酒店信息安全培训

Version2.0March2011©2011InterContinentalHotelsGroupStartVersion2.0March2011©2011InterContinentalHotelsGroupNextBackAgenda议程Version2.0March2011©2011InterContinentalHotelsGroupNextBackIntroduction介绍Version2.0March2011©2011InterContinentalHotelsGroupNextBackAgenda议程Version2.0March2011©2011InterContinentalHotelsGroupNextBackDataclassification数据分类Version2.0March2011©2011InterContinentalHotelsGroupPublicInformation公共的信息ThisisanyinformationmadefreelyavailabletothegeneralpublicorwheredisclosurecausesnoharmtoIHG.这是一种免费提供给公众的信息,同时对IHG不会造成不良影响。Examplesincludemarketingmaterialsorannualreports.比如，包括营销材料或年度报告。Nospecialcontrolsarerequiredtoprotectthisinformation.不需要特别控制来保护这些信息。NextBackDataclassification数据分类Version2.0March2011©2011InterContinentalHotelsGroupNextBackDataclassification数据分类Version2.0March2011©2011InterContinentalHotelsGroupNextBackDataclassification数据分类Version2.0March2011©2011InterContinentalHotelsGroupNextBackAgenda议程Version2.0March2011©2011InterContinentalHotelsGroupNextBackVersion2.0March2011©2011InterContinentalHotelsGroup越复杂的密码越安全吗？Version2.0March2011©2011InterContinentalHotelsGroupNextBackVersion2.0March2011©2011InterContinentalHotelsGroupNextBackVersion2.0March2011©2011InterContinentalHotelsGroupNextBackVersion2.0March2011©2011InterContinentalHotelsGroupMasterKeyVersion2.0March2011©2011InterContinentalHotelsGroup优秀的密码设置策略

用统一规则记住多个不同密码”是个不错的选择。毕竟记住一个规则比记住一串杂乱无序的字符要容易多了，也可以实现“一把钥匙开一扇门”的策略。

[密码]=2*（[用户名标识符（小写/大写）]+[用户名长度]+[.]+[网站标识符（大写/小写）]）例：guokr123@，密码为：gk8.GMGK8.gmsongshuhui@密码为：ssh10.HTSSH10.htVersion2.0March2011©2011InterContinentalHotelsGroupNextBackAgenda议程Version2.0March2011©2011InterContinentalHotelsGroupNextBackMalware恶意软件Version2.0March2011©2011InterContinentalHotelsGroupNextBackMalware恶意软件Version2.0March2011©2011InterContinentalHotelsGroupNextBackAgenda议程Version2.0March2011©2011InterContinentalHotelsGroupEmailisacriticalbusinesstoolbutitcanalsobeusedtospreadMalware.电子邮件是一个关键业务工具,但它也可以被用来传播恶意软件。Twosimpleprecautionscanhelpyoutoprotectyourhotel:两个简单的预防措施可以帮助你保护你的酒店:1)Neveropenanattachmentinanemailunlessyouareexpectingit不要打开附件，除非是你在等待的电子邮件。2)Neverclickonalinkinanemailunlessyouareexpectingit不要打开邮件中的链接，除非是你在等待的电子邮件。NextBackVersion2.0March2011©2011InterContinentalHotelsGroupRemember-thinkbeforeyouclick记住-在你点击前请思考一下NextBackVersion2.0March2011©2011InterContinentalHotelsGroupNextBackThereareotherprecautionsyoucantaketoprotectyourselfwhenusingemail在使用邮件中，还有一些别的预防措施来保护你自己Neverrespondtospam请勿回复垃圾邮件Besuspiciousofemailsthatstart“DearCustomer”.Yourbankknowsyournameandwillnormallyuseit

一些可疑的邮件，称呼你为“亲爱的顾客”。而你的银行往往知道你的姓名并正常使用。Besuspiciousofemailsthatcontainspellingorgrammaticalerrors,althoughcriminalsaregettingsmarteratthis一些可疑的邮件中往往包含了拼字与语法的错误，虽然犯罪份子越来越聪明。Donotforwardchainemails.Theseareusedtocollectemailaddressestosendmorespamto

请不要转发一些链接邮件。这些都是在收集电子邮件地址派遣更多的垃圾邮件给你Donotforwardviruswarnings.Theyarealmostalwayshoaxes,butifindoubtcontacttheITHelpdesk

请不要转发病毒报警。这些几乎是一些恶作剧，但如果有疑问请与IT联系Version2.0March2011©2011InterContinentalHotelsGroupNextBackAgenda议程Version2.0March2011©2011InterContinentalHotelsGroupTheInternetisagreatsourceofinformationandagreattoolforcommunication,butcriminalsalsousetheInternetandnoteverywebsiteissafe.互联网有着充足的信息资源，是一个很好的沟通工具。但犯罪份子也在使用互联网，因此并不是所有的网页都安全。Browsingtocertaintypesofwebsiteisprohibitedbycompanypolicy:浏览某些类型的网站是酒店规章制度不允许的：Gambling赌博Pornography色情OnyourcompanyPConlybrowsetotrustedwebsites.在你酒店中的电脑只能浏览可信任的网站。Beespeciallycarefulwithsearchresults;criminalstargetpopularsearchesandsoanumberofwebsiteslistedevenonthefirstpagemaynotbesafe.请注意网站搜索的结果，罪犯份子的目标是一些热门搜索，因此很多列出的网站即使在第一页也不一定安全。NextBackSafeInternetbrowsing安全上网浏览Version2.0March2011©2011InterContinentalHotelsGroupRemember-thinkbeforeyouclick记住-在你点击前请思考一下NextBackSafeInternetbrowsing安全上网浏览Version2.0March2011©2011InterContinentalHotelsGroupNextBackAgenda议程Version2.0March2011©2011InterContinentalHotelsGroupNextBackInternetbanking网上银行Version2.0March2011©2011InterContinentalHotelsGroupThenextthingyouknowcriminalshaveusedthestolencredentialsandyouraccounthasunauthorisedtransfers.随后犯罪份子将使用偷取的银行信用证书和你的账号来进行非法转账。IfyouuseaPCforInternetbanking(eitheratworkorathome)beverycarefulhowelseyouuseit.因此当你使用网上银行(无论是在工作中或在家里)，必须要非常小心。NextBackInternetbanking网上银行Version2.0March2011©2011InterContinentalHotelsGroupNextBackAgenda议程Version2.0March2011©2011InterContinentalHotelsGroupNextBackProtectingyourscreen保护您的屏幕Version2.0March2011©2011InterContinentalHotelsGroupLockyourscreenwhenyouleaveyourworkstation.当你离开时，请将电脑的屏幕锁住。AquickwaytolockthescreenistoholddownthewindowskeythenpressL.有一种锁屏的快捷方式，同时按下“windows”键和“L”键。FrontdeskstaffwhoonlyaccessthePMSmaylogoutofthePMSratherthanlocktheworkstation.对于前台操作PMS的员工，只能是注销PMS账号，而不是锁住电脑。NextBackProtectingyourscreen保护您的屏幕Version2.0March2011©2011InterContinentalHotelsGroupNextBackAgenda议程Version2.0March2011©2011InterContinentalHotelsGroupNextBackVersion2.0March2011©2011InterContinentalHotelsGroupNextBackVersion2.0March2011©2011InterContinentalHotelsGroupNextBackAgenda议程Version2.0March2011©2011InterContinentalHotelsGroupNeverleaveyourlaptopunattendedinpublicandkeepitoutofsightifpossible.不要让你的笔记本电脑放在没人照看的公共场合，尽量不要让它离开你的视线。Ifyouhavetoleaveitinthecarthenlockitintheboot/trunk,butdonotleaveitintheboot/trunkofanestateorhatchbackcar.如果你要把它放在车里，请锁在后备箱，但不要放在客货两用车或掀背式汽车的后备箱。Takeextracareincarparks,airportsandonpublictransportastheseplacescanbetargetedbycriminals.在停车场、机场和公交车这些地方要额外小心，这些地方往往是罪犯分子的首选目标。Ingeneralsaveinformationontothehotelnetworkratherthanyourlaptopharddrive.文件资料通常存储在酒店的文件服务器，而不是在你的笔记本硬盘里。NeverstorerestrictedinformationonUSBmemorysticks,CDsorotherportablemediaasthesearenotprotectedbydefault.请不要将保密信息存储在U盘，CD光盘等其他便携式电子产品中，因为在这些情况下是不受保护的。NextBackVersion2.0March2011©2011InterContinentalHotelsGroupNextBackAgenda议程Version2.0March2011©2011InterContinentalHotelsGroupCriminalsknowthatonewaytogainaccesstoyoursystemsortogetinformationistosimplyaskforit.SomeofourhotelshavehadcallsfromcriminalspretendingtobefromITsupport.罪犯知道如何访问你系统的方法或者用最简单的询问方式来获取他们所需的信息，我们就有一些酒店接到罪犯自称是ITsupport的电话。Ifyoureceiveunexpectedcallsthendonotcarryoutanyactionstheyaskyoutoandcertainlydonotbrowsetoanywebsitestheysuggest.如果你接到意外电话请不要做任何他们要求的事，当然也不要打开任何他们建议的网页。Ifindoubt,takethecallersdetailsandthefaultreferencenumberthencallyournormalsupportdeskontheirnormalnumbertoconfirmthateverythingisOK.如果有疑问，请记下来电者的信息和故障编号，然后拨打常用的支持中心电话去确认是否一切正常。TheIHGstandardsupportwebsiteisNextBackUnexpectedcalls意外来访Version2.0March2011©2011InterContinentalHotelsGroupTakesimilarprecautionsforsitevisitsbyengineers.

工程师现场访问采取类似的防范措施。Someonewithphysicalaccesstoyourservers,workstations,orlaptopscaninstallmalicioussoftwareorstealinformation.某人可以采取物理方式来访问您的服务器、工作站、或笔记本电脑来安装恶意软件或窃取信息。Ifyoureceiveanunexpectedvisitfromsomeoneclaimingtobeanengineeraskfor