Every Network Manager Needs to. Compliance, and Risk Management

Transcription

1 B S M f Pf E Nwk M N Kw f S, C, Rk M S S B L K WW B C A Ex S A Ex S, I

2 B S M f Pf S B I (f If S) W S H S S B P A Ex S, I

3 B S M f Pf Df E k, ff f,,,, f ff, k w k, f j (COSO, 2004, 2) If [& ] k f f f f w k f w [] f (NIS, 2007, 1), f If E S f ( -- ) (NIS, 2007, P1) A Ex S, I

4 B S M f Pf C Df C f q Rq ff f fwk C, k A Ex S, I

5 B S M f Pf S B P E E If M (j,, w, w) SPAM U (W LAN, 3G, 4G) Hk I D k D w z A f f If x x M-f A E () D f w U, M, D f f S R w I f,,, A Ex S, I

6 B S M f Pf M P I S Rk Cf S wk I f k PEOPLE PROCESSES ECHNOLOG A k P,, U f x B f /wk Ex wk/ A Ex S, I 2010 Gw f x 6

7 B S M f Pf S M E P ISO w S P S Oz C Rk A H R A M P E S S W A C O M I M B C M S D M Hw A Ex S, I

8 B S M f Pf E f fs A M S (R/S C) M H S M Nwk S C S B A A S D/D P HW Pf, OS, S LAN/WAN Nwk A F/If A S S D P I S M S S I S Rk/C S A Ex S, I

9 B S M f Pf Af fw f f S I f C- Mw, j P S N ff S,, f - A f G Hk U E w /f f Uz, f, f, f N k f f A Ex S, I

10 B S M f Pf I f S B D z D f f f f D L f R L f f I Ex f,, L f R f I w fx f// Ij f f f f- f f f x $ O 40% f US 2008 A Ex S, I

11 B S M f Pf S B I (f If S) W S H S S B P A Ex S, I

12 B S M f Pf S F A 2010 S w x f f f P I G (Oz) If S Nwk If B S (A) P If N w x A Ex S, I

13 B S M f Pf, V Rk x V Rk C * Rk If P Rq A A Ex S, I

14 B S M f Pf C N C f Ex 1 H E f A, E k 2 C I P P, C f 3 D A Uz A / 4 D A f If x Bk f f x / 5 D A f / D f / f 6 D A f f I f f q f 7 D fw k V, w, D f 8 D q f f Pw WAN 9 F f F, f, qk, 10 w f Eq f / 11 fw f B,, kw 12 O Aq A Ex S, I

15 A f P D B S M f Pf D B - Bkw f D C Q1 D C* $/ $/ $/ () D/E Nf Ex-P R D C # f R IRC 127,717,243 35,691,255 1,552,955 OSF 164,461,103 6, 83,695, , D C R $B *D S: P I

16 A f P D B S M f Pf D B - I C Q1 I C $/ $/ $/ L B (C) L f S V (S Bw) (S Bw) (S Bw) Lw P O C M L N f 1 QR 2009 f A S I C D S: P I, F R, OSF

17 A f P D B S M f Pf O C - D I D S: P I

18 A f P D B S M f Pf D B - O C - Bkw

19 A B S M f Pf C f D B I D S: DLDB DB

20 B S M f Pf P k R P/ C Rk A A P I C C Fwk Rk P Aw A A M S Oz A / Pj- A M R O U W Ex P S R M A P / P A L U R H F L C A W P R Rq M S A Fwk P C E Rk M A P A A Ex S, I

21 B S M f Pf Rk A C & C E Cx I x Ex x Rk x D Df If Rk Az Rk E Rk W? W w? Hw & w? If x D q & k D f k C S Rk If A P & Az k M & Rw S: AS/NZS 4360:

22 B S M f Pf D Rk A I? C F P C w f f, w k M - S Dk F P f, -f- ff, P f ff f fw f P f f w P f, A Ex S, I

23 B S M f Pf M Fwk Ex N fwk f -z-f- N fwk f fwk, W w '? A Ex S, I

24 B S M f Pf W Fwk? G, P,S, Fwk/kw/,Ck,Sfw, B P,A /,L,R, P P O (CMMI, C, ISM3, ISO10000, IIL) C O (BSI-IBPM, ISO27001, ISO1335-4) P (C C) Rk M O (AS/NZS, CRAMM, O, SOMAP) B P O (IASO 27002, ISF) A Ex S, I

25 B S M f Pf A Fwk S I A Ex S, I

26 B S M f Pf S M M S P I Rk Aw, R, f If x,, R, f If x,,,, S If G (Oz) C I A S If E M M S S, R, f If x R, f If x,, R, f If x, R, f If x, R, f If x,, R,, R, f If x,, R, f If x,, R, f If x,, R, f If x,, R, f If x,, R, f If x,,, R, f If x,, R, f If x Oz P B S (A) Nwk If R C V M M C Cf M R, f, R, R,, R,, R, f If x,, R, f If x,, R, f If x,, R, f If x,, R, f If x,, R, f If x,, R, f If x,, R, f If x,, R, f If x,, R, f If x,, R, f If x,, R, f If x,, R, f, R, f If x,, R, f If x, R, f If x, C O P If A M M Fw A-V, R, f If x,, R, f If x,, R, f If x,, R, f If x,, R, f If x,, R, f If x,, R, f If x,, R, f If x,, R, f If x,, R, f If x,, R, R, f If x,, R, f If x,, R, f If x,, R, f If x,, R, f If x,, R,, R, f If x,, R, f If x, R, R,, R, f If x,, R, f, R,, R,, R, R,, R,, R,, R, R,, R, R, R, R,, R, R,, R, R, H R C H

27 B S M f Pf F E f O S S WACH x ; M ACCESS f f W A Df A DEFEND k ASSESS f f 27

28 B S M f Pf S B I (f If S) W S H S S B P A Ex S, I

29 B S M f Pf E C C S I f U f x ff- Cf w E E E f f k 6 w f w FBI C w f f ://www//454614/i_s_p_s_h_s A Ex S, I

30 B S M f Pf P V S k ff w w f w k w f D w ff f wk f fx j w ff U qk f w w A f k D f k w k 3, CCV, x f k w f wk fwk A Ex S, I

31 B S M f Pf RSA f 2007 O f k M f WFI wk k Lk -M F wk k RSA f SAFE WIFI wk w x k w w A Ex S, I

32 B S M f Pf A Ex S, I

33 B S M f Pf 2009 L H Sw H (2009) - C 2 f Sw x >100k Sw f US C (2009) B f C f 30 C-f j f 24 ; C, 74, 15 -US Z (2009) I C US fw f f C US L (2009) F f q 2 wk f f C; w, f, w k f C S Vk B & L (2009) S f J&J B&L ff f w k qk A Ex S, I

34 B S M f Pf S B I (f If S) W S H S S B P A Ex S, I

35 B S M f Pf W S M I w ; w (w S,, SLA, OLA, ); jf f x (w fw,,, ); ISO f q O M S q ISO 9001, ISO 20000; f w ff j; f k ff A Ex S, I

36 B S M f Pf Bf f M S A f ff f ISMS (, f x, f, f f k); P / ( wk k, k, f ); R f, ; M ff w ;, C If A (C G), w If A A Ex S, I

37 B S M f Pf W? 1M C: S P, I P, S P, B C P, S I P, B Oj,, M Rw 2B P: Rk A & Rk M P, H R P, SOA, M H P 3O C: O P, C C, P M, C M, R M, Bk, S D, Eq ff 4 C: P M, A- V C, IDS, Fw, C F A Ex S, I

38 B S M f Pf W? Cf f k ; Df j, k ; U x I w, IIL, KPI: W ISMS fwk, f w, q; Bf, f j w w ff C w, SLA/OLA w ISO15000 (IIL); A Ex S, I

39 B S M f Pf P E, w f / P f/isms w (w, w) If Rw I,, I w I M S (IMS) ISO 9001, 14000, 27001, E/ w, w, PDCA (P D Ck A) A Ex S, I

40 B S M f Pf Hw x Hw S P Hw Hw w Hw Hw j w W Hw w Hw w A Ex S, I 2010 W 40

41 B S M f Pf QUESIONS? www O : M, 3:00-4:00 : I CP/IP, 11:00 12:00 : W wk kw 1:30 2:30 : D Mf Nwk P w Pk W 11:00 12:00 : C C E W 1:30 2:30 : H Nwk S W 4:30 5:30 : W S C 11:00 12:00 : Vz E f D C