Политики безопасности компании при работе в Интернет

Contents

INTRODUCTION

Chapter 01 Classifying Information and Data SECTION 01 SETTING CLASSIFICATION STANDARDS

Chapter 02 Controlling Access to Information and Systems SECTION 01 CONTROLLING ACCESS TO INFORMATION AND SYSTEMS

Chapter 03 Processing Information and Documents

SECTION 01 NETWORKS

SECTION 02 SYSTEM OPERATIONS AND ADMINISTRATION

SECTION 04 TELEPHONES & FAX

SECTION 05 DATA MANAGEMENT

SECTION 06 BACKUP, RECOVERY AND ARCHIVING

SECTION 07 DOCUMENT HANDLING

SECTION 08 SECURING DATA

SECTION 09 OTHER INFORMATION HANDLING AND PROCESSING

Chapter 04 Purchasing and Maintaining commercial Software

SECTION 01 PURCHASING AND INSTALLING SOFTWARE

SECTION 02 SOFTWARE MAINTENANCE & UPGRADE

SECTION 03 OTHER SOFTWARE ISSUES

Chapter 05 Securing Hardware, Peripherals and Other Equipment

SECTION 01 PURCHASING AND INSTALLING HARDWARE

SECTION 02 CABLING, UPS, PRINTERS AND MODEMS

SECTION 03 CONSUMABLES

SECTION 04 WORKING OFF PREMISES OR USING OUTSOURCED PROCESSING

SECTION 05 USING SECURE STORAGE

SECTION 06 DOCUMENTING HARDWARE

SECTION 07 OTHER HARDWARE ISSUES

Chapter 06 Combating Cyber Crime SECTION 01 COMBATING CYBER CRIME

Chapter 07 Controlling e?Commerce Information Security SECTION 01 E　COMMERCE ISSUES

Chapter 08 Developing and Maintaining In?House Software

SECTION 01 CONTROLLING SOFTWARE CODE

SECTION 02 SOFTWARE DEVELOPMENT

SECTION 03 TESTING & TRAINING

SECTION 04 DOCUMENTATION

SECTION 05 OTHER SOFTWARE DEVELOPMENT

Chapter 09 Dealing with Premises related Considerations

SECTION 01 PREMISES SECURITY

SECTION 02 DATA STORES

SECTION 03 OTHER PREMISES ISSUES

Chapter 10 Addressing Personnel Issues relating to Security

SECTION 01 CONTRACTUAL DOCUMENTATION

SECTION 02 CONFIDENTIAL PERSONNEL DATA

SECTION 03 PERSONNEL INFORMATION SECURITY RESPONSIBILITIES

SECTION 04 HR MANAGEMENT

SECTION 05 STAFF LEAVING EMPLOYMENT

SECTION 06 HR ISSUES OTHER

Chapter 11 Delivering Training and Staff Awareness

SECTION 01 AWARENESS

SECTION 02 TRAINING

Chapter 12 Complying with Legal and Policy Requirements

SECTION 01 COMPLYING WITH LEGAL OBLIGATIONS

SECTION 02 COMPLYING WITH POLICIES

SECTION 03 AVOIDING LITIGATION

SECTION 04 OTHER LEGAL ISSUES

Chapter 13 Detecting and Responding to IS Incidents

SECTION 01 REPORTING INFORMATION SECURITY INCIDENTS

SECTION 02 INVESTIGATING INFORMATION SECURITY INCIDENTS

SECTION 03 CORRECTIVE ACTIVITY

SECTION 04 OTHER INFORMATION SECURITY INCIDENT ISSUES

Chapter 14 Planning for Business Continuity SECTION 01 BUSINESS CONTINUITY MANAGEMENT (BCP)

3.6. Проблемы разработки политик безопасности