• Nem Talált Eredményt

6]DEYiQ\RNpVDMiQOiVRN

In document Az IT biztonság szabályozása (Pldal 187-195)

,62,(&75,QIRUPDWLRQWHFKQRORJ\±6HUYLFHPDQDJHPHQW±3DUW

*XLGDQFH RQ WKH UHODWLRQVKLS EHWZHHQ ,62,(& DQG VHUYLFH PDQDJHPHQWIUDPHZRUNV,7,/Š

,62,(&75,QIRUPDWLRQWHFKQRORJ\±6HUYLFHPDQDJHPHQW±3DUW

*XLGDQFH RQ WKH UHODWLRQVKLS EHWZHHQ ,62,(& DQG VHUYLFH PDQDJHPHQWIUDPHZRUNV&00,69&

,62,(& 2SHQ 'RFXPHQW )RUPDW IRU 2IILFH $SSOLFDWLRQV 2SHQ'RFXPHQWY

,62,(& ,QIRUPDWLRQ VHFXULW\ PDQDJHPHQW V\VWHPV ± 2YHUYLHZ DQG YRFDEXODU\

,62,(&,QIRUPDWLRQVHFXULW\PDQDJHPHQWV\VWHPV±5HTXLUHPHQWV ,62,(&&RGHRISUDFWLFHIRULQIRUPDWLRQVHFXULW\FRQWUROV ,62,(&,QIRUPDWLRQVHFXULW\PDQDJHPHQWV\VWHPV±*XLGDQFH ,62,(&,QIRUPDWLRQVHFXULW\PDQDJHPHQW±0HDVXUHPHQW ,62,(&,QIRUPDWLRQVHFXULW\ULVNPDQDJHPHQW

,62,(& 5HTXLUHPHQWV IRU ERGLHV SURYLGLQJ DXGLW DQG FHUWLILFDWLRQ RI LQIRUPDWLRQVHFXULW\PDQDJHPHQWV\VWHPV

,62,(& *XLGHOLQHV IRU LQIRUPDWLRQ VHFXULW\ PDQDJHPHQW V\VWHPV DXGLWLQJ

,62,(&75*XLGHOLQHVIRUDXGLWRUVRQ,6FRQWUROV

,62,(&6HFWRUVSHFLILFDSSOLFDWLRQRI,62,(&±5HTXLUHPHQWV ,62,(& ,QIRUPDWLRQ VHFXULW\ PDQDJHPHQW IRU LQWHUVHFWRU DQG LQWHU RUJDQL]DWLRQDOFRPPXQLFDWLRQV

,62,(& ,QIRUPDWLRQ VHFXULW\ PDQDJHPHQW JXLGHOLQHV IRU WHOHFRPPXQLFDWLRQVRUJDQL]DWLRQVEDVHGRQ,62,(&

,62,(&*XLGDQFHRQWKHLQWHJUDWHGLPSOHPHQWDWLRQRI,62,(&

DQG,62,(&

,62,(&*RYHUQDQFHRILQIRUPDWLRQVHFXULW\

,62,(& ,QIRUPDWLRQ VHFXULW\ PDQDJHPHQW JXLGHOLQHV IRU ILQDQFLDO VHUYLFHV9LVV]DYRQWV]DEYiQ\

,62,(&752UJDQL]DWLRQDOHFRQRPLFV

,62,(& &RGH RI SUDFWLFH IRU SURWHFWLRQ RI SHUVRQDOO\ LGHQWLILDEOH LQIRUPDWLRQ3,,LQSXEOLFFORXGVDFWLQJDV3,,SURFHVVRUV

,62,(&,QIRUPDWLRQVHFXULW\FRQWUROVIRUWKHHQHUJ\XWLOLW\LQGXVWU\

,62,(&&RPSHWHQFHUHTXLUHPHQWVIRULQIRUPDWLRQVHFXULW\PDQDJHPHQW V\VWHPVSURIHVVLRQDOV

,62,(& 75 0DSSLQJ WKH UHYLVHG HGLWLRQV RI ,62,(& DQG ,62,(&

,62,(& *XLGHOLQHV IRU LQIRUPDWLRQ DQG FRPPXQLFDWLRQ WHFKQRORJ\

UHDGLQHVVIRUEXVLQHVVFRQWLQXLW\

,62,(&*XLGHOLQHVIRUF\EHUVHFXULW\

,62,(&1HWZRUNVHFXULW\2YHUYLHZDQGFRQFHSWV

,62,(& 1HWZRUN VHFXULW\ *XLGHOLQHV IRU WKH GHVLJQ DQG LPSOHPHQWDWLRQRIQHWZRUNVHFXULW\

,62,(& 1HWZRUN VHFXULW\ 7KUHDWV GHVLJQ WHFKQLTXHV DQG FRQWURO LVVXHV

,62,(& 6HFXULQJ FRPPXQLFDWLRQV DFURVV QHWZRUNV XVLQJ 9LUWXDO 3ULYDWH1HWZRUNV931V

,62,(&$SSOLFDWLRQVHFXULW\2YHUYLHZDQGFRQFHSWV

,62,(&$SSOLFDWLRQVHFXULW\2UJDQL]DWLRQQRUPDWLYHIUDPHZRUN ,62,(&$SSOLFDWLRQVHFXULW\3DUW3URWRFROVDQGDSSOLFDWLRQVHFXULW\

FRQWUROVGDWDVWUXFWXUH

,62,(&$SSOLFDWLRQVHFXULW\3DUW&DVHVWXGLHV

,62,(&,QIRUPDWLRQVHFXULW\LQFLGHQWPDQDJHPHQW±3DUW3ULQFLSOHV RILQFLGHQWPDQDJHPHQW

,62,(& ,QIRUPDWLRQ VHFXULW\ LQFLGHQW PDQDJHPHQW ± 3DUW

*XLGHOLQHVWRSODQDQGSUHSDUHIRULQFLGHQWUHVSRQVH

,62,(& ,QIRUPDWLRQ VHFXULW\ IRU VXSSOLHU UHODWLRQVKLSV ± 3DUW 2YHUYLHZDQGFRQFHSWV

,62,(& ,QIRUPDWLRQ VHFXULW\ IRU VXSSOLHU UHODWLRQVKLSV ± 3DUW 5HTXLUHPHQWV

,62,(& ,QIRUPDWLRQ VHFXULW\ IRU VXSSOLHU UHODWLRQVKLSV ± 3DUW

*XLGHOLQHVIRULQIRUPDWLRQDQGFRPPXQLFDWLRQWHFKQRORJ\VXSSO\FKDLQVHFXULW\

,62,(& ,QIRUPDWLRQ VHFXULW\ IRU VXSSOLHU UHODWLRQVKLSV ± 3DUW

*XLGHOLQHVIRUVHFXULW\RIFORXGVHUYLFHV

,62,(& *XLGHOLQHV IRU LGHQWLILFDWLRQ FROOHFWLRQ DFTXLVLWLRQ DQG SUHVHUYDWLRQRIGLJLWDOHYLGHQFH

,62,(&6SHFLILFDWLRQIRUGLJLWDOUHGDFWLRQ

,62,(&6HOHFWLRQGHSOR\PHQWDQGRSHUDWLRQVRILQWUXVLRQGHWHFWLRQDQG SUHYHQWLRQV\VWHPV,'36

,62,(&6WRUDJHVHFXULW\

,62,(& *XLGDQFH RQ DVVXULQJ VXLWDELOLW\ DQG DGHTXDF\ RI LQFLGHQW LQYHVWLJDWLYHPHWKRG

,62,(&*XLGHOLQHVIRUWKHDQDO\VLVDQGLQWHUSUHWDWLRQRIGLJLWDOHYLGHQFH ,62,(&,QFLGHQWLQYHVWLJDWLRQSULQFLSOHVDQGSURFHVVHV

,62 +HDOWK LQIRUPDWLFV ± ,QIRUPDWLRQ VHFXULW\ PDQDJHPHQW LQ KHDOWK XVLQJ,62,(&

,6275)LQDQFLDOVHUYLFHV±,QIRUPDWLRQVHFXULW\JXLGHOLQHV

06= (1 %L]WRQViJRV pUWpNWiUROyN $ EHW|UpViOOyViJ N|YHWHOPpQ\HL RV]WiO\R]iVD pV YL]VJiODWL PyGV]HUHL UpV] 3iQFpOV]HNUpQ\HN $70 SiQFpOV]HNUpQ\HNpUWpNWiUROyKHO\LVpJHNDMWyLpVpUWpNWiUROyKHO\LVpJHN

06= (1 $ V]DEYiQ\RVtWiV pV D] D]]DO NDSFVRODWRV WHYpNHQ\VpJHN ÈOWDOiQRVV]DNV]yWiU,62,(&*XLGH

06= (1 ,62 (JpV]VpJJ\L LQIRUPDWLND $] LQIRUPiFLyEL]WRQViJ LUiQ\tWiVDD]HJpV]VpJJ\EHQD],62,(&DONDOPD]iViYDO,62 06= ,62,(& ,QIRUPDWLND %L]WRQViJWHFKQLND $] LQIRUPDWLNDL pV WiYN|]OpVL EL]WRQViJ PHQHG]VHOpVH UpV] $] LQIRUPDWLNDL pV WiYN|]OpVL EL]WRQViJ PHQHG]VHOpVpQHNIRJDOPDLpVPRGHOOMHL

06= ,62,(& 75 ,QIRUPDWLND $] LQIRUPDWLNDL EL]WRQViJ PHQHG]VHOpVpQHN LUiQ\HOYHL UpV] $] LQIRUPDWLNDL EL]WRQViJ PHQHG]VHOpVpQHN WHFKQLNiL

06= ,62,(& 75 ,QIRUPDWLND $] LQIRUPDWLNDL EL]WRQViJ PHQHG]VHOpVpQHNLUiQ\HOYHLUpV]$EL]WRQViJLHOOHQLQWp]NHGpVHNPHJYiODV]WiVD 06= ,62,(& 75 ,QIRUPDWLND $] LQIRUPDWLNDL EL]WRQViJ PHQHG]VHOpVpQHNLUiQ\HOYHLUpV]$KiOy]DWEL]WRQViJPHQHG]VHOpVL~WPXWDWyMD 06= ,62,(& ,QIRUPDWLND %L]WRQViJWHFKQLND $] LQIRUPDWLNDL EL]WRQViJpUWpNHOpV N|]|V V]HPSRQWMDL UpV] %HYH]HWpV pV iOWDOiQRV PRGHOO 9LVV]DYRQWV]DEYiQ\

06= ,62,(& ,QIRUPDWLND %L]WRQViJWHFKQLND $] LQIRUPDWLNDL EL]WRQViJpUWpNHOpV N|]|V V]HPSRQWMDL UpV] $ EL]WRQViJ IXQNFLRQiOLV N|YHWHOPpQ\HL9LVV]DYRQWV]DEYiQ\

06= ,62,(& ,QIRUPDWLND %L]WRQViJWHFKQLND $] LQIRUPDWLNDL EL]WRQViJpUWpNHOpVN|]|VV]HPSRQWMDLUpV]$EL]WRQViJJDUDQFLiOLVN|YHWHOPpQ\HL 9LVV]DYRQWV]DEYiQ\

06=,62,(&,QIRUPDWLND%L]WRQViJWHFKQLND,7KiOy]DWEL]WRQViJ UpV]%L]WRQViJRVWiYROLKR]]iIpUpV9LVV]DYRQWV]DEYiQ\

06= ,62,(& ,QIRUPDWLND %L]WRQViJWHFKQLND ,QIRUPiFLyEL]WRQViJ LUiQ\tWiVLUHQGV]HUHN.|YHWHOPpQ\HN

06=(1 ,62,(& ,QIRUPDWLND %L]WRQViJWHFKQLND*\DNRUODWL~WPXWDWy D] LQIRUPiFLyEL]WRQViJL NRQWUROORNKR]LQWp]NHGpVHNKH] ,62,(&

WDUWDOPD]]DDpYLpVDpYLKHO\HVEtWpVW

06= ,62,(& ,QIRUPDWLND %L]WRQViJWHFKQLND .|YHWHOPpQ\HN LQIRUPiFLyEL]WRQViJLLUiQ\tWiVLUHQGV]HUHNDXGLWMiWpVWDQ~VtWiViWYpJ]ĘV]HUYH]HWHNUH 'HIDFWRV]DEYiQ\RNDMiQOiVRNPyGV]HUWDQRN

$ 3pQ]J\L 6]HUYH]HWHN ÈOODPL )HOJ\HOHWpQHN V]iP~ PyGV]HUWDQL

~WPXWDWyMDDSpQ]J\LV]HUYH]HWHNLQIRUPDWLNDLUHQGV]HUpQHNYpGHOPpUĘO

$57,&/( 'DWD 3URWHFWLRQ :RUNLQJ 3DUW\ :RUNLQJ 'RFXPHQW (VWDEOLVKLQJ D 0RGHO&KHFNOLVW$SSOLFDWLRQIRU$SSURYDORI%LQGLQJ&RUSRUDWH5XOHV$GRSWHGRQ

$SULOWK

%HOVĘHOOHQĘU]pVLNp]LN|Q\Y3pQ]J\PLQLV]WpULXP

&RPPLWWHHRI6SRQVRULQJ2UJDQLVDWLRQVRIWKH7UHDGZD\&RPPLVVLRQ&262

&RPPRQ &ULWHULD IRU ,QIRUPDWLRQ 7HFKQRORJ\ 6HFXULW\ (YDOXDWLRQ 3DUW ,QWURGXFWLRQDQGJHQHUDOPRGHO9HUVLRQ5HYLVLRQ$SULO

&RPPRQ &ULWHULD IRU ,QIRUPDWLRQ 7HFKQRORJ\ 6HFXULW\ (YDOXDWLRQ 3DUW 6HFXULW\

IXQFWLRQDOUHTXLUHPHQWV9HUVLRQ5HYLVLRQ$SULO

&RPPRQ &ULWHULD IRU ,QIRUPDWLRQ 7HFKQRORJ\ 6HFXULW\ (YDOXDWLRQ 3DUW 6HFXULW\

DVVXUDQFHUHTXLUHPHQWV9HUVLRQ5HYLVLRQ$SULO

&RQVXOWDWLYH &RPPLWWHH IRU 6SDFH 'DWD 6\VWHPV 5HIHUHQFH 0RGHO IRU DQ 2SHQ

$UFKLYDO,QIRUPDWLRQ6\VWHP2$,6&&6'66HFUHWDULDW:DVKLQJWRQ'&

&2%,7,6$&$

&RQWURO2EMHFWLYHVIRU,QIRUPDWLRQDQGUHODWHG7HFKQRORJ\&2%,7,6$&$

&:$,QYHQWRU\RI'DWD3URWHFWLRQ$XGLWLQJ3UDFWLFHV

&:$ $QDO\VLV RI 3ULYDF\ 3URWHFWLRQ 7HFKQRORJLHV 3ULYDF\(QKDQFLQJ 7HFKQRORJLHV3(73ULYDF\0DQDJHPHQW6\VWHPV306DQG,GHQWLW\0DQDJHPHQW V\VWHPV,06WKH'ULYHUVWKHUHRIDQGWKHQHHGIRUVWDQGDUGL]DWLRQ

&:$6WDQGDUGIRUPFRQWUDFWWRDVVLVWFRPSOLDQFHZLWKREOLJDWLRQVLPSRVHGE\

DUWLFOHRIWKH'DWD3URWHFWLRQ'LUHFWLYH(&DQGLPSOHPHQWDWLRQJXLGH

&:$3HUVRQDO'DWD3URWHFWLRQ$XGLW)UDPHZRUN(8'LUHFWLYH(&

3DUW,%DVHOLQH)UDPHZRUN7KHSURWHFWLRQRI3HUVRQDO'DWDLQWKH(8

&:$3HUVRQDO'DWD3URWHFWLRQ$XGLW)UDPHZRUN(8'LUHFWLYH(&

3DUW ,, &KHFNOLVWV TXHVWLRQQDLUHV DQG WHPSODWHV IRU XVHUV RI WKH IUDPHZRUN 7KH SURWHFWLRQRI3HUVRQDO'DWDLQWKH(8

'DWD3URWHFWLRQ$XGLW0DQXDO>8QLWHG.LQJGRP@

'DWD 3URWHFWLRQ $XGLW 5HVRXUFH -DQXDU\ 9HUVLRQ 2IILFH RI WKH 'DWD 3URWHFWLRQ&RPPLVVLRQHU>,UHODQG@

'HSDUWPHQWRI'HIHQVH'LUHFWLYH'R'

)O|S ,VWYiQQp ± %RUVRV )HUHQF ± :HOWKHUQp 6]ROQRNL 'yUD ± 6]DEy %DOi]V 0yGV]HUWDQ D] LQIRUPDWLNDL UHQGV]HUHN NRQWUROOMDLQDN HOOHQĘU]pVpKH] ÈOODPL 6]iPYHYĘV]pN

,QIRUPDWLRQ7HFKQRORJ\6HFXULW\(YDOXDWLRQ&ULWHULD,76(&

,7,QIUDVWUXFWXUH/LEUDU\,7,/

U|Y ,7% V] DMiQOiV ,QIRUPDWLNDL 7iUFDN|]L %L]RWWViJ DMiQOiVDL ,QIRUPDWLNDL EL]WRQViJLPyGV]HUWDQLNp]LN|Q\YV]DMiQOiV%XGDSHVW

U|Y ,7% V] DMiQOiV ,QIRUPDWLNDL 7iUFDN|]L %L]RWWViJ DMiQOiVDL ,QIRUPDWLNDL UHQGV]HUHNEL]WRQViJLN|YHWHOPpQ\HLV]DMiQOiV%XGDSHVW

$ .|]LJD]JDWiVL ,QIRUPDWLNDL %L]RWWViJ V]iP~ DMiQOiVD 0DJ\DU ,QIRUPDWLNDL

%L]WRQViJL $MiQOiVRN 0,%$ N|WHW 0DJ\DU ,QIRUPDWLNDL %L]WRQViJL .HUHWUHQGV]HU0,%,.YHU]Ly

$ .|]LJD]JDWiVL ,QIRUPDWLNDL %L]RWWViJ V]iP~ DMiQOiVD 0DJ\DU ,QIRUPDWLNDL

%L]WRQViJL $MiQOiVRN 0,%$ N|WHW ,QIRUPDWLNDL %L]WRQViJL ,UiQ\tWiVL 5HQGV]HU,%,5YHU]Ly

$ .|]LJD]JDWiVL ,QIRUPDWLNDL %L]RWWViJ V]iP~ DMiQOiVD 0DJ\DU ,QIRUPDWLNDL

%L]WRQViJL $MiQOiVRN 0,%$ N|WHW ,QIRUPDWLNDL %L]WRQViJ ,UiQ\tWiVL .|YHWHOPpQ\HN,%,.YHU]Ly

$ .|]LJD]JDWiVL ,QIRUPDWLNDL %L]RWWViJ V]iP~ DMiQOiVD 0DJ\DU ,QIRUPDWLNDL

%L]WRQViJL$MiQOiVRN0,%$N|WHW$],QIRUPDWLNDL%L]WRQViJ,UiQ\tWiViQDN 9L]VJiODWD,%,9YHU]Ly

$ .|]LJD]JDWiVL ,QIRUPDWLNDL %L]RWWViJ V]iP~ DMiQOiVD 0DJ\DU ,QIRUPDWLNDL

%L]WRQViJL$MiQOiVRN0,%$N|WHW0DJ\DU,QIRUPDWLNDL%L]WRQViJLeUWpNHOpVL pV7DQ~VtWiVL6pPD0,%e76YHU]Ly

$ .|]LJD]JDWiVL ,QIRUPDWLNDL %L]RWWViJ V]iP~ DMiQOiVD 0DJ\DU ,QIRUPDWLNDL

%L]WRQViJL$MiQOiVRN0,%$VHJpGOHW0,%e760RGHOOpV)RO\DPDWRN YHU]Ly

$ .|]LJD]JDWiVL ,QIRUPDWLNDL %L]RWWViJ V]iP~ DMiQOiVD 0DJ\DU ,QIRUPDWLNDL

%L]WRQViJL $MiQOiVRN 0,%$ VHJpGOHW 0,%e76 ± ÒWPXWDWy D 0HJEt]yN V]iPiUDYHU]Ly

$ .|]LJD]JDWiVL ,QIRUPDWLNDL %L]RWWViJ V]iP~ DMiQOiVD 0DJ\DU ,QIRUPDWLNDL

%L]WRQViJL $MiQOiVRN 0,%$ VHJpGOHW 0,%e76 ± ÒWPXWDWy D )HMOHV]WĘN V]iPiUDYHU]Ly

$ .|]LJD]JDWiVL ,QIRUPDWLNDL %L]RWWViJ V]iP~ DMiQOiVD 0DJ\DU ,QIRUPDWLNDL

%L]WRQViJL $MiQOiVRN 0,%$ VHJpGOHW 0,%e76 ± ÒWPXWDWy eUWpNHOĘNQHN YHU]Ly

$ .|]LJD]JDWiVL ,QIRUPDWLNDL %L]RWWViJ V]iP~ DMiQOiVD 0DJ\DU ,QIRUPDWLNDL

%L]WRQViJL$MiQOiVRN0,%$VHJpGOHW0,%e76±eUWpNHOpVLPyGV]HUWDQ YHU]Ly

$ .|]LJD]JDWiVL ,QIRUPDWLNDL %L]RWWViJ V]iP~ DMiQOiVD 0DJ\DU ,QIRUPDWLNDL

%L]WRQViJL$MiQOiVRN0,%$N|WHW ,QIRUPDWLNDL%L]WRQViJL ,UiQ\PXWDWy.LV 6]HUYH]HWHNQHN,%,;YHU]Ly

$ .|]LJD]JDWiVL ,QIRUPDWLNDL %L]RWWViJ V]iP~ DMiQOiVD $] (.|]LJD]JDWiVL .HUHWUHQGV]HU SURMHNW HUHGPpQ\HNpQW OpWUHKR]RWW .|YHWHOPpQ\WiU KWWSNRYHWHOPHQ\WDUFRPSOH[KX

0DJ\DU 1HP]HWL .|Q\YYL]VJiODWL 6WDQGDUGRN 7pPDV]iP~ VWDQGDUG

*D]GiONRGy pV N|UQ\H]HWpQHN PHJLVPHUpVH YDODPLQW D OpQ\HJHV KLEiV iOOtWiV NRFNi]DWiQDNIHOLVPHUpVH

0DJ\DU 1HP]HWL .|Q\YYL]VJiODWL 6WDQGDUGRN WpPDV]iP~ VWDQGDUG V]DNpUWĘ PXQNiMiQDNIHOKDV]QiOiVD

0DJ\DU 1HP]HWL .|Q\YYL]VJiODWL 6WDQGDUGRN WpPDV]iP~ iOOiVIRJODOiV D NLVYiOODONR]iVRNN|Q\YYL]VJiODWiQDNVSHFLDOLWiVDL

0DJ\DU 2UV]iJRV /HYpOWiU /HYpOWiUL iOORPiQ\YpGHOPL DMiQOiV 02/ %XGDSHVW

1DWLRQDO &RQIHUHQFH RI 6WDWH /HJLVODWXUHV &\EHUWHUURULVP KWWSZZZQFVORUJSURJUDPVOLVFLSF\EHUWHUURULVPKWP>@

1pPHWK7LERU±5iF]-XGLW±6ĘWpU0iUWRQQp±9LUiJ$QLNy±%DNRV5y]VD±9DUJD (V]WHU ,QIRUPDWLNDL DXGLW D N|Q\YYL]VJiODWEDQ 0yGV]HUWDQL ~WPXWDWy >

@KWWSZZZPNYNKXWXGDVWDUXWPXWDWRNLQIRUPDWLNDLDXGLW

1HXPDQQ3HWHU*±5RELQVRQ/±/HYLWW.DUO1±%R\HU56±6D[HQD$5$

3URYDEO\ 6HFXUH 2SHUDWLQJ 6\VWHP 6WDQIRUG 5HVHDUFK ,QVWLWXWH 0HQOR 3DUN &$

86$ KWWSVHFODEFVXFGDYLVHGXSURMHFWVKLVWRU\&'QHXPSGI >

@

2(&'*XLGHOLQHVIRUWKH6HFXULW\RI,QIRUPDWLRQ6\VWHPV±1RYHPEHU 2(&'*XLGHOLQHVIRUWKH6HFXULW\RI,QIRUPDWLRQ6\VWHPVDQG1HWZRUNV7RZDUGVD

&XOWXUHRI6HFXULW\-XO\

3URMHFW0DQDJHPHQW%RRNRI.QRZOHGJH30%2.30, 7UXVWHG&RPSXWHU6\VWHPV(YDOXDWLRQ&ULWHULD7&6(&

In document Az IT biztonság szabályozása (Pldal 187-195)