅÏ¢Çå¾²ÖÎÀíϵͳ±ê×¼µÄаæÒªÇó

¡ù  Ã÷ȷаæÐÅÏ¢Çå¾²ÖÎÀíϵͳ±ê×¼µÄÄÚÉóÒªÇó

¡ù  ÏàʶÐÅÏ¢Çå¾²ÖÎÀíϵͳÈÏ֤ת»»µÄ°²ÅźÍÒªÇó


¡ñ ¿Î³Ì°²ÅÅ


¡ù  ISO 27001:2013аæÏ£Íû

¡ù  аæÐÅÏ¢Çå¾²ÖÎÀíϵͳ±ê×¼¼Ü¹¹

¡ù  аæÐÅÏ¢Çå¾²ÖÎÀíϵͳҪº¦ÄÚÈÝ

¡ù  ÕÆÎÕÐÅÏ¢Çå¾²ÖÎÀíϵͳÉóºËµÄ²ß»®¡¢Ö´ÐС¢±¨¸æºÍ¹Ø±ÕÀú³Ì

¡ù  ÈÏÖ¤Ïà¹ØÒªÇó¼°×ª»»ÆÚµÄ°²ÅÅ


¡ñ Êշѱê×¼¼°ÅàѵÖÜÆÚ


Åàѵʱ¼ä2Ì죬£¬£¬£¬£¬ £¬ £¬Åàѵ¿¼ÊÔÓöÈ5500Ôª/ÈË¡£¡£¡£¡£