|
等保2.0定級指南正式實施,定級需要專家評審 二維碼
發表時間:2020-11-27 10:00 2020年11月1日,GB/T 22240-2020《信息安全(quan)技術 網絡安全(quan)等級(ji)保(bao)護定級(ji)指(zhi)南(nan)(nan)》正(zheng)式實施(shi),也就是等保(bao)2.0的定級(ji)指(zhi)南(nan)(nan)正(zheng)式實施(shi)了。那(nei)么(me)2.0的定級(ji)指(zhi)南(nan)(nan)正(zheng)式實施(shi)后(hou),我(wo)們在開(kai)展相關(guan)工(gong)作(zuo)中需(xu)要注意哪些點呢? 等級保護對象范圍擴大了 等(deng)(deng)保(bao)保(bao)護(hu)(hu)定級(ji)(ji)(ji)(ji)對象主要(yao)(yao)(yao)包括(kuo):信息(xi)(xi)(xi)(xi)系統(tong)、通(tong)信網(wang)(wang)絡(luo)設施(shi)(shi)和(he)數(shu)據(ju)(ju)資(zi)(zi)源(yuan)等(deng)(deng);信息(xi)(xi)(xi)(xi)系統(tong)就(jiu)是(shi)我們(men)在(zai)1.0時(shi)候的(de)(de)(de)定級(ji)(ji)(ji)(ji)對象,指(zhi)的(de)(de)(de)是(shi)各類(lei)信息(xi)(xi)(xi)(xi)系統(tong);通(tong)信網(wang)(wang)絡(luo)設施(shi)(shi)指(zhi)的(de)(de)(de)是(shi)為(wei)信息(xi)(xi)(xi)(xi)流通(tong)、網(wang)(wang)絡(luo)運行(xing)等(deng)(deng)起基礎(chu)支撐作用(yong)(yong)的(de)(de)(de)網(wang)(wang)絡(luo)設備設施(shi)(shi),主要(yao)(yao)(yao)包括(kuo)電信網(wang)(wang)、廣(guang)播電視(shi)傳輸網(wang)(wang)和(he)行(xing)業(ye)(ye)或(huo)(huo)單位的(de)(de)(de)專用(yong)(yong)通(tong)信網(wang)(wang)等(deng)(deng),所以大(da)(da)(da)家得注意了自己單位的(de)(de)(de)專網(wang)(wang)得定級(ji)(ji)(ji)(ji),特別是(shi)承載了重要(yao)(yao)(yao)信息(xi)(xi)(xi)(xi)系統(tong)或(huo)(huo)者專網(wang)(wang)規模較大(da)(da)(da)的(de)(de)(de)網(wang)(wang)絡(luo);數(shu)據(ju)(ju)資(zi)(zi)源(yuan)指(zhi)的(de)(de)(de)是(shi)具有(you)(you)(you)或(huo)(huo)預期(qi)具有(you)(you)(you)價值的(de)(de)(de)數(shu)據(ju)(ju)集合,數(shu)據(ju)(ju)資(zi)(zi)源(yuan)主要(yao)(yao)(yao)是(shi)擁有(you)(you)(you)大(da)(da)(da)量各類(lei)有(you)(you)(you)價值的(de)(de)(de)數(shu)據(ju)(ju),那么這(zhe)些(xie)(xie)(xie)單位需要(yao)(yao)(yao)保(bao)護(hu)(hu)好(hao)這(zhe)些(xie)(xie)(xie)數(shu)據(ju)(ju)資(zi)(zi)源(yuan),自然(ran)需要(yao)(yao)(yao)對該(gai)數(shu)據(ju)(ju)資(zi)(zi)源(yuan)進(jin)行(xing)定級(ji)(ji)(ji)(ji),我們(men)可(ke)以想象的(de)(de)(de)這(zhe)類(lei)數(shu)據(ju)(ju)有(you)(you)(you):人社(she)數(shu)據(ju)(ju)、醫保(bao)數(shu)據(ju)(ju)、公積金數(shu)據(ju)(ju)、個(ge)人財(cai)產(chan)數(shu)據(ju)(ju)(銀行(xing)、房(fang)產(chan)、保(bao)險等(deng)(deng))等(deng)(deng)信息(xi)(xi)(xi)(xi);這(zhe)里注意一(yi)點(dian):當(dang)安全責任(ren)主體(ti)(ti)(ti)相同時(shi),大(da)(da)(da)數(shu)據(ju)(ju)、大(da)(da)(da)數(shu)據(ju)(ju)平(ping)臺/系統(tong)宜作為(wei)一(yi)個(ge)整(zheng)體(ti)(ti)(ti)對象定級(ji)(ji)(ji)(ji);當(dang)安全責任(ren)主體(ti)(ti)(ti)不(bu)同時(shi),大(da)(da)(da)數(shu)據(ju)(ju)應(ying)(ying)(ying)獨(du)立定級(ji)(ji)(ji)(ji);涉及(ji)到大(da)(da)(da)量公民(min)個(ge)人信息(xi)(xi)(xi)(xi)以及(ji)為(wei)公民(min)提供(gong)公共服(fu)務的(de)(de)(de)大(da)(da)(da)數(shu)據(ju)(ju)平(ping)臺/系統(tong),原則(ze)上其安全保(bao)護(hu)(hu)等(deng)(deng)級(ji)(ji)(ji)(ji)不(bu)低于(yu)三級(ji)(ji)(ji)(ji);不(bu)是(shi)所有(you)(you)(you)的(de)(de)(de)這(zhe)類(lei)數(shu)據(ju)(ju)都(dou)需要(yao)(yao)(yao)獨(du)立去(qu)定級(ji)(ji)(ji)(ji),日常中(zhong)主要(yao)(yao)(yao)存在(zai)數(shu)據(ju)(ju)進(jin)行(xing)集中(zhong)化后(hou)的(de)(de)(de)場景,例如一(yi)些(xie)(xie)(xie)地方的(de)(de)(de)大(da)(da)(da)數(shu)據(ju)(ju)局或(huo)(huo)者政務中(zhong)心將各行(xing)業(ye)(ye)的(de)(de)(de)一(yi)些(xie)(xie)(xie)數(shu)據(ju)(ju)要(yao)(yao)(yao)過(guo)來后(hou)進(jin)行(xing)相關(guan)應(ying)(ying)(ying)用(yong)(yong)或(huo)(huo)使用(yong)(yong)時(shi)應(ying)(ying)(ying)當(dang)對這(zhe)些(xie)(xie)(xie)數(shu)據(ju)(ju)進(jin)行(xing)獨(du)立定級(ji)(ji)(ji)(ji)。 公民、法人和其他組織最高依然為二級 當公民、法人和其他組織的合法權益造成特別嚴重損害時依然定為二級。 ![]() 根據2.0的定級指(zhi)南中定級要數與(yu)安全保護等級的關(guan)系表(biao)我們發現當公民(min)、法(fa)人(ren)和其他組(zu)織的合法(fa)權益造成特別嚴重損害時依然為二級,這塊在(zai)征(zheng)求(qiu)意見稿中是第(di)三(san)級。 等保定級需要進行專家評審 等保2.0的定級指南中定級工作一般流程如下圖(tu): ![]() 從(cong)圖中可以(yi)看(kan)到(dao),定(ding)級(ji)(ji)需(xu)(xu)要(yao)(yao)進(jin)行(xing)(xing)(xing)專(zhuan)家(jia)(jia)評(ping)審(shen)(shen),那么至此等(deng)保(bao)(bao)定(ding)級(ji)(ji)再也(ye)不是(shi)(shi)(shi)1.0的(de)(de)(de)自(zi)主(zhu)(zhu)(zhu)(zhu)定(ding)級(ji)(ji)了(le),而是(shi)(shi)(shi)需(xu)(xu)要(yao)(yao)規范進(jin)行(xing)(xing)(xing)定(ding)級(ji)(ji)。對(dui)于(yu)(yu)初步確(que)(que)定(ding)為第一(yi)(yi)(yi)級(ji)(ji)的(de)(de)(de)等(deng)級(ji)(ji)保(bao)(bao)護對(dui)象(xiang),可不進(jin)行(xing)(xing)(xing)專(zhuan)家(jia)(jia)家(jia)(jia)評(ping)審(shen)(shen)、主(zhu)(zhu)(zhu)(zhu)管(guan)(guan)(guan)部(bu)(bu)門(men)(men)(men)(men)(men)核(he)準(zhun)和備(bei)案審(shen)(shen)核(he),所以(yi)一(yi)(yi)(yi)級(ji)(ji)系(xi)(xi)統(tong)(tong)(tong)(tong)不需(xu)(xu)要(yao)(yao)去(qu)公安(an)網安(an)部(bu)(bu)門(men)(men)(men)(men)(men)進(jin)行(xing)(xing)(xing)備(bei)案,但(dan)是(shi)(shi)(shi)這(zhe)里一(yi)(yi)(yi)哥需(xu)(xu)要(yao)(yao)提(ti)醒的(de)(de)(de)是(shi)(shi)(shi)哪些(xie)是(shi)(shi)(shi)一(yi)(yi)(yi)級(ji)(ji)系(xi)(xi)統(tong)(tong)(tong)(tong),通俗點說(shuo)就(jiu)是(shi)(shi)(shi)這(zhe)個系(xi)(xi)統(tong)(tong)(tong)(tong)哪怕是(shi)(shi)(shi)壞了(le)對(dui)別(bie)人的(de)(de)(de)影響(xiang)都非常(chang)小(xiao)的(de)(de)(de)系(xi)(xi)統(tong)(tong)(tong)(tong)才(cai)是(shi)(shi)(shi)一(yi)(yi)(yi)級(ji)(ji)系(xi)(xi)統(tong)(tong)(tong)(tong)。定(ding)一(yi)(yi)(yi)級(ji)(ji)前,你(ni)(ni)們(men)對(dui)照自(zi)己的(de)(de)(de)系(xi)(xi)統(tong)(tong)(tong)(tong)看(kan)看(kan)是(shi)(shi)(shi)不是(shi)(shi)(shi)這(zhe)樣(yang)的(de)(de)(de),但(dan)凡不是(shi)(shi)(shi)這(zhe)樣(yang)的(de)(de)(de),那么你(ni)(ni)的(de)(de)(de)系(xi)(xi)統(tong)(tong)(tong)(tong)肯(ken)定(ding)是(shi)(shi)(shi)二級(ji)(ji)起(qi)步了(le)。那么安(an)全(quan)保(bao)(bao)護等(deng)級(ji)(ji)初步確(que)(que)定(ding)為第二級(ji)(ji)及以(yi)上(shang)(shang)(shang)(shang)的(de)(de)(de)等(deng)級(ji)(ji)保(bao)(bao)護對(dui)象(xiang),就(jiu)需(xu)(xu)要(yao)(yao)組織專(zhuan)家(jia)(jia)評(ping)審(shen)(shen)、主(zhu)(zhu)(zhu)(zhu)管(guan)(guan)(guan)部(bu)(bu)門(men)(men)(men)(men)(men)核(he)準(zhun)和備(bei)案審(shen)(shen)核(he),最終確(que)(que)定(ding)其安(an)全(quan)等(deng)級(ji)(ji)。對(dui)于(yu)(yu)有(you)(you)主(zhu)(zhu)(zhu)(zhu)管(guan)(guan)(guan)部(bu)(bu)門(men)(men)(men)(men)(men)的(de)(de)(de)就(jiu)去(qu)主(zhu)(zhu)(zhu)(zhu)管(guan)(guan)(guan)部(bu)(bu)門(men)(men)(men)(men)(men)進(jin)行(xing)(xing)(xing)核(he)準(zhun),沒有(you)(you)主(zhu)(zhu)(zhu)(zhu)管(guan)(guan)(guan)部(bu)(bu)門(men)(men)(men)(men)(men)的(de)(de)(de)可以(yi)忽略,這(zhe)里的(de)(de)(de)主(zhu)(zhu)(zhu)(zhu)管(guan)(guan)(guan)部(bu)(bu)門(men)(men)(men)(men)(men)需(xu)(xu)要(yao)(yao)明確(que)(que)的(de)(de)(de)是(shi)(shi)(shi)上(shang)(shang)(shang)(shang)級(ji)(ji)行(xing)(xing)(xing)業(ye)主(zhu)(zhu)(zhu)(zhu)管(guan)(guan)(guan)部(bu)(bu)門(men)(men)(men)(men)(men)而非地方上(shang)(shang)(shang)(shang)管(guan)(guan)(guan)理(li)部(bu)(bu)門(men)(men)(men)(men)(men)。主(zhu)(zhu)(zhu)(zhu)管(guan)(guan)(guan)部(bu)(bu)門(men)(men)(men)(men)(men)核(he)準(zhun)在實(shi)踐中一(yi)(yi)(yi)哥建議大(da)家(jia)(jia)根據(ju)實(shi)際情況靈活(huo)開展。為什么這(zhe)樣(yang)說(shuo),因為有(you)(you)的(de)(de)(de)時(shi)候備(bei)案單位(wei)上(shang)(shang)(shang)(shang)級(ji)(ji)主(zhu)(zhu)(zhu)(zhu)管(guan)(guan)(guan)部(bu)(bu)門(men)(men)(men)(men)(men)不清不楚或(huo)者你(ni)(ni)以(yi)為的(de)(de)(de)主(zhu)(zhu)(zhu)(zhu)管(guan)(guan)(guan)部(bu)(bu)門(men)(men)(men)(men)(men)他們(men)不認為是(shi)(shi)(shi)你(ni)(ni)們(men)的(de)(de)(de)主(zhu)(zhu)(zhu)(zhu)管(guan)(guan)(guan)部(bu)(bu)門(men)(men)(men)(men)(men),實(shi)際工(gong)作中普遍存在:理(li)論(lun)上(shang)(shang)(shang)(shang)的(de)(de)(de)行(xing)(xing)(xing)業(ye)上(shang)(shang)(shang)(shang)級(ji)(ji)主(zhu)(zhu)(zhu)(zhu)管(guan)(guan)(guan)部(bu)(bu)門(men)(men)(men)(men)(men)不是(shi)(shi)(shi)非常(chang)垂(chui)直的(de)(de)(de)上(shang)(shang)(shang)(shang)下(xia)級(ji)(ji)管(guan)(guan)(guan)理(li)關系(xi)(xi),對(dui)下(xia)級(ji)(ji)單位(wei)即不管(guan)(guan)(guan)錢也(ye)不管(guan)(guan)(guan)人,平時(shi)工(gong)作上(shang)(shang)(shang)(shang)聯系(xi)(xi)也(ye)不夠緊密(mi),如果這(zhe)時(shi)還(huan)非要(yao)(yao)求上(shang)(shang)(shang)(shang)級(ji)(ji)行(xing)(xing)(xing)業(ye)主(zhu)(zhu)(zhu)(zhu)管(guan)(guan)(guan)部(bu)(bu)門(men)(men)(men)(men)(men)進(jin)行(xing)(xing)(xing)審(shen)(shen)批,可能這(zhe)個事就(jiu)走不下(xia)去(qu)。 專家評審如何開展? 專(zhuan)(zhuan)(zhuan)(zhuan)(zhuan)家(jia)(jia)(jia)(jia)(jia)(jia)(jia)評(ping)(ping)(ping)審(shen)(shen)(shen)如(ru)(ru)何開展是等保(bao)2.0定(ding)(ding)(ding)(ding)(ding)(ding)級(ji)(ji)(ji)(ji)(ji)(ji)一(yi)(yi)個繞不(bu)開的(de)問(wen)題。哪(na)(na)些(xie)(xie)(xie)是專(zhuan)(zhuan)(zhuan)(zhuan)(zhuan)家(jia)(jia)(jia)(jia)(jia)(jia)(jia)?誰來認(ren)定(ding)(ding)(ding)(ding)(ding)(ding)這(zhe)些(xie)(xie)(xie)專(zhuan)(zhuan)(zhuan)(zhuan)(zhuan)家(jia)(jia)(jia)(jia)(jia)(jia)(jia)?這(zhe)個在定(ding)(ding)(ding)(ding)(ding)(ding)級(ji)(ji)(ji)(ji)(ji)(ji)指(zhi)南里沒(mei)(mei)有(you)(you)(you)(you)(you)說明,也不(bu)好說明,那么(me)大(da)家(jia)(jia)(jia)(jia)(jia)(jia)(jia)在實際開展工(gong)作(zuo)(zuo)中(zhong)也是各(ge)(ge)不(bu)相(xiang)(xiang)同,比(bi)如(ru)(ru)北京要(yao)求(qiu)有(you)(you)(you)(you)(you)測(ce)評(ping)(ping)(ping)師(shi)參(can)與評(ping)(ping)(ping)審(shen)(shen)(shen),有(you)(you)(you)(you)(you)些(xie)(xie)(xie)地(di)方自(zi)(zi)(zi)己(ji)組織(zhi)認(ren)定(ding)(ding)(ding)(ding)(ding)(ding)了(le)(le)一(yi)(yi)批評(ping)(ping)(ping)審(shen)(shen)(shen)專(zhuan)(zhuan)(zhuan)(zhuan)(zhuan)家(jia)(jia)(jia)(jia)(jia)(jia)(jia),有(you)(you)(you)(you)(you)些(xie)(xie)(xie)地(di)方套用政府采購評(ping)(ping)(ping)審(shen)(shen)(shen)專(zhuan)(zhuan)(zhuan)(zhuan)(zhuan)家(jia)(jia)(jia)(jia)(jia)(jia)(jia),有(you)(you)(you)(you)(you)些(xie)(xie)(xie)地(di)方也沒(mei)(mei)有(you)(you)(you)(you)(you)明確專(zhuan)(zhuan)(zhuan)(zhuan)(zhuan)家(jia)(jia)(jia)(jia)(jia)(jia)(jia)大(da)家(jia)(jia)(jia)(jia)(jia)(jia)(jia)自(zi)(zi)(zi)由選擇(ze)。這(zhe)些(xie)(xie)(xie)一(yi)(yi)哥認(ren)為(wei)都沒(mei)(mei)有(you)(you)(you)(you)(you)錯,適合(he)自(zi)(zi)(zi)己(ji)的(de)就(jiu)行(xing)(xing)(xing),但是一(yi)(yi)哥覺得既然是等保(bao)定(ding)(ding)(ding)(ding)(ding)(ding)級(ji)(ji)(ji)(ji)(ji)(ji)的(de)評(ping)(ping)(ping)審(shen)(shen)(shen)專(zhuan)(zhuan)(zhuan)(zhuan)(zhuan)家(jia)(jia)(jia)(jia)(jia)(jia)(jia),那么(me)他(ta)(ta)們應當(dang)要(yao)對(dui)等保(bao)定(ding)(ding)(ding)(ding)(ding)(ding)級(ji)(ji)(ji)(ji)(ji)(ji)這(zhe)項(xiang)工(gong)作(zuo)(zuo)了(le)(le)解才能更(geng)(geng)好地(di)幫(bang)助網(wang)(wang)(wang)絡(luo)(luo)(luo)運(yun)營者(zhe)進(jin)(jin)行(xing)(xing)(xing)準(zhun)確定(ding)(ding)(ding)(ding)(ding)(ding)級(ji)(ji)(ji)(ji)(ji)(ji)。那么(me)哪(na)(na)些(xie)(xie)(xie)人(ren)(ren)對(dui)等保(bao)定(ding)(ding)(ding)(ding)(ding)(ding)級(ji)(ji)(ji)(ji)(ji)(ji)工(gong)作(zuo)(zuo)了(le)(le)解呢?第(di)一(yi)(yi)、公安(an)(an)(an)網(wang)(wang)(wang)安(an)(an)(an)主管部門工(gong)作(zuo)(zuo)人(ren)(ren)員(yuan),他(ta)(ta)們從(cong)(cong)事(shi)這(zhe)項(xiang)工(gong)作(zuo)(zuo),每年(nian)對(dui)大(da)量新系(xi)(xi)(xi)統進(jin)(jin)行(xing)(xing)(xing)了(le)(le)定(ding)(ding)(ding)(ding)(ding)(ding)級(ji)(ji)(ji)(ji)(ji)(ji)審(shen)(shen)(shen)核(he),他(ta)(ta)們自(zi)(zi)(zi)然對(dui)等保(bao)定(ding)(ding)(ding)(ding)(ding)(ding)級(ji)(ji)(ji)(ji)(ji)(ji)工(gong)作(zuo)(zuo)了(le)(le)解,他(ta)(ta)們可(ke)以(yi)(yi)當(dang)專(zhuan)(zhuan)(zhuan)(zhuan)(zhuan)家(jia)(jia)(jia)(jia)(jia)(jia)(jia),有(you)(you)(you)(you)(you)些(xie)(xie)(xie)人(ren)(ren)會認(ren)為(wei)不(bu)能自(zi)(zi)(zi)己(ji)既當(dang)專(zhuan)(zhuan)(zhuan)(zhuan)(zhuan)家(jia)(jia)(jia)(jia)(jia)(jia)(jia)又進(jin)(jin)行(xing)(xing)(xing)最(zui)終審(shen)(shen)(shen)核(he),這(zhe)有(you)(you)(you)(you)(you)點不(bu)合(he)適。這(zhe)確實不(bu)合(he)適,但是一(yi)(yi)哥沒(mei)(mei)說自(zi)(zi)(zi)己(ji)管理(li)的(de)區(qu)域自(zi)(zi)(zi)己(ji)當(dang)評(ping)(ping)(ping)審(shen)(shen)(shen)專(zhuan)(zhuan)(zhuan)(zhuan)(zhuan)家(jia)(jia)(jia)(jia)(jia)(jia)(jia)啊,你可(ke)以(yi)(yi)去其他(ta)(ta)地(di)市(shi)進(jin)(jin)行(xing)(xing)(xing)專(zhuan)(zhuan)(zhuan)(zhuan)(zhuan)家(jia)(jia)(jia)(jia)(jia)(jia)(jia)評(ping)(ping)(ping)審(shen)(shen)(shen)啊;第(di)二(er),測(ce)評(ping)(ping)(ping)機(ji)構持證工(gong)作(zuo)(zuo)人(ren)(ren)員(yuan),他(ta)(ta)們長(chang)(chang)年(nian)在一(yi)(yi)線進(jin)(jin)行(xing)(xing)(xing)等保(bao)工(gong)作(zuo)(zuo),他(ta)(ta)們接觸了(le)(le)很多系(xi)(xi)(xi)統,對(dui)標準(zhun)對(dui)系(xi)(xi)(xi)統情況(kuang)比(bi)較(jiao)(jiao)熟悉,他(ta)(ta)們適合(he)當(dang)等保(bao)定(ding)(ding)(ding)(ding)(ding)(ding)級(ji)(ji)(ji)(ji)(ji)(ji)專(zhuan)(zhuan)(zhuan)(zhuan)(zhuan)家(jia)(jia)(jia)(jia)(jia)(jia)(jia),這(zhe)里一(yi)(yi)哥建議(yi)測(ce)評(ping)(ping)(ping)機(ji)構的(de)評(ping)(ping)(ping)審(shen)(shen)(shen)專(zhuan)(zhuan)(zhuan)(zhuan)(zhuan)家(jia)(jia)(jia)(jia)(jia)(jia)(jia)資質應為(wei):中(zhong)、高(gao)級(ji)(ji)(ji)(ji)(ji)(ji)測(ce)評(ping)(ping)(ping)師(shi),他(ta)(ta)們的(de)工(gong)作(zuo)(zuo)經(jing)驗(yan)相(xiang)(xiang)對(dui)初級(ji)(ji)(ji)(ji)(ji)(ji)測(ce)評(ping)(ping)(ping)師(shi)來說較(jiao)(jiao)為(wei)豐(feng)富;第(di)三,相(xiang)(xiang)關(guan)網(wang)(wang)(wang)絡(luo)(luo)(luo)安(an)(an)(an)全專(zhuan)(zhuan)(zhuan)(zhuan)(zhuan)家(jia)(jia)(jia)(jia)(jia)(jia)(jia),這(zhe)里就(jiu)比(bi)較(jiao)(jiao)廣泛,比(bi)如(ru)(ru)各(ge)(ge)個單位(wei)信息中(zhong)心或(huo)者(zhe)網(wang)(wang)(wang)絡(luo)(luo)(luo)安(an)(an)(an)全的(de)負(fu)(fu)責人(ren)(ren),行(xing)(xing)(xing)業主管部門負(fu)(fu)責網(wang)(wang)(wang)絡(luo)(luo)(luo)安(an)(an)(an)全的(de)人(ren)(ren)員(yuan),高(gao)校負(fu)(fu)責網(wang)(wang)(wang)絡(luo)(luo)(luo)安(an)(an)(an)全、計(ji)算機(ji)等教學人(ren)(ren)員(yuan),這(zhe)些(xie)(xie)(xie)專(zhuan)(zhuan)(zhuan)(zhuan)(zhuan)家(jia)(jia)(jia)(jia)(jia)(jia)(jia)也都行(xing)(xing)(xing),他(ta)(ta)們長(chang)(chang)年(nian)從(cong)(cong)事(shi)信息化特別是網(wang)(wang)(wang)絡(luo)(luo)(luo)安(an)(an)(an)全工(gong)作(zuo)(zuo),經(jing)驗(yan)也較(jiao)(jiao)為(wei)豐(feng)富,如(ru)(ru)果自(zi)(zi)(zi)身(shen)負(fu)(fu)責過(guo)或(huo)指(zhi)導過(guo)本單位(wei)等保(bao)工(gong)作(zuo)(zuo)開展的(de)那就(jiu)更(geng)(geng)好。如(ru)(ru)果每次(ci)專(zhuan)(zhuan)(zhuan)(zhuan)(zhuan)家(jia)(jia)(jia)(jia)(jia)(jia)(jia)評(ping)(ping)(ping)審(shen)(shen)(shen)至(zhi)(zhi)少有(you)(you)(you)(you)(you)這(zhe)三類人(ren)(ren)參(can)與的(de)話,一(yi)(yi)哥認(ren)為(wei)這(zhe)個定(ding)(ding)(ding)(ding)(ding)(ding)級(ji)(ji)(ji)(ji)(ji)(ji)一(yi)(yi)定(ding)(ding)(ding)(ding)(ding)(ding)相(xiang)(xiang)對(dui)更(geng)(geng)加(jia)規范合(he)理(li),因為(wei)這(zhe)些(xie)(xie)(xie)人(ren)(ren)你想(xiang)忽悠還真(zhen)不(bu)容易,所以(yi)(yi)一(yi)(yi)哥也建議(yi)各(ge)(ge)地(di)還沒(mei)(mei)有(you)(you)(you)(you)(you)對(dui)專(zhuan)(zhuan)(zhuan)(zhuan)(zhuan)家(jia)(jia)(jia)(jia)(jia)(jia)(jia)范圍進(jin)(jin)行(xing)(xing)(xing)認(ren)定(ding)(ding)(ding)(ding)(ding)(ding)的(de)可(ke)以(yi)(yi)讓各(ge)(ge)家(jia)(jia)(jia)(jia)(jia)(jia)(jia)單位(wei)按照這(zhe)個要(yao)求(qiu)來找(zhao)(zhao)專(zhuan)(zhuan)(zhuan)(zhuan)(zhuan)家(jia)(jia)(jia)(jia)(jia)(jia)(jia),總結下就(jiu)是:定(ding)(ding)(ding)(ding)(ding)(ding)級(ji)(ji)(ji)(ji)(ji)(ji)評(ping)(ping)(ping)審(shen)(shen)(shen)專(zhuan)(zhuan)(zhuan)(zhuan)(zhuan)家(jia)(jia)(jia)(jia)(jia)(jia)(jia)至(zhi)(zhi)少3人(ren)(ren),人(ren)(ren)員(yuan)中(zhong)包(bao)括:異(yi)地(di)網(wang)(wang)(wang)安(an)(an)(an)人(ren)(ren)員(yuan)、測(ce)評(ping)(ping)(ping)機(ji)構中(zhong)高(gao)級(ji)(ji)(ji)(ji)(ji)(ji)測(ce)評(ping)(ping)(ping)師(shi)及(ji)其他(ta)(ta)網(wang)(wang)(wang)絡(luo)(luo)(luo)安(an)(an)(an)專(zhuan)(zhuan)(zhuan)(zhuan)(zhuan)家(jia)(jia)(jia)(jia)(jia)(jia)(jia)。專(zhuan)(zhuan)(zhuan)(zhuan)(zhuan)家(jia)(jia)(jia)(jia)(jia)(jia)(jia)找(zhao)(zhao)好了(le)(le),評(ping)(ping)(ping)審(shen)(shen)(shen)就(jiu)順(shun)其自(zi)(zi)(zi)然的(de)開展下去了(le)(le),網(wang)(wang)(wang)絡(luo)(luo)(luo)運(yun)營者(zhe)肯定(ding)(ding)(ding)(ding)(ding)(ding)要(yao)對(dui)自(zi)(zi)(zi)己(ji)的(de)信息系(xi)(xi)(xi)統進(jin)(jin)行(xing)(xing)(xing)介(jie)紹(shao),各(ge)(ge)位(wei)專(zhuan)(zhuan)(zhuan)(zhuan)(zhuan)家(jia)(jia)(jia)(jia)(jia)(jia)(jia)對(dui)定(ding)(ding)(ding)(ding)(ding)(ding)級(ji)(ji)(ji)(ji)(ji)(ji)資料(liao)進(jin)(jin)行(xing)(xing)(xing)評(ping)(ping)(ping)審(shen)(shen)(shen),提出相(xiang)(xiang)關(guan)疑問(wen),網(wang)(wang)(wang)絡(luo)(luo)(luo)運(yun)營者(zhe)解答(da),最(zui)終專(zhuan)(zhuan)(zhuan)(zhuan)(zhuan)家(jia)(jia)(jia)(jia)(jia)(jia)(jia)對(dui)該系(xi)(xi)(xi)統的(de)定(ding)(ding)(ding)(ding)(ding)(ding)級(ji)(ji)(ji)(ji)(ji)(ji)情況(kuang)做一(yi)(yi)個認(ren)定(ding)(ding)(ding)(ding)(ding)(ding),出具專(zhuan)(zhuan)(zhuan)(zhuan)(zhuan)家(jia)(jia)(jia)(jia)(jia)(jia)(jia)評(ping)(ping)(ping)審(shen)(shen)(shen)意見并進(jin)(jin)行(xing)(xing)(xing)簽字(zi),這(zhe)樣專(zhuan)(zhuan)(zhuan)(zhuan)(zhuan)家(jia)(jia)(jia)(jia)(jia)(jia)(jia)評(ping)(ping)(ping)審(shen)(shen)(shen)環(huan)節(jie)就(jiu)完成了(le)(le)。 關于云平臺定級需要了解的 對于大型云計算平臺,宜將云計算基礎設施和有關輔助服務系統劃分為不同的定級對象。對于大型云計算平臺(比如阿里云、騰訊云、京東云以及一些IDC云計算平臺)基礎設施可單獨定一個網絡系統,有關輔助服務系統另外再定一個系統。另外對于云租戶,其相應的信息系統也需要開展等保工作,這塊工作原則上是由云租戶自己開展,切不可以為系統上云了,安全責任就不歸自己了,出了事依然還是自己的事。對于通信網絡設施、云計算平臺/系統等定級對象,原則上等級不低于其承擔的等級保護對象的安全保護等級。不能存在云計算平臺是二級,平臺上的系統是三級情況。 受侵害的客體表現形式有哪些 ![]() 業務信息安(an)全和系統服務安(an)全受到破壞后(hou),產生的侵(qin)害后(hou)果有以下表現形式: ![]() 很多人對受侵害的客體及受到破壞后造成的影響認識不清,比較模糊,比較抽象,根據以上描述,讓大家對此有一個相對比較具體的認知。 等級變更時需重新進行定級 當等級保護對象所處理的業務信息和系統服務范圍發生變化,可能導致業務信息安全和系統服務安全受到破壞后的受侵害客體和對客體的侵害程度發生變化時,需根據本標準重新確定定級對象和安全保護等級。也就是等級需要變更時需要按照定級指南重新開展定級,該請專家評審的請專家評審,該請行業主管部門審核的請行業主管部門審核,再也不能隨意進行等級的變更了。 等(deng)(deng)保2.0定級(ji)指(zhi)南正式開(kai)(kai)始實施,各(ge)地(di)公安網(wang)安部門可以根(gen)據本地(di)實際情況(kuang)規范開(kai)(kai)展(zhan)等(deng)(deng)保定級(ji)工作,引(yin)導各(ge)網(wang)絡運(yun)營者規范開(kai)(kai)展(zhan)網(wang)絡安全等(deng)(deng)級(ji)保護工作,等(deng)(deng)保工作離不開(kai)(kai)你們的監管。怎(zen)樣合理規范,怎(zen)樣有利于開(kai)(kai)展(zhan)工作就(jiu)(jiu)怎(zen)樣開(kai)(kai)展(zhan),形式不限,工作扎扎實實做好就(jiu)(jiu)可以。 |