Audit Information Security: Izinhloso, izindlela kanye namathuluzi, isibonelo. Ukuphepha kolwazi ehloliwe ibhange

Namuhla, wonke umuntu uyazi ibinzana zingcwele ukuthi ungumnikazi ulwazi, ungumnikazi emhlabeni. Yingakho esikhathini sethu ukweba ulwazi oluyimfihlo ozama zonke futhi ahlukahlukene. Kule ndaba, athathelwe izinyathelo okungakaze ukuqaliswa izindlela zokuvikeleka ekuhlaseleni kungenzeka. Nokho, ngezinye izikhathi kungase kudingeke ukuba aqhube audit kolwazi ibhizinisi nokuvikeleka. Kuyini futhi kungani bonke manje, futhi uzame ukuqonda.

Kuyini ehloliwe ulwazi lwezokuphepha ekuchazweni jikelele?

Ngubani ngeke kuthinte imigomo yesayensi abstruse, bese uzama ukuba bazinqumele nemiqondo eyisisekelo, echaza kubo ngolimi kakhulu elula (abantu ke yayingase ibizwe ngokuthi u kuzona "dummies").

Igama izenzakalo eziyinkimbinkimbi liyazikhulumela. Ukuphepha kolwazi audit kuyinto yokuqinisekisa noma ezimele kontanga ukubuyekeza ukuqinisekisa ukuphepha kolwazi izinhlelo (IS) wanoma iyiphi inkampani, isikhungo noma inhlangano ngesisekelo nenqubo ngokukhethekile kanye nezinkomba.

Ngamagama alula, isibonelo, ahlole ulwazi lwezokuphepha yebhange yangempela, ukuhlola ezingeni ukuvikelwa yolwazi ikhasimende aphethwe imisebenzi yasebhange, ukuphepha imali electronic, kulondolozwe yasebhange ekusithekeni, nokunye. D. Endabeni kuphazamisa imisebenzi lesikhungo abantu okungagunyaziwe kusuka ngaphandle, usebenzisa izindawo electronic nekhompyutha.

Ngokuqinisekile, phakathi abafundi kukhona okungenani oyedwa owanibiza ekhaya noma iselula isiphakamiso zokuhlela esivumelwaneni sokubolekwa kwemali noma idiphozi, ibhange abasebenza ngazo kulo akuhlangene. Kuyefana nasendleleni ukuthenga futhi linikeza kusukela ezinye izitolo. Uvela wakhuphuka ekamelweni lakho?

Kulula. Uma umuntu ngaphambili wathatha imali noma imali ku-akhawunti idiphozi, yebo, idatha yayo lilondolozwe ovamile ikhasimende base. Uma ushayele kusukela kwelinye ibhange noma esitolo kungaba esiphethweni esisodwa kuphela: ulwazi mayelana Kwathi ngokungemthetho besithathu. Kanjani? Ngokuvamile, lapho ezimbili ongakhetha yilezi: noma eyebiwe, noma idluliselwe abasebenzi ebhange besithathu uyaqaphela. Ukuze izinto ezinjalo akwenzekanga, futhi udinga isikhathi sokwenza uphenyo ehloliwe Imininingwane nokuvikeleka ebhange, futhi lo awasebenzi kuphela ikhompyutha noma "insimbi" isivikelo, kodwa bonke abasebenzi lesikhungo.

Izikhombisi-main kolwazi yezokuphepha audit

Ngokuqondene kwenkululeko audit, njengoba umthetho, zingabantu eziningana:

• isheke egcwele izinto ezihilelekile izinqubo kolwazi (uhlelo lwekhompyutha ezenzakalelayo, izindlela zokuxhumana, ukwamukela, nokwaziswa transmission nokucubungula, izindawo, amagceke imihlangano eyimfihlo, izinhlelo ukuqapha, njll);
• kokuhlola ukuthembeka ukuvikelwa kolwazi oluyimfihlo ngokufinyelela okunqunyelwe (ukuzimisela kungenzeka ukuvuza kanye engaba izimbobo zokuphepha iziteshi uvumela ukufinyelela ke kusukela ngaphandle nge ukusebenzisa izindlela ejwayelekile futhi okungezona ezijwayelekile);
• hlola wabo bonke hardware kanye lendawo ikhompyutha izinhlaba zokuchayekela emisebeni kagesi nokugxambukela, siyivumele ukuba ukuvala noma alethe laphinde labhidlika;
• project ingxenye, okubandakanya umsebenzi ukudalwa nokusebenzisa umqondo wokulondeka nokuqaliswa kwalo esisebenzayo (Ukuvikelwa tangcondvomshini, izindawo, ukuxhumana izindawo, njll).

Uma kuziwa kwamabhuku?

Ingasaphathwa izimo ezibucayi lapho ukuzivikela yayisivele siphukile, ehloliwe ulwazi lwezokuphepha kunhlangano kungaba kwenziwe, futhi kwamanye amacala.

Ngokuvamile, lezi zihlanganisa ukwandiswa kukajantshi inkampani, ekubumbaneni, ukuthathwa, kombuso ezinye izinkampani, ukushintsha inkambo imiqondo ibhizinisi noma imihlahlandlela, izinguquko umthetho wamazwe ngamazwe noma emthethweni ezweni, izinguquko kunalokho sina kungqalasizinda ulwazi.

izinhlobo audit

Namuhla, kakhulu Ukwahlukaniswa lolu hlobo audit, ngokuvumelana abahlaziyi abaningi kanye nochwepheshe is hhayi kusungulwa. Ngakho-ke, i-division zibe amakilasi kwezinye izimo kungaba ngempela ngaphandle kokubonisana nomkayo. Noma kunjalo, ngokuvamile, kwamabhuku kolwazi yezokuphepha zingahlukaniswa zibe zangaphakathi nezangaphandle.

Ukucwaningwa kwamabhuku yangaphandle olwenziwa ochwepheshe abazimele Unelungelo ukwenza, ngokuvamile isheke yesikhathi esisodwa, okungase kube okuqalwe ukuphathwa, abanikazi bamasheya, abomthetho, njll Kukholakala ukuthi i-audit sangaphandle ulwazi lwezokuphepha Kunconywa (kodwa akudingekile) ukwenza njalo isikhathi iqoqo isikhathi. Kodwa ezinye izinhlangano kanye namabhizinisi, ngokomthetho, kuphoqelekile (isibonelo, izikhungo zezimali kanye nezinhlangano, izinkampani isitokwe ngokuhlanganyela, kanye nabanye.).

Yangaphakathi Imininingwane audit nokuvikeleka kuyinqubo njalo. Kusekelwe a "weMithethonqubo-Internal Audit" ekhethekile. Kuyini lokhu? Eqinisweni, le imisebenzi isitifiketi kwenziwe inhlangano, ngokuya evunywe ukuphathwa. Ukucwaningwa kwamabhuku Imininingwane ukuphepha iziqephu ekhethekile isakhi ibhizinisi.

Alternative Ukwahlukaniswa audit

Ngaphandle division ngenhla echazwe ngezigaba esimweni jikelele, singakwazi ukuhlukanisa izingxenye eziningana eyenziwe ngezigaba international:

• Isazi ekuhloleni isimo ulwazi lokuphepha kanye nokwaziswa izinhlelo ngesisekelo isipiliyoni siqu lochwepheshe, Umqhubi yayo;
• izinhlelo isitifiketi futhi izindlela zokuphepha ukuhambisana namazinga omhlaba (ISO 17799) futhi amathuluzi zomthetho kazwelonke elawula kulo mkhakha womsebenzi;
• ukuhlaziya ukuphepha kolwazi izinhlelo nokusetshenziswa izindlela lobuchwepheshe zihlose ukuthola ngishiyeka ezingaba ku software kanye hardware eziyinkimbinkimbi.

Ngezinye izikhathi kungase kusetshenziswe futhi okuthiwa audit olunzulu, ehlanganisa zonke izinhlobo ngenhla. By the way, ubapha imiphumela umgomo kakhulu.

imigomo okufakwe kanye nezinhloso

Noma yimuphi yokuqinisekisa, kungakhathaliseki yangaphakathi noma yangaphandle, iqala nge ukuzibekela imigomo kanye nezimpokophelo ezifanayo. Ngamafuphi nje, udinga ukuthi kungani, kanjani futhi yini ziyovivinywa. Lokhu kuzokwenza ukucacisa inqubo eminye yokufeza yonke inqubo.

Imisebenzi, kuye ngokuthi isakhiwo ethile ibhizinisi, inhlangano, isikhungo kanye nemisebenzi yayo kungaba impela eningi. Nokho, phakathi kwakho konke lokhu kukhululwa, umgomo obumbene kolwazi yezokuphepha audit:

• Kuhlolwa kwesimo kolwazi ukuphepha kanye zezokwazisa;
• ukuhlaziywa kwezingozi ezihlobene ingozi Ukungena ku-IP yangaphandle kanye Timiso okungenzeka nokugxambukela;
• kwasendaweni izimbobo futhi izikhala ohlelweni nokuvikeleka;
• ukuhlaziya nezinga elifanele ukuphepha kolwazi izinhlelo ezindinganisweni wamanje kanye izenzo zomthetho nezokulawula;
• ukuthuthukiswa kanye ukulethwa izincomo ezihilela ukususwa izinkinga ezikhona, kanye ngcono amakhambi ekhona kanye nokwethulwa ezintsha.

Indlela Yokwenza bese u-audit amathuluzi

Manje amagama ambalwa mayelana nendlela isheke futhi iziphi izinyathelo futhi kusho sihilela.

Ukucwaningwa kwamabhuku ulwazi lwezokuphepha unezigaba eziningana:

• ukuqalisa izinqubo yokuqinisekisa (definition ecacile nemalungelo kanye netibopho mabhuku, mabhuku ihlola ukulungiswa uhlelo nokuxhumana yayo nabaphathi, umbuzo imingcele cwaningo, ukunqunywa emalungwini ukuzinikela inhlangano anakekele futhi ilungiselelo ngesikhathi esifanele ulwazi olufanele);
• ukuqoqa idatha kokuqala (ezokuphepha isakhiwo, ukusatshalaliswa izici zokuphepha, amazinga nokuvikeleka uhlelo ukusebenza izindlela kokuhlahlela ukuthola nokunikeza ulwazi, ekutholweni imigudu yokuxhumana futhi IP nokuxhumana nezinye izakhiwo, yokwehlayo abasebenzisi amanethiwekhi computer, Izivumelwano ukuzimisela, njll);
• kwenziwe ukuhlolwa olunzulu noma isikhashana esinqunyiwe;
• Idatha yokuhlaziya (ukuhlaziya izingozi anoma yiluphi uhlobo nokulandela);
• kokukhipha izincomo ukubhekana nezinkinga ezingase zibe khona;
• kombiko.

Isigaba sokuqala iyona elula kunazo, ngoba isinqumo salo senziwe kuphela phakathi ukuphathwa inkampani kanye mabhuku. Imingcele yokuhlaziya angabhekwa emhlanganweni jikelele abasebenzi noma abanikazi bamasheya. Konke lokhu nokuningi ezihlobene emkhakheni wezomthetho.

Isigaba sesibili ukuqoqwa imininingo eyotholakala, kungaba lwangaphakathi kolwazi wokuvikela noma isitifiketi sangaphandle ozimele kakhulu isisetshenziswa khudlwana. Lokhu kungenxa yokuthi kulesi sigaba udinga hhayi kuphela uhlole imibhalo lobuchwepheshe elihambelana zonke hardware ne-software, kodwa futhi ukuze unciphise-inthavyuwa abasebenzi yenkampani, futhi ezimweni eziningi ngisho ne ngokugcwalisa iphepha lemibuzo ekhethekile noma survey.

Ngokuqondene ngemibhalo yomsebenzi, kubalulekile ukuthola idatha ku isakhiwo IC futhi amazinga kuqala amalungelo ukufinyelela abasebenzi bayo, ukukhomba zesistimu ebanzi nesofthiwe yohlelo (uhlelo lokusebenza kwezicelo zebhizinisi, okuphathwa kwazo ezimali), kanye nokuvikelwa ezimisiwe isofthiwe futhi okungezona hlelo hlobo (software unqulo wesi arab, izinhlelo zokuvikela, njll). Ngaphezu kwalokho, lokhu kufaka yokuqinisekisa egcwele amanethiwekhi kanye nabahlinzeka nezokuxhumana (inethiwekhi inhlangano, Izivumelwano esetshenziselwa uxhumano, izinhlobo imigudu yokuxhumana, ukudluliswa nezindlela yokwamukela ulwazi ageleza, nokuningi). Njengoba kucacile, kuthatha isikhathi esiningi.

Esigabeni esilandelayo, izindlela kolwazi yezokuphepha kwamabhuku. Ziyakwazi ezintathu:

• ukuhlaziywa ingozi (inqubo ezinzima kakhulu, esekelwe ekuzimiseleni komcwaningi wamabhuku ukuba kwema- IP sokwephulwa kwe kanye ubuqotho bayo usebenzisa zonke izindlela kunokwenzeka namathuluzi);
• ukuhlolwa ukuhambisana namazinga kanye nomthetho (ndlela elula esiwusizo kakhulu esekelwe ngokuqhathanisa isimo samanje ezindabeni kanye nezidingo namazinga amazwe omhlaba nokuthi imibhalo yasekhaya emkhakheni kolwazi yezokuphepha);
• indlela kuhlanganiswe ehlanganisa ezimbili zokuqala.

Emva kokuthola imiphumela ukuqinisekiswa ucwaningo lwabo. Izimali Audit kolwazi yezokuphepha, ezisetshenziswa for ukuhlaziya, kungenziwa ngempela ehlukahlukene. Konke kuncike imininingwane yalolu ibhizinisi, nohlobo lokwaziswa, i-software oyisebenzisayo, Ukuvikelwa nokunye. Nokho, njengoba kungabonwa indlela yokuqala, mabhuku ikakhulu kufanele athembele kokuhlangenwe nakho kwabo siqu.

Futhi lokho kuphela kusho ukuthi kumele afaneleke ngokugcwele emkhakheni kolwazi nobuchwepheshe kanye yokuvikela idatha. Ngesisekelo le ukuhlaziywa, mabhuku ebese izingozi ezingase zibe khona.

Phawula ukuthi kufanele ukubhekana hhayi kuphela ohlelweni lokusebenza noma uhlelo olusetshenzisiwe, isibonelo, ibhizinisi noma i-accounting, kodwa futhi ukuqonda ngokucacile ukuthi ungawukhipha kanjani umhlaseli ukungena ohlelweni ulwazi ngenhloso ukweba, umonakalo nencithakalo idatha, ukudalwa preconditions ukuphulwa kwezama-computer, ukusabalala amagciwane noma malware.

Ukuhlolwa Imiphumela yocwaningo kanye nezincomo ukubhekana nezinkinga

Ngokusekelwe ukuhlaziywa uchwepheshe kuphetha mayelana nesimo Ukuvikelwa futhi inika izincomo ukubhekana nezinkinga ezikhona noma kungenzeka kube nokungqubuzana, kuqiniswa ezokuphepha, njll Izincomo akufanele kuphela babe nobulungisa, kodwa futhi ngokucacile kuboshelwe namaqiniso imininingwane kwamabhizinisi. Ngamanye amazwi, amathiphu ngcono ukucushwa kwe-computer noma isofthiwe awamukelekile. Lokhu ngokulinganayo kusebenza iseluleko ukuxoshwa kwabasebenzi "alithembekile", ukufaka ngomkhondo izinhlelo ezintsha ngaphandle ecacisa lapho babeya khona, indawo kanye nokufaneleka.

Ngokusekelwe ukuhlaziywa, njengoba umthetho, kukhona amaqembu amaningana ingozi. Kulokhu, ukuba ahlanganise umbiko isifinyezo isebenzisa izinkomba ezimbili ezibalulekile: (. Ukulahlekelwa izimpahla, nokwehlisa isithunzi, ukulahlekelwa image nokunye) ematfuba kuhlasela kanye umonakalo owenziwe inkampani ngenxa yalokho. Nokho, ukusebenza amaqembu azifani. Ngokwesibonelo, eliphansi inkomba ematfuba kuhlasela iyona engcono kunazo. Ukuze umonakalo - kunalokho.

Kungaleso sikhathi kuphela lapho benza umbiko ukuthi imininingwane ngesineke sonke ngezigaba, izindlela kanye izindlela zocwaningo. Wavuma nobuholi futhi wasayinwa izinhlangothi ezimbili - inkampani kanye mabhuku. Uma ucwaningo lwangaphakathi, umbiko ikhanda lika iyunithi abafanele kwesakhiwo, okwathi ngemva kwalokho, futhi, esisayinwe ikhanda.

Ukuphepha kolwazi audit: Isibonelo

Ekugcineni, thina cabanga ngesibonelo elula besimo osekwenzekile kakade. Abaningi, ngasendleleni, kungase kubonakale kujwayelekile kakhulu.

Ngokwesibonelo, izisebenzi izinto ezinhlelweni zokuthenga senkampani e-United States, niqinisiwe ICQ esheshayo isithunywa ikhompyutha (igama oqashiwe futhi igama lenkampani ongakakusho ngenxa yezizathu ezisobala). Izingxoxo yayiqhutshelwa ngokunembile esebenzisa lolu hlelo. Kodwa "ICQ" kuyinto ngempela sengozini mayelana nokuphepha. Self isisebenzi izinombolo zokubhalisa ngesikhathi noma akanalo ikheli le-imeyili, noma nje engafuni lona. Kunalokho, uJehova wayekhomba into efana e-mail, futhi ngisho lesizinda non-akukho.

Yini umhlaseli? Njengoba kuboniswa ehloliwe ulwazi lokuphepha, wayeyoba bhalisiwe ncamashi sizinda futhi wadala kungaba kuwo, elinye esibulalayo ukubhalisa, bese ungase uthumele umyalezo Mirabilis inkampani ungumnikazi inkonzo ICQ, ngokucela ukutakula iphasiwedi ngenxa ukulahlekelwa kwayo (ukuthi kwakuzokwenzekani ). Njengoba lowo seva wayengekho, wawuhlanganisiwe liqondise kabusha - kabusha i imeyili ekhona nesigebengu.

Ngenxa yalokho, uthola ukufinyelela ukuxhumana ne inombolo ICQ enikeziwe yazisa umphakeli ukushintsha ikheli umamukeli we izimpahla ezweni elithile. Ngakho, izimpahla zithunyelwe ziyaphi. Futhi uyisibonelo ayinangozi kakhulu. Ngakho, ukuziphatha esingahlelekile. Futhi kuthiwani kubaduni sina abaningi bayakwazi nokunye okuningi ...

isiphetho

Nasi emfushane futhi zonke ohlobene IP nokuvikeleka kwamabhuku. Yiqiniso, ayitsintseki zonke izici-ke. Isizathu nje ukuthi ekwakhiweni izinkinga nezindlela zokuziphatha yayo kuthinta eningi izici, ngakho indlela esimweni ngasinye esokuba ngabanye. Ngaphezu kwalokho, izindlela kanye esebenzisa ulwazi lokuphepha audit kungaba elahlukile ICS ezahlukene. Nokho, uma ngicabanga, izimiso jikelele novivinyo olunjalo kwabaningi sobala ngisho ezingeni eyinhloko.