中海信托信息安全風(fēng)險(xiǎn)評(píng)估及整改項(xiàng)目技術(shù)方案

1、北京天融信公司第32頁目錄1概述概述.................................................................................................................................................351.1項(xiàng)目背景................................................

2、.................................................................................351.2項(xiàng)目目標(biāo).................................................................................................................................3

3、51.3項(xiàng)目?jī)?nèi)容.................................................................................................................................361.4項(xiàng)目設(shè)計(jì)原則........................................................................

4、.................................................371.5項(xiàng)目范圍.................................................................................................................................381.6文件和法律法規(guī).....................

5、................................................................................................382天融信對(duì)本項(xiàng)目的理解天融信對(duì)本項(xiàng)目的理解.....................................................................................................

6、............392.1對(duì)項(xiàng)目目標(biāo)的理解.................................................................................................................392.2對(duì)項(xiàng)目特點(diǎn)的理解.....................................................................

7、............................................393項(xiàng)目總體方法與流程項(xiàng)目總體方法與流程.....................................................................................................................413.1概述...............................

8、..........................................................................................................413.2天融信風(fēng)險(xiǎn)評(píng)估方法....................................................................................................

9、.........443.3本項(xiàng)目采用的安全風(fēng)險(xiǎn)評(píng)估方法.........................................................................................453.4技術(shù)難點(diǎn)和關(guān)鍵突破.........................................................................................

10、....................484信息資產(chǎn)調(diào)查和賦值信息資產(chǎn)調(diào)查和賦值.....................................................................................................................504.1信息資產(chǎn)概述...................................................

11、......................................................................504.2信息資產(chǎn)分類.........................................................................................................................504.3保護(hù)對(duì)象框架.......

12、..................................................................................................................564.4資產(chǎn)識(shí)別過程...............................................................................................

13、..........................584.5信息資產(chǎn)賦值.........................................................................................................................594.6賦值工作操作方法指南...............................................

14、..........................................................645IT設(shè)備評(píng)估設(shè)備評(píng)估....................................................................................................................................665.1評(píng)估的過程.......

15、......................................................................................................................665.2評(píng)估的方法............................................................................................

16、.................................685.3評(píng)估的內(nèi)容.............................................................................................................................705.4評(píng)估的風(fēng)險(xiǎn)和應(yīng)對(duì).......................................

17、..........................................................................726網(wǎng)絡(luò)設(shè)備安全風(fēng)險(xiǎn)評(píng)估網(wǎng)絡(luò)設(shè)備安全風(fēng)險(xiǎn)評(píng)估.................................................................................................................736.1評(píng)估過程描

18、述.........................................................................................................................746.2評(píng)估的方法........................................................................................

19、.....................................776.3評(píng)估的內(nèi)容.............................................................................................................................786.4評(píng)估的風(fēng)險(xiǎn)和應(yīng)對(duì)...................................

20、..............................................................................817應(yīng)用系統(tǒng)和管理安全風(fēng)險(xiǎn)評(píng)估應(yīng)用系統(tǒng)和管理安全風(fēng)險(xiǎn)評(píng)估.....................................................................................................817.1評(píng)估過程描述.

21、........................................................................................................................847.2評(píng)估方法...........................................................................................

22、......................................467.3評(píng)估內(nèi)容.................................................................................................................................477.4風(fēng)險(xiǎn)及應(yīng)對(duì)措施................................

23、.....................................................................................608安全增強(qiáng)與加固安全增強(qiáng)與加固......................................................................................................................

24、.......618.1安全加固內(nèi)容.........................................................................................................................628.2安全加固流程......................................................................

25、...................................................649應(yīng)急響應(yīng)服務(wù)應(yīng)急響應(yīng)服務(wù).................................................................................................................................659.1服務(wù)目標(biāo)：...............

26、..............................................................................................................65北京天融信公司第34頁19.1項(xiàng)目風(fēng)險(xiǎn)分析及規(guī)避措施..................................................................................

27、...................9219.2項(xiàng)目的保密控制.....................................................................................................................9420天融信信息安全服務(wù)業(yè)務(wù)介紹天融信信息安全服務(wù)業(yè)務(wù)介紹.........................................

28、........................................................9520.1安全服務(wù)組織結(jié)構(gòu)圖.............................................................................................................9520.2安全服務(wù)業(yè)務(wù)范圍..........................

29、.......................................................................................9621項(xiàng)目實(shí)施質(zhì)量保證項(xiàng)目實(shí)施質(zhì)量保證.................................................................................................................

30、....9821.1項(xiàng)目執(zhí)行人員的質(zhì)量職責(zé).....................................................................................................9821.2天融信安全服務(wù)質(zhì)量保證體系嚴(yán)格貫徹以下過程.............................................................9822項(xiàng)目驗(yàn)收方式

31、項(xiàng)目驗(yàn)收方式...........................................................................................................................10122.1驗(yàn)收方法確認(rèn)..............................................................................

32、.........................................10222.2驗(yàn)收程序...............................................................................................................................10322.3版本控制..............................

33、.................................................................................................10522.4交付件歸檔辦法.............................................................................................................