安全管理--國(guó)際信息安全技術(shù)標(biāo)準(zhǔn)發(fā)展-英文版

1、安全管理-國(guó)際信息安全技術(shù)標(biāo)準(zhǔn)發(fā)展-英文版WG1 ISMS StandardsChair Ted HumphreysVice-Chair Angelika PlateWG4 Security Controls & ServicesChair Meng-Chow KangWG2Security TechniquesChair Prof. K NaemuraWG3Security EvaluationChair Mats OhlinWG5Privacy Technology, ID management and BiometricsChair Kai RannenbergUnknown and e

2、merging security issuesKnown security issuesSecurity breaches and compromisesIncludes ISO/IEC 24762, Vulnerability Mgmt, IDS, & Incident Response related standardsAnti-Spyware, Anti-SPAM, Anti-Phishing, Cybersecurity-event coordination & information sharingISO 18028 revision; WD for new Part 1, 2 &

3、3; New Study Period on Home Network Security1st WD available for commentsFuture NPNew Study Period proposed; Includes outsourcing and off-shoring security6ProtectDetectReact/ResponseIT Security PlanningActivateBCPActivate DCRPPlanPrepare & TestPlanPrepare & TestBusiness Continuity PlanningDisaster C

4、ontingency & Recovery PlanningDisasterEventsIT SystemsFailuresOperational StatusTimeIncidentCurrent IHM, BCM and DRP focus on shortening period of disruption and reducing the impact of an incident by risk mitigation and recovery planning.T=0T=iT=kT=lT=j100%x%y%z%Early detection and response capabili

5、ties to prevent sudden and drastic failure, enable gradual deterioration of operational status and further shorten recovery time. Before implementation of IHM, BCM, and/or DRPAfter implementation of IHM, BCM, and/or DRPAfter implementation of ICT Readiness for BCSplogs, SPAM,Search Engine PoisoningSpywareTrojansVirus/WormsSPAMExploit URLsPhishingT