如何建立电力信息安全保障体系

ConfidentialConfidential|ISCAChinaSecurity&Security&Privacy©CopyrightISCACorporation人力资源 产品设法律市 销类型

保护

保持力拥有者

流程

起源网络连接Network

支持

SecurityManagementSystem

NW 以信息为中心的安全模式Information-CentricSecuritySecurity ©CopyrightISCACorporation线线设 集中监控平 检测&响

y&Privacy ©Copyrighty&Privacy ©CopyrightISCACorporation

©CopyrightISCACorporationSecurity&Privacy ©CopyrightISCACorporationScurity©CopyrightISCACorporationSecurity&Privacy ©CopyrightISCACorporation

系统访 系统访

SecuritySecurity&Privacy©CopyrightISCACorporationSecurity&Privacy ©CopyrightISCACorporationSecuritySecurity&Privacy©CopyrightISCACorporationInternet InsiderF

s

Security&Privacy ©CopyrightISCACorporation

Security&Privacy ©CopyrightISCACorporationArcSight体系保 资

(事件监控关联分析监客户网(安全设备服务器网络设备,…)Scurity ©CopyrightISCACorporationSecurity&Security&Privacy©CopyrightISCACorporationBankingand

Services

SolutionBase,BuildingOutsourcingmodel,SubscribeSecurity&Privacy©CopyrightSecurity&Privacy

Security&Privacy ©CopyrightISCACorporation稳定快速的SOCSecurity&Security&Privacy©CopyrightISCACorporation

Security&Privacy ©CopyrightISCACorporationSecurity&Security&Privacy©CopyrightISCACorporation安全服务-Service安全服务-Service7×247×247×247×247×24ITILSOXISO27001提供SOXSOX目标用户名；Security&Security&Privacy©CopyrightISCACorporation方便ITILSOC和ITIL完成ITIL框架的安全方面变更流程；ISO27001在ISO27001明确规定了安全事件管理的域，主要是安全事故和故SOC增强ISO27001ITILISO27001Security&Privacy ©CopyrightISCACorporationSecurity&Security&Privacy©CopyrightISCACorporationSOCITILISO27001Security&Privacy ©CopyrightISCACorporationSecurity&Security&Privacy©CopyrightISCACorporation用户审计系统：能够审计用户帐号创建（新员工入职、修改（员工的工作调动）、密码重置（）、删除（员工的离职）SOCSOC

节的特殊格式的UDP1434端口，蠕虫王）的主机进行SQLserver的补丁修补，并进行杀毒

的特殊格式的UDP1434

SOC接到事件优先级为1－10，案例1： 分析触发安全