Doc01 - ISO 27001-2013 ISMS Manual TOP
August 31, 2022 | Author: Anonymous | Category: N/A
Short Description
Download Doc01 - ISO 27001-2013 ISMS Manual TOP...
Description
FXA >7223?>238 FXMX Mcduck preteslnfswcs preteslnfswcs Udhctegarfzei Ocducry 2>2 375 Mfdutes lttps?//fsahadsuktcdtjuwcft.ham/>2>2/23/27223>238-fsms-mcduck/
3 Fdtraiuhtfad Ylfs sehtfad presedts tle Xhape a` tle Fd`armctfad Xehurfty Mcdcgemedt Xystem (FXMX). Ylfs fdhkuies tle purpase cdi tle cppkfhctfad a` FXMX.
3.2 Xhape Yle Xhape a` tle FXMX havers, \\\, fts Xerver raam cdi fts mcdcgemedt rekctei ta nusfdess cppkfhctfads, ta fmpkemedt tle FY servfhes pravfiei ta fdterdck cdi exterdck hustamers `ram fts a``fhe kahctfad ct \\\\\\\. (Date? re`er ta Kctest versfad a` “FXA >7223->238-XAC .xksx ‖`ar exhkusfads)
3.3 Gederck Ylfs FXMX mcduck spehf`fes tle requfremedts `ar estcnkfslfdg, fmpkemedtfdg, madftarfdg, revfewfdg, mcfdtcfdfdg, cdi fmpravfdg iahumedtei FXMX wftlfd tle hadtext a` tle .‖ averckk Nusfdess requfremedts. Ft spehf`fes tle fmpkemedtctfad a` sehurfty hadtraks hustamfzei h ustamfzei ta tle deeis a` \\\. Yle FXMX fs iesfgdei ta edsure ciequcte cdi cppraprfcte sehurfty hadtraks tlct mcfdtcfd Had`fiedtfckfty, Fdtegrfty cdi Cvcfkcnfkfty (HFC) a` fd`armctfad cssets. @ar cppkfhcnfkfty (wftl rctfadcke) cdi exhkusfad (wftl oustf`fhctfad) a` hadtraks re`er Xtctemedt a` Cppkfhcnfkfty (XAC). Yle XAC cs cppkfhcnke ta \\\ fs edhkasei. Cs hertcfd hadtraks cre dat cppkfhcnke ct praoeht sftes, praoeht sfte spehf`fh XAC fs cksa mcie.
3.> ^e`eredhes Yle `akkawfdg iahumedts were re`errei `ar tle hrectfad a` tlfs iahumedt. Ylese fdhkuie?
FXA/FEH >7223?>238, Fd`armctfad tehldakagy ‘ tehldakagy ‘ Xehurfty Xehurfty tehldfques ‘ tehldfques ‘ Fd`armctfad Fd`armctfad sehurfty mcdcgemedt systems ‘ systems ‘ ^equfremedts ^equfremedts
3.8 Yerms cdi Ie`fdftfads
Csset ‘ Cdytlfdg Cdytlfdg tlct lcs c vckue ta tle argcdfzctfad. Cvcfkcnfkfty ‘ ‘ Yle Yle praperty a` nefdg chhessfnke cdi usecnke upad iemcdi ny cd cutlarfzei
edtfty.
Nusfdess Hadtfdufty Rkcd (NHR) ‘ C pkcd ta nufki-fd praper reiudicdhfes cdi cvafi hadtfdgedhfes ta edsure hadtfdufty a` Nusfdess. Hamputer Meifc ‘ Fdhkuies ckk ievfhes tlct hcd ekehtradfhckky stare fd`armctfad. Ylfs fdhkuies nut dat kfmftei ta ifsjettes, HI‖s, tcpes, hcrtrfiges, cdi partcnke lcri l cri ifsjs. ifsjs. Had`fiedtfckfty ‘ ‘ Edsurfdg Edsurfdg tlct fd`armctfad fs chhessfnke adky ta tlase cutlarfzei ta lcve chhess. Hadtfduck Fmpravemedt ‘ ‘ Hadtfduck Hadtfduck Fmpravemedt re`ers ta stcge fmpravemedt pragrcms
tlct `chfkftcte rcpfi fmpravemedt plcses wftl fdtermeifcte stcnfkfzei plcses. Hadtrak ‘ ‘ C C mehlcdfsm ar praheiure fmpkemedtei ta sctfs`y c hadtrak anoehtfve Hadtrak Anoehtfve ‘ ‘ C C stctemedt a` fdtedt wftl respeht ta c iamcfd aver same cspehts a` cd argcdfzctfad‖s resaurhes ar prahesses. Fd terms a` c mcdcgemedt system, hadtrak anoehtfves pravfie c `rcmewarj `ar ievekapfdg c strctegy `ar `uk`fkkfdg c set a` sehurfty requfremedts. Ifscster ^ehavery (I^) ‘ ‘ C C pkcd `ar tle ecrky rehavery a` Nusfdess aperctfads fd tle evedt a` cd fdhfiedt tlct prevedts darmck aperctfad. @ckknchj ‘ Rravfsfads ta pravfie servfhe fd tle evedt a` `cfkure a` hamputfdg ar hammudfhctfads `chfkftfes. Fd`armctfad Xehurfty ‘ ‘ Xehurfty Xehurfty preservctfad a` Had`fiedtfckfty, Fdtegrfty cdi Cvcfkcnfkfty a` Fd`armctfad. Fd`armctfad Xehurfty Evedt ‘ Cd Cd fiedtf`fei ahhurredhe a` c system, servfhe ar detwarj stcte fdifhctfdg c passfnke nrechl a` fd`armctfad sehurfty pakfhy pakfh y ar `cfkure a` sc`egucris, ar c prevfausky udjdawd sftuctfad tlct mcy ne fdvakvei. Fd`armctfad Xehurfty Fdhfiedt ‘ C C sfdgke ar serfes a` udwcdtei ar udexpehtei ud expehtei fd`armctfad sehurfty evedts tlct lcve c sfgdf`fhcdt prancnfkfty a` hampramfsfdg nusfdess aperctfads cdi tlrectedfdg fd`armctfad sehurfty. Fd`armctfad Xehurfty Mcdcgemedt Xystem (FXMX) ‘ ‘ Ylct Ylct pcrt a` averckk mcdcgemedt system ncsei ad nusfdess rfsj cpprachl, ta estcnkfsl, fmpkemedt, apercte, madftar, revfew, mcfdtcfd, cdi fmprave fd`armctfad sehurfty. Yle mcdcgemedt system fdhkuies argcdfzctfadck struhture, pakfhfes, pkcddfdg chtfvftfes, respadsfnfkftfes, prchtfhes, praheiures, prahesses cdi resaurhes. Fdtegrfty ‘ Xc`egucrifdg tle chhurchy cdi hampketedess a` fd`armctfad cdi prahessfdg metlais.
Argcdfzctfad ‘ ‘ ^e`ers ^e`ers taa`\\\ udkess spehf`fei atlerwfse. ^fsj ‘ ‘ Yle Yle hamnfdctfad tle prancnfkfty a` cd evedt cdi fts hadsequedhe. ^esfiuck ^fsj ‘ Yle Yle rfsj remcfdfdg c`ter rfsj trectmedt. ^fsj Chheptcdhe ‘ ‘ Iehfsfad Iehfsfad ta chhept rfsj. ^fsj Cdckysfs ‘ ‘ Xystemctfh Xystemctfh use a` fd`armctfad ta fiedtf`y saurhes cdi ta estfmcte tle rfsj. ^fsj Cssessmedt ‘ ‘ Averckk Averckk prahess a` rfsj cdckysfs cdi rfsj evckuctfad. ^fsj Evckuctfad ‘ ‘ Rrahess Rrahess a` hampcrfdg tle estfmctei rfsj cgcfdst gfved rfsj hrfterfc ta ietermfde tle sfgdf`fhcdhe a` tle rfsj. ^fsj Mcdcgemedt ‘ Haarifdctei chtfvftfes ta ifreht cdi hadtrak cd argcdfzctfad wftl regcri ta rfsj. ^fsj Yrectmedt ‘ Rrahess Rrahess a` sekehtfad cdi fmpkemedtctfad fmpkemed tctfad a` mecsures ta maif`y rfsj. Xtctemedt a` Cppkfhcnfkfty ‘ Cppkfhcnfkfty ‘ Iahumedt Iahumedt ieshrfnfdg tle hadtrak anoehtfves cdi hadtraks tlct cre rekevcdt cdi cppkfhcnke ta \\\‖s FXMX, ncsei ad tle resukts cdi hadhkusfads a` tle
^fsj Cssessmedt cdi ^fsj Yrectmedt Rrahesses. Ft slauki hkecrky fdifhcte exhkusfads wftl cppraprfcte recsads.
> Cnaut tle Mcduck Ylfs sehtfad presedts c nrfe` avervfew a` tle Fd`armctfad Xehurfty Mcdcgemedt Xystem (FXMX) mcduck a` \\\.
>.3 Argcdfzctfad a` tle Mcduck Yle FXMX mcduck fs fdtediei cs c re`eredhe iahumedt ieshrfnfdg tle sehurfty `rcmewarj ciaptei ny \\\. Ft fs argcdfzei cs per tle Ycnke a` Hadtedts.
>.> Iahumedt Cvcfkcnfkfty Ylfs iahumedt fs cvcfkcnke ta ckk empkayees a` tle \\\ fd tle `arm a` wen pcge ad tle fdtrcdet. Ylfs fs c reci-adky hapy cdi tle rekevcdt pcrt a` tle iahumedtctfad fs cvcfkcnke ta adky cutlarfzei users ncsei ad tlefr nusfdess requfremedts.
>.8 Iahumedt Hadtrak Fd`armctfad Ft fs tle respadsfnfkfty a` tle \\\ ta rekecse cd cppravei iahumedt `ar tle \\\.
8 Argcdfzctfad Avervfew Ylfs sehtfad presedts cd avervfew a` tle \\\ cdi fts aperctfads. \\\ mfssfad fs ta `uk`fkk tle pramfse a` cppkyfdg tehldakagy ta edcnke tle suhhess a` hustamer nusfdess ny per`armfdg ct c kevek a` trust, pcrtderslfp, cdi fddavctfad tlct `cr exheei wlct yau lcve hame ta expeht ex peht `ram tehldakagy servfhes pravfiers. Fd tle scme wcy, we jdaw tlct ta chlfeve tlct cspfrctfad, we must exheei wlct aur pra`essfadcks lcve hame ta expeht `ram tehldakagy servfhes empkayers.
9 Hadtext a` tle Argcdfzctfad Argcdfzctfad 9.3 Udierstcdifdg tle Argcdfzctfad cdi ft‖s Hadtext Hadtext \\\ slckk ietermfde exterdck cdi fdterdck fssues tlct cre rekevcdt `ar iekfverfdg tle servfhes `ram Xerver ^aam cdi Nusfdess Aperctfad tlct c``eht fts cnfkfty ta chlfeve tle fdtediei resukts a` FXMX. Yle fssues wlfhl cre fd hadsfierei dehesscry `ar9.>. iekfverfdg tle servfhes ta fdterdck cdi exterdck stcjelakiers cre gfved tle tcnke c`ter sehtfad
9.> Udierstcdifdg tle Deeis cdi Expehtctfad `ram Fdterestei Rcrtfes \\\ slckk ietermfde tle `akkawfdg? 3. Fdterestei pcrtfes tlct cre rekevcdt ta FXMX ‘ Ckk hustamers (Fdterdck cdi Exterdck), Pediars, Xuppartfdg tle Fd`rcstruhture fd Xerver ^aam & atler Nusfdess aperctfad, Ckk empkayees pravfifdg & gettfdg servfhes ta Xerver ^aam & atler Nusfdess aperctfad. >. Yle requfremedt a` tlese fdterestei pcrtfes rekevcdt ta Fd`armctfad Xehurfty Yle deeis cdi c di expehtctfads `ram exterdck cs wekk cs fdterdck hustamers cre hadsfierei cs udier, cdi wfkk ne revfewei cdi upictei aver c perfai a` tfme cs pcrt a` hadtfduck fmpravemedt. Fdterdck
Xtcje lakiers
Fssues
Mcdcgemedt
Gaverdcdhe, ^esaurhe cvcfkcnfkfty, argcdfzctfad struhture, struhture, rakes cdi chhaudtcnfkftfes, Rakfhfes, anoehtfves, cdi tle strctegfes strctegfes
Empkayees
@uk`fkkmedt a` hammftmedts, cileredhe ta argcdfzctfad pakfhfes, prahesses cdi gufiekfdes cdi ta edsure secmkess / udfdterruptei aperctfads. Expehtctfad a` empkayees fd terms a` hammftmedt mcie ny tle argcdfzctfad deei ta ne `uk`fkkei.
Xlcrelakiers
^ekctfadslfp wftl, cdi perheptfads cdi vckues a`, fdterdck stcjelakier‖s stcjelakier‖s
Nacri a` Ifrehtars
Mcfdtcfdfdg hammftmedt ta hustamers, gaaiwfkk cdi repute a` tle argcdfzctfad, cdi mcfdtcfdfdg returd ad fdvestmedt hammfttei ha mmfttei ad tle nusfdess, fd tatckfty
Harparcte requfremedts Xtcdicris, gufiekfdes cdi maieks ciaptei ny tle argcdfzctfad Users / iepcrtmedts
Atler
Fd`armctfad tehldakagy rekctei requfremedts ta tle argcdfzctfad suhl cs chhess rfglt, FY fd`rc cvcfkcnfkfty ta fdterdck users cdi atler iepcrtmedts.
L^
^esaurhe cvcfkcnfkfty, resaurhe hampetedhe, trcfdfdg, nchjgraudi verf`fhctfad eth.,
@fdcdhe
Cppravck a` `fdcdhfck hammftmedts
Kegck
Pettfdg a` Kegck hadtrchts cdi pratehtfdg tle argcdfzctfad `ram dad-hampkfcdhe a` kegck, regukctary cdi hadtrchtuck requfremedts
Exterdck Hustamers
Xervfhe iekfvery
Hustamers
Xuppky a` gaais cdi servfhes ta edcnke tle argcdfzctfad ta meet tle requfremedt a` tle hustamer
Hustamer
^fsj Cssessmedt & ^fsj Yrectmedt Rraheiure `ar cssessmedt tle rfsj `ar fdterdck cs wekk cs exterdck hustamer @ar mcdcgfdg tle hustamer rekctei sehurfty cspehts, tle argcdfzctfad lcs iepkayei `ew pakfhfes, prahess cdi praheiure suhl cs Rcsswari Rakfhy, FEM-Fdterdet FY Chhess hadtrak Rakfhy, PRD-Pfrtuck Rrfvcte Detwarj Rakfhy, & Ekehtradfh Messcgfdg Uscge Rakfhy, Cdtfvfrus Rakfhy, Fd`armctfad Hkcssf`fhctfad, Kcnekfdg cdi Lcdikfdg Rakfhy, Csset Lcdikfdg Rrahess, Nusfdess Hadtfdufty Rkcd Rrahess, Rlysfhck Xehurfty Mcdcgemedt Rraheiure cdi mcdy mare.
Hustamer
Users / Runkfh
Fd`armctfad tehldakagy rekctei requfremedts ta tle argcdfzctfad suhl cs chhess rfglt, FY fd`rc cvcfkcnfkfty ta fdterdck users cdi atler iepcrtmedts.
Gaverdmedt
Xunmfssfad a` iesfrei reparts cdi stctemedts cdi cppravcks ta hcrry aut tle nusfdess. @uk`fkkfdg tle kegck, cdi regukctary requfremedt.
Xahfety edvfradmedt
cdi lcvfdg Dcturckfmpcht cdi hampetftfve edvfradmedt, irfves cdi tredis ad tle anoehtfves a` tle Jey argcdfzctfad, Rakftfhck, `fdcdhfck stctus a` tle haudtry.
9.8 Ietermfdfdg tle shape a` tle Fd`armctfad sehurfty mcdcgemedt Xystem Yle Xhape a` tle FXMX havers,
Yle \\\ Xerver ^aam, Nusfdess Aperctfad cdi fts mcdcgemedt Ya fmpkemedt tle FY servfhes pravfiei ta fdterdck cdi exterdck hustamers
Xerver raam fs kahctei ct \\\ (Date? re`er ta XAC `ar exhkusfads)
9.9 Fd`armctfad Xehurfty Mcdcgemedt Xystem \\\ slckk estcnkfsl, fmpkemedt, Mcfdtcfdei cdi hadtfduckky fmprave cd fd`armctfad sehurfty mcdcgemedt system, fd chharicdhe wftl tle requfremedts a` FXA >7223?>238.
5 Kecierslfp Ylfs sehtfad presedts tle \\\‖s fdftfctfve cdi hammftmedt ta e``ehtfve fmpkemedtctfad cdi aperctfad a` FXMX. Fd ciiftfad, tlfs sehtfad lfglkfglts tle rakes cdi respadsfnfkftfes cssahfctei wftl FXMX aperctfad.
5.3 Kecierslfp cdi hammftmedt Yap mcdcgemedt slckk iemadstrcte kecierslfp cdi hammftmedt wftl respeht ta tle fd`armctfad Xehurfty mcdcgemedt system ny? 3. Edsurfdg tle fd`armctfad sehurfty pakfhy cdi tle fd`armctfad sehurfty anoehtfves cre estcnkfslei cdi cre hampctfnke wftl tle strctegfh ifrehtfad a` tle argcdfzctfad: >. Edsurfdg tle fdtegrctfad a` tle fd`armctfad sehurfty mcdcgemedt mcd cgemedt system requfremedts fdta tle argcdfzctfad‖s prahesses: prahesses: 8. Edsurfdg tlct tle resaurhes deeiei `ar tle fd`armctfad sehurfty mcdcgemedt system cre cvcfkcnke: 9. Hammudfhctfdg tle fmpartcdhe a` e``ehtfve fd`armctfad sehurfty mcdcgemedt cdi a` had`armfdg ta tle fd`armctfad sehurfty mcdcgemedt system requfremedts: 5. Edsurfdg tlct tle fd`armctfad sehurfty mcdcgemedt system chlfeves fts fdtediei authame(s): 0. Ifrehtfdg cdi suppartfdg persads ta hadtrfnute ta tle e``ehtfvedess a` tle fd`armctfad sehurfty mcdcgemedt system: 7. Rramatfdg hadtfduck fmpravemedt: cdi suppartfdg atler rekevcdt mcdcgemedt rakes ta iemadstrcte tlefr kecierslfp cs ft cppkfes ta tlefr crecs a` respadsfnfkfty.
5.> FXMX Rakfhy \\\ fs hammfttei ta mcfdtcfd lfgl quckfty stcdicris fd iekfverfdg tfmeky cdi hast e``ehtfve sakutfads ta aur hustamers ny hadtfduck fmpravemedt a` aur prahesses, fdstfkkfdg quckfty hadshfausdess cmadgst ckk empkayees cdi rehagdfzfdg tle had`fiedtfckfty, fdtegrfty cdi cvcfkcnfkfty a` fd`armctfad cssets ta rekevcdt stcjelakiers fdhkuifdg aur hustamers. ^fsj mcdcgemedt wfkk ne iade cs per “HR-25-FXMX-^C^Y-^fsj “HR -25-FXMX-^C^Y-^fsj Cssessmedt & ^fsj Yrectmedt Rraheiure‖ cdi tle rfsj wfkk ne evckuctei ncsei ad csset vckue, tlrect cdi vukdercnfkftfes. F` rfsj vckue fs lfgl, ciequcte hadtraks wfkk ne fmpkemedtei. Chtfad Gufiekfde?
3. \\\ prevedts kecjcge, iestruhtfad, cdi fkkegck use a` ckk fd`armctfad rekctfdg ta tle hustamers, vediars, mcdcgemedt eth. cdi nufkis tle system ta sehure tle had`fiedtfckfty, fdtegrfty cdi cvcfkcnfkfty a` tle fd`armctfad `ar icfky aperctfads. >. Hampcdy rehagdfzes tle vckue a` tle prfvcte fd`armctfad a` ckk stc`` cdi sehures ft. 8. \\\ estcnkfsles c hadtfdgedhy pkcd ta sehure hadtfductfad a` tle nusfdess, cssumfdg ahhurredhes a` c dcturck ifscster, terrarfsm, c kcrge shcke fd`ehtfad ifsecse eth. 9. Hampcdy pravfies ckk stc`` wftl praper eiuhctfad cdi trcfdfdg ta mcfdtcfd cdi fmprave tle e``ehtfvedess a` tle fd`armctfad sehurfty mcdcgemedt system
5. Hampcdy nufkis cdi mcdcges cd argcdfzctfad a rgcdfzctfad wlfhl grcsps fdhfiedts, cuifts fts aperctfads cdi e``ehtfvedess a` tle fd`armctfad sehurfty mcdcgemedt system, cdi cttempts fts hadtfduaus fmpravemedt. Ya sehure fts fd`armctfad cssets cdi fts hustamer, \\\ slckk iepkay praheiures ta mcfdtcfd had`fiedtfckfty, fdtegrfty cdi cvcfkcnfkfty a` ckk fd`armctfad cssets Nusfdess anoehtfves cdi gacks a` \\\ cre 3. Jey Anoehtfve 3? Rravfie lfgl quckfty servfhes ta aur hkfedts.
Gack 3 ‘ 3 ‘ Hkfedt Hkfedt Xctfs`chtfad Xhare a` mare tlcd 62 % Gack > ‘ ‘ Ad Ad tfme Iekfvery 4. Jey Anoehtfve >? Hadtfduaus `ahus ad empkayee sctfs`chtfad cdi hampetedhy ievekapmedt sa cs ta reiuhe cdi stcnfkfze empkayee cttrftfad.
Gack 3 ‘ 3 ‘ C C mfdfmum a` 8 mcd icys trcfdfdg fd c yecr per empkayee. Gack > ‘ ‘ Averckk Averckk cttrftfad rcte ;35% fd yecr Gack 8 ‘ 8 ‘ Empkayee Empkayee sctfs`chtfad survey share a` grecter tlcd 75%
8. Jey Anoehtfve 8? Hadtfduck fmpravemedt a` servfhes ta aur au r fdterdck & exterdck hustamers.
Gack 3 ‘ Jey prahess per`armcdhe fmpravemedt a` ct kecst 32% per cddum fd ckk iepcrtmedts
9. Jey Anoehtfve 9? Ya sehure fts fd`armctfad cssets cdi a` fts hustamers, DXY slckk iepkay praheiures ta mcfdtcfd had`fiedtfckfty, fdtegrfty cdi cvcfkcnfkfty a` ckk fd`armctfad cssets.
Gack 3 ‘ 3 ‘ Dumner Dumner a` sehurfty fdhfiedts a` lfgl severfty ta ne kess tlcd 5% a` tatck sehurfty fdhfiedts.
5. Jey Anoehtfve 5? Ya lcve yecr ad yecr revedue fdhrecse wlfke mcfdtcfdfdg pra`ftcnfkfty
Gack 3 ‘ 3 ‘ ^evedue grawtl a` 4=92% wftl respeht ta tle prevfaus `fdcdhfck yecr Gack > ‘ > ‘ Rra`ft ne`are Ycx ta ne 4=>2%
Ya meet tlese nusfdess gacks, FXMX anoehtfve cre ie`fdei. Wlfhl cre gfved fd sehtfad 0.>
5.8 Argcdfzctfadck ^akes, ^espadsfnfkftfes & Cutlarfty `ar Fd`armctfad Xehurfty \\\ fs hammfttei ta sehurfty. Yle mcdcgemedt lcs hadstftutei Fd`armctfad Xystem Xehurfty Hammfttee, wlfhl fs respadsfnke `ar ie`fdfdg cdi fmpravfdg tle FXMX. Mcdcgemedt pravfies evfiedhe a` fts hammftmedt ta tle estcnkfslmedt, fmpkemedtctfad, aperctfad, madftarfdg, revfew, mcfdtedcdhe cdi fmpravemedt a` tle FXMX cs ie`fdei fd FXMX iahumedtctfad, ny
3. >. 8. 9.
Estcnkfslfdg cd fd`armctfad sehurfty pakfhy: Edsurfdg tlct fd`armctfad sehurfty anoehtfves cdi pkcds cre estcnkfslei: Estcnkfslfdg rakes cdi respadsfnfkftfes `ar fd`armctfad sehurfty: Hammudfhctfdg ta tle argcdfzctfad tle fmpartcdhe a` meetfdg fd`armctfad sehurfty anoehtfves cdi had`armfdg ta tle fd`armctfad sehurfty pakfhy, fts respadsfnfkftfes udier tle kcw cdi tle deei `ar hadtfduck fmpravemedt: 5. Rravfifdg su``fhfedt resaurhes ta estcnkfsl, fmpkemedt, apercte, madftar, revfew, mcfdtcfd cdi fmprave tle FXMX: 0. Iehfifdg tle hrfterfc `ar chheptfdg rfsjs cdi tle chheptcnke kevek a` rfsj: 7. Edsurfdg tlct fdterdck FXMX cuifts cre hadiuhtei: . HLFE@ FD@A^MCYFAD XEHU^FYV A@@FHE^
^espadsfnke `ar ie`fdfdg FXMX @rcmewarj. ^espadsfnke `ar fmpkemedtfdg FXMX @rcmewarj ^espadsfnke `ar Runkfslfdg FXMX Mcduck ^espadsfnke `ar edsurfdg tlct sehurfty fdhfiedts cre lcdikei cdi resakvei fd e``fhfedt
mcdder. Ie`fde spehf`fh rakes cdi respadsfnfkftfes a` fd`armctfad sehurfty chrass tle \\\.
8. FD@A^MCYFAD XVXYEM XEHU^FYV HAMMFYYEE
Ievekap, mcfdtcfd, cdi fmpkemedt FXMX pakfhfes cdi praheiures Ievekap cdi mcfdtcfd Nusfdess Hadtfdufty Mcdcgemedt Rkcd `ar tle regfad. Cpprave cdi revfew tle rfsj trectmedt pkcd, cdi chhept resfiuck rfsj Iesfgd cdi iekfver cwcredess pragrcm Evckucte, fmpkemedt cdi edsure utfkfzctfad a` up-ta-icte sehurfty tehldakagy cdi tehldfques ^evfew cdi madftar fd`armctfad sehurfty fdhfiedts Edsure FXMX fs fd kfde wftl dew kegck, cimfdfstrctfve, cdi nusfdess requfremedts
Edsures tlct sehurfty fs pcrt a` tle fd`armctfad pkcddfdg prahess
Iehfie spehf`fh metlaiakagfes cdi prahesses `ar fd`armctfad sehurfty. @ar e.g. rfsj cssessmedt, sehurfty hkcssf`fhctfad system eth. Irfve \\\ wfie fd`armctfad sehurfty fdftfctfve Cssess dew system cdi servfhes `ar sehurfty ne`are cnsarnfdg tlem fdta tle system cdi fiedtf`y cdi fmpkemedt cppraprfcte sehurfty hadtraks
9. MCDCGEMEDY ^ER^EXEDYCYFPE
^espadsfnke `ar ie`fdfdg pakfhfes cdi prahesses ^espadsfnke `ar awdfdg tle sehurfty pakfhy cdi revfewfdg cdi evckuctfdg tle scme ct kecst adhe fd c yecr. ^espadsfnke `ar revfewfdg hurredt fmpkemedtctfad a` pakfhfes cdi prahesses cdi fmpravfdg tlem f` requfrei ^espadsfnke `ar revfewfdg sehurfty fdhfiedts cdi vukdercnfkftfes cdi iehfie chtfad ta ne tcjed ad tlem ^espadsfnke `ar revfewfdg cdy jfdi a` lchjfdg cttchjs cdi chtfad tcjed ta hadtrak tlem ^evfewfdg sehurfty cuift reparts cdi chtfad tcjed ta resakve DHs ^evfewfdg ifshfpkfdcry chtfad tcjed cgcfdst empkayee (f` tlere fs cdy cd y suhl hcse) ^evfew Nchjup cuift reparts cdi chtfad tcjed ad tlem. Memner a` Fd`armctfad system Xehurfty Hammfttee. Ha-arifdctes wftl Fd`armctfad Xystem Xehurfty Hammfttee. Argcdfze sehurfty revfews cdi cuifts, wftl fdterdck cdi exterdck ex terdck resaurhes Edsure fmpkemedtctfad cdi trchjfdg a` FXMX pkcd Argcdfze mcdcgemedt revfews a` FXMX Ya pramate cwcredess cmadgst empkayees ad FXMX.
5. MCDCGE^ FY
Lecifdg FY Lecifdg FY prahesses @akkaw up icfky tcsjs cdi tfhjets Lcdikfdg system sehurfty fdhfiedts cdi vukdercnfkftfes Lcdikfdg vfrus cttchjs cdi lchjfdg cttchjs cdi repartfdg tlem ta Xehurfty Hammfttee ^espadsfnke `ar revfewfdg hurredt fmpkemedtctfad a` pakfhfes cdi prahesses cdi fmpravfdg tlem f` requfrei ^espadsfnke `ar revfewfdg cdy jfdi a` lchjfdg cttchjs cdi chtfad tcjed ta hadtrak tlem ^evfewfdg sehurfty cuift reparts cdi chtfad tcjed ta resakve DHs ^evfewfdg ifshfpkfdcry chtfad tcjed cgcfdst empkayee (f` tlere fs cdy c dy suhl hcse) ^evfew Nchjup cuift reparts cdi tcje chtfad ad ft Memner a` Xehurfty Hammfttee Mcdcgfdg FY resaurhes Ya revfew cdi prfarftfze sfgdf`fhcdt fd`armctfad Cssets cdi sehurfty tlrects Fdhfiedts ^epartfdg
0. Xr.exehutfve- L^
Lecifdg L^ Rrahesses
@akkaw up icfky tcsjs cdi L^ Fssues Lcdikfdg empkayee rekctei fdhfiedts (mfshadiuhts, pakfhy vfakctfads cdi atler a``edhes) cdi tcjfdg cppraprfcte chtfad cgcfdst empkayees f` requfrei cdi repartfdg tlem ta sehurfty Hammfttee. Ycje hcre a` Lumcd resaurhe sehurfty hkcuses prfar ta empkaymedt, iurfdg empkaymedt cdi Yermfdctfad ar hlcdge a` empkaymedt.
7. Cimfd Cssfstcdt
Lecifdg Cimfd Rrahesses @akkaw up icfky tcsjs cdi Cimfd Fssues Lcdikfdg empkayee rekctei cimfd fssue (mfshadiuhts, pakfhy vfakctfads cdi atler a``edhes) cdi tcjfdg cppraprfcte chtfad cgcfdst empkayees f` requfrei cdi repartfdg tlem ta sehurfty Hammfttee Mcdcgfdg Cimfd resaurhes Rlysfhck Xehurfty cdi Rlysfhck Chhess Hadtrak
. ^fsj Cssessmedt cdi NHR HA^E YECM
^evfew, test cdi recssess tle strctegy pkcd ta ietermfde tle averckk cpprachl ta nusfdess hadtfdufty. ^espadsfnke `ar revfewfdg sehurfty fdhfiedts cdi vukdercnfkftfes cdi iehfie chtfad ta ne tcjed ad tlem
Fiedtf`y cdi ie`fde pkcds ta prateht hrftfhck nusfdess prahess `ram tle mcoar `cfkure a` fd`armctfad system ar ifscsters cdi ta edsure tfmeky resumptfads a` nusfdess chtfvfty ^evfew, test cdi recssess tle strctegy pkcd ta ietermfde tle averckk cpprachl ta nusfdess hadtfdufty. ^espadsfnke `ar revfewfdg sehurfty fdhfiedts cdi vukdercnfkftfes cdi iehfie chtfad ta ne tcjed ad tlem Hcrry aut ^C cdi prepcre ^YR
Date? ‘ Date? ‘ Cdy Cdy twa a` tle `aur memners cre c re mcdictary ta hcrry aut tlfs chtfvfty. Fd ciiftfad, tle graup lekps reiuhe tle rfsj a` ifsruptfad a` nusfdess aperctfad ny pravfifdg civfhe ad ckk cspehts a` sehurfty fdhkuifdg?
Xehurfty Cwcredess Ictc Had`fiedtfckfty cdi Rrfvchy Kagfhck Chhess Ictc Hammudfhctfads Xystems cdi Ictc Fdtegrfty Rlysfhck Xehurfty Rersadck cdi Rraheiurck Hadtraks Hadtfdgedhy cdi Ifscster ^ehavery Rkcddfdg
38. EMRKAVEEX
Expehtei ta `akkaw sehurfty pakfhy, prahesses, cdi praheiures cs iahumedtei fd FXMX.
5.8.3 Xehurfty Iamcfds ciiressei ny FXMX @akkawfdg cre tle iamcfds nefdg ciiressei ny n y FXMX?
Xehurfty Rakfhy (C.5)? Mcdcgemedt ifrehtfad cdi suppart `ar FX fd chharicdhe wftl nusfdess requfremedts cdi rekevcdt kcws cdi regukctfads. Argcdfzctfad a` Fd`armctfad Xehurfty (C.0)? Mcfdtcfd sehurfty a` fd`armctfad wftlfd tle argcdfzctfad cdi fts prahessfdg `chfkftfes tlct cre chhessei, prahessei, hammudfhctei ta, ar mcdcgei ny exterdck pcrtfes. Lumcd ^esaurhes Xehurfty (C.7)? Hkecr rakes cdi respadsfnfkftfes, FX cwcredess cdi trcfdfdgs, exftfdg tle argcdfzctfad fd cd arierky mcdder. Csset Mcdcgemedt (C.) Edsurfdga`sehurei detwarjs, mcfdtcfdfdg cppraprfcte tlfri pcrty servfhe iekfvery cgreemedts, c greemedts, mfdfmfze rfsj a` systems `cfkures, cdi prateht sa`twcre cdi fd`armctfad fdtegrfty. Hammudfhctfad Xehurfty (C38) Iecks wftl Detwarj hammudfhctfad, Fd`armctfad trcds`er cdi hammudfhctfad wftl suppkfers. Xystems Chqufsftfad, Ievekapmedt cdi Mcfdtedcdhe (C.39) ? Rrevedt errars, kass, udcutlarfzei maif`fhctfad ar mfsuse a` fd`armctfad fd cppkfhctfads, edsure sehurfty a` system `fkes cdi sa`twcre, cdi reiuhe rfsjs resuktfdg `ram expkaftctfad a` punkfslei tehldfhck vukdercnfkftfes. Xuppkfer ^ekctfadslfp (C.35) Fd`armctfad sehurfty fd suppkfer rekctfadslfp cdi suppkfer cgreemedts Fd`armctfad Xehurfty Fdhfiedt Mcdcgemedt (C.30)? Yfmeky hammudfhctfad a` FX evedts
cdi wecjdesses cdi tcjfdg harrehtfve chtfads. Fd`armctfad Xehurfty cspehts fd Nusfdess Hadtfdufty Mcdcgemedt (C.37)? Haudtercht fdterruptfads ta nusfdess cdi prateht hrftfhck nusfdess prahesses `ram e``ehts a` mcoar `cfkures ar ifscster, cdi ta edsure tfmeky resumptfad Hampkfcdhe (C.3 cdi ietermfde tle rfsjs cdi appartudftfes tlct deei ta ne ciiressei ta? 3. Edsure tle fd`armctfad sehurfty mcdcgemedt system hcd chlfeve fts fdtediei authame(s): >. rekedt, ar reiuhe, udiesfrei e``ehts: cdi 8. Chlfeve hadtfduck fmpravemedt. \\\ slckk pkcd?
3. Chtfads ta ciiress tlese rfsjs cdi appartudftfes: cdi >. Law ta 3. Fdtegrcte cdi fmpkemedt tle chtfads fdta fts fd`armctfad sehurfty mcdcgemedt system prahesses: cdi >. Evckucte tle e``ehtfvedess a` tlese chtfads.
0.3.> Fd`armctfad sehurfty rfsj cssessmedt \\\ slckk ie`fde cdi cppky cd fd`armctfad sehurfty rfsj cssessmedt prahess tlct? 3. estcnkfsles cdi mcfdtcfds fd`armctfad sehurfty rfsj hrfterfc tlct fdhkuie? 3. tle rfsj chheptcdhe hrfterfc: cdi >. hrfterfc `ar per`armfdg fd`armctfad sehurfty rfsj cssessmedts: >. edsures tlct repectei fd`armctfad sehurfty rfsj cssessmedts praiuhe hadsfstedt, vckfi cdi hampcrcnke resukts:
8. fiedtf`fes tle fd`armctfad sehurfty rfsjs? 3. cppky tle fd`armctfad sehurfty rfsj cssessmedt prahess ta fiedtf`y rfsjs cssahfctei wftl tle kass a` had`fiedtfckfty, fdtegrfty cdi cvcfkcnfkfty `ar fd`armctfad wftlfd tle shape a` tle fd`armctfad sehurfty mcdcgemedt system: cdi >. fiedtf`y tle rfsj awders: 9. cdckyses tle fd`armctfad sehurfty rfsjs? 3. cssess tle patedtfck hadsequedhes hadsequedhes tlct wauki resukt f` tle rfsjs fiedtf`fei fiedtf`fei were ta mcterfckfze: >. cssess tle reckfstfh kfjekflaai a` tle ahhurredhe a` tle rfsjs fiedtf`fei: cdi 8. ietermfde tle keveks a` rfsj: 5. evckuctes tle fd`armctfad sehurfty rfsjs? 3. hampcre tle resukts a` rfsj cdckysfs wftl tle rfsj hrfterfc estcnkfslei cdi >. Rrfarftfze tle cdckyzei rfsjs `ar rfsj trectmedt. \\\ slckk retcfd iahumedtei fd`armctfad cnaut tle fd`armctfad sehurfty rfsj cssessmedt prahess.
0.3.8 Fd`armctfad sehurfty rfsj trectmedt \\\ slckk ie`fde cdi cppky cd fd`armctfad sehurfty rfsj trectmedt prahess ta? 3.
3. sekeht cppraprfcte fd`armctfad sehurfty rfsj trectmedt aptfads, tcjfdg chhaudt a` tle rfsj cssessmedt resukts: >. ietermfde ckk hadtraks tlct cre dehesscry ta fmpkemedt tle fd`armctfad sehurfty rfsj trectmedt aptfad(s) hlased: \\\ hcd iesfgd hadtraks cs requfrei, ar fiedtf`y fiedtf` y tlem `ram cdy saurhe. 8. hampcre tle hadtraks ietermfdei fd 0.3.8 n) cnave wftl tlase fd Cddex C a` tle stcdicri FXA >7223?>238 cdi verf`y tlct da dehesscry hadtraks lcve need amfttei:
DAYE 3 Cddex C a` tle stcdicri FXA >7223?>238 hadtcfds c hampreledsfve kfst a` hadtrak anoehtfves cdi hadtraks. Users a` tlfs Fdterdctfadck Xtcdicri cre ifrehtei ta Cddex C a` tle stcdicri FXA >7223?>238 ta edsure tlct da dehesscry hadtraks cre averkaajei. DAYE > Hadtrak Ha dtrak anoehtfves cre fmpkfhftky fdhkuiei fd tle hadtraks hlased. Yle hadtrak anoehtfves cdi hadtraks kfstei fd Cddex C a` tle stcdicri FXA >7223?>238 cre dat exlcustfve cdi ciiftfadck hadtrak anoehtfves cdi hadtraks mcy ne deeiei. 3. Rraiuhe c Xtctemedt a` Cppkfhcnfkfty tlct hadtcfds tle dehesscry hadtraks cdi oustf`fhctfad `ar fdhkusfads, wletler tley cre fmpkemedtei ar dat, cdi tle oustf`fhctfad `ar exhkusfads a` hadtraks `ram Cddex C: >. @armukcte cd fd`armctfad sehurfty rfsj trectmedt pkcd: cdi 8. Antcfd rfsj awders‖ cppravck a` tle fd`armctfad sehurfty rfsj trectmedt pkcd cdi chheptcdhe a` tle resfiuck fd`armctfad sehurfty rfsjs. Yle argcdfzctfad slckk retcfd iahumedtei fd`armctfad cnaut tle fd`armctfad sehurfty rfsj trectmedt prahess. Yle ietcfks a` tle ^C prahess hcd ne n e re`errei `ram “R^AHEIU^E @A^ ^FXJ CXXEXXMEDY CDI Y^ECYMEDY‖ Yle autputs a` tle ^C prahess fdhkuie?
^fsj Cssessmedt ^epart ^fsj Yrectmedt Rkcd Xtctemedt a` Cppkfhcnfkfty (fdhkusfad wftl rctfadcke /exhkusfad wftl oustf`fhctfad)
Ncsei ad tle ^C repart, Fd`armctfad Xystem Xehurfty Haudhfk prepcres tle ^YR, wlfhl fdhkuies sekehtfad a` hadtraks. Yle \\\ tled antcfds mcdcgemedt cppravck `ar ^YR fmpkemedtctfad cdi chheptcdhe a` resfiuck rfsj.
0.> Fd`armctfad sehurfty anoehtfves cdi pkcddfdg ta chlfeve tlem \\\ Xlckk estcnkfsl fd`armctfad sehurfty anoehtfves ct rekevcdt `udhtfads cdi keveks. Yle fd`armctfad sehurfty anoehtfves slckk?
pakfhy: ne hadsfstedt wftl tle fd`armctfad sehurfty pakfhy:
ne mecsurcnke (f` prchtfhcnke): tcje fdta chhaudt cppkfhcnke fd`armctfad sehurfty requfremedts, cdi resukts `ram rfsj
cssessmedt cdi rfsj trectmedt: ne hammudfhctei: cdi Ne upictei cs cppraprfcte.
\\\ slckk retcfd iahumedtei fd`armctfad ad tle fd`armctfad sehurfty anoehtfves. @akkawfdg cre tle FXMX Anoehtfves estcnkfslei ny sedfar mcdcgemedt? FXMX Anoehtfves
3. Rrateht fd`armctfad `ram iekfnercte ar udfdtedtfadck udcutlarfzei chqufsftfad ar udcutlarfzei chhess >. Mcfdtcfd had`fiedtfckfty a` fd`armctfad. 8. Mcfdtcfd fdtegrfty a` fd`armctfad ny pratehtfdg ft `ram udcutlarfzei maif`fhctfad. 9. Cvcfkcnfkfty a` fd`armctfad ta cutlarfzei users wled deeiei 5. Meet regukctary cdi kegfskctfve requfremedts 0. Rraiuhe, mcfdtcfd cdi test Nusfdess Hadtfdufty pkcds cs `cr cs prchtfhcnke. pr chtfhcnke. 7. Yrcfd ckk stc`` ad fd`armctfad sehurfty . Xystem Cimfdfstrctar eftler lfmsek` ar slckk mcje ade a` tle ictc hedter empkayee respadsfnke `ar madftar cdi mecsuremedt a` hadtraks. 8. Yle resukts `ram madftarfdg cdi mecsuremedt slckk ne cdckyzei cdi evckuctei ct kecst ad madtlky ncsfs. Lawever tlfs cdckysfs hcd ne mcie ecrky iepedifdg ad tle exfgedhfes cdi system cimfdfstrctar slckk iehfie tle scme.: cdi 9. Xystem Cimfdfstrctar slckk cdckyses cdi evckucte tlese resukts.
7.Xuppart
7.3 ^esaurhes Yle mcdcgemedt pravfies resaurhes `ar tle fmpkemedtctfad, mcfdtedcdhe, cdi revfew a` tle FXMX. Yle resaurhes fdhkuie `udis, taaks, lumcd resaurhes cdi cdy atler resaurhes tlct mcy ne requfrei `ar tle e``fhfedt per`armcdhe a` tle FXMX. Rerfaifhckky tle \\\. evckuctes resaurhe requfremedts `ar fmpravemedts fd sehurfty fd`rcstruhture ncsei ad ^C, revfew /cuift reharis. Ncsei ad resaurhe requfremedts, tle Mcdcgemedt cppraves/ ckkahctes tle requfrei resaurhes.
7.> Hampetedhe Rersaddek wla lcve experfedhe cdi expertfse ex pertfse fd tle cppkfhctfad iamcfd cdi fd fd`armctfad sehurfty hadhepts cre cssfgdei ta mcdcge FXMX. Wledever `ecsfnke, experfedhei fdifvfiucks cre cvcfkcnke cdi ckkahctei cppraprfcte respadsfnfkftfes. Wled tle requfrei keveks a` sjfkk cdi expertfse cre dat cvcfkcnke, trcfdfdgs cre pravfiei ta edsure sjfkk / jdawkeige edlcdhemedt cs per tle \\\ trcfdfdg prahess. Yle FXMX trcfdfdg slauki `arm cd fdtegrck pcrt a` trcfdfdg hurrfhukum a` L^ Iept. fd cssahfctfad wftl Ha-arifdctfad Yecm. ^e`er “R^-32-Y^C-Yrcfdfdg Rrahess‖ Rrahess‖
Fiedtf`yfdg wlct trcfdfdg fs deeiei, cdi law `requedtky, `ar spehf`fh pasftfads. Fiedtf`yfdg quckf`fei fdifvfiucks/cgedhy ta hadiuht tle trcfdfdg pragrcm. Argcdfzfdg tle trcfdfdg pragrcm. Mcfdtcfdfdg cttedicdhe reharis, haurse autkfdes cdi haurse `eeinchj a` ckk trcfdfdgs hadiuhtei.
Yle \\\ mcfdtcfds reharis a` ckk trcfdfdg pragrcms cs medtfadei fd tle trcfdfdg prahess.
7.8 Cwcredess Rersads iafdg warj udier tle argcdfzctfad‖s hadtrak slckk ne cwcre a`? a`?
tle fd`armctfad sehurfty pakfhy: tlefr hadtrfnutfad ta tle e``ehtfvedess a` tle fd`armctfad sehurfty mcdcgemedt system, fdhkuifdg tle nede`fts a` fmpravei fd`armctfad sehurfty per`armcdhe: cdi Yle fmpkfhctfads a` dat had`armfdg ta tle fd`armctfad sehurfty mcdcgemedt system requfremedts. Ckk upictes fd argcdfzctfad pakfhfes & praheiure, wlfhl cre rekevcdt ta tlefr oan `udhtfad
7.9 Hammudfhctfad Users slckk ne mcie cwcre cnaut tle rfsj a` Fd`armctfad Xehurfty wlfke exhlcdgfdg fd`armctfad tlraugl Pafhe, Emcfk, @cx, cdi Pfiea Hammudfhctfad `chfkfty. Wlct ta hammudfhcte
Wled ta hammudfhcte
Wftl wlam ta Wla slckk hammudfhcte hammudfhcte
Rrahesses ny wlfhl hammudfhctfad slckk ne e``ehtei.
Yehldfhck Mctters
Ya seej hkcrf`fhctfad, hammudfhcte Hustamer exehutfad cdi ifshussfdg aptfads a` iekfvery
Iekfvery Mcdcger Emcfk / Pfiea / Yehldfhck Keci Hckk/Rlade
Dad-Yehldfhck Nusfdess Ievekapmedt
wled hammudfhctfdg upgrcies / upictes Hustamer cdi a``ers a` DXY
Chhaudt Mcdcger
@fdcdhfck Fd`armctfad suhl cs Cs cdi wled tle Fdvafhes, Rcymedt evedt tcjes pkche remfdier, Rrapasck, upgrcie a``er eth. Yehldfhck Mctters
Ya get tle chtfad fdftfctei ad hampketfad a` iekfvery
Rer`armcdhe ^epart Madtlky / qucrterky
Hustamer
Emcfk / Pfiea Hckk/Rlade
Chhaudts Mcdcger
Emcfk / Pfiea Hckk/Rlade
Chhaudts Iekfvery Mcdcger Emcfk / Pfiea Mcdcger / / Yehldfhck Keci Hckk/Rlade Nusfdess Leci Chhaudt Mcdcger RRY / Wari / Exhek ‘ Nusfdess Leci cdi Iekfvery Emcfk/Rlade Mcdcger
Yehldfhck Mctters
Cs cdi wled tle evedt tcjes pkche
Rraoeht Mcdcger
Ievekaper/Yester
RRY / Wari / Exhek ‘ Emcfk/Rlade
Detwarj Xehurfty Mctters
Cs cdi wled tle evedt tcjes pkche
FY Yecm
Empkayees
Emcfk/ Rlade/ @che ta @che
Xerver Xehurfty Mctters
Cs cdi wled tle evedt tcjes pkche
FY Yecm
Empkayees
Emcfk/ Rlade/ @che ta @che
Cppkfhctfad Xehurfty Cs cdi wled tle Mctters evedt tcjes pkche
FY Yecm ar RM Empkayees
Emcfk/ Rlade/ @che ta @che
Rlysfhck Xehurfty Mctters
Cimfd
Emcfk/ Rlade/ @che ta @che
Cs cdi wled tle evedt tcjes pkche
Empkayees
7.5 Iahumedtei fd`armctfad 7.5.3 Gederck
Yle argcdfzctfad‖s fd`armctfad sehurfty fd`armctfad sehurfty mcdcgemedt system slckk fdhkuie? 3. Iahumedtei fd`armctfad requfrei ny tlfs Fdterdctfadck Xtcdicri: cdi >. Iahumedtei fd`armctfad ietermfdei ny tle argcdfzctfad cs nefdg dehesscry `ar tle e``ehtfvedess a` tle fd`armctfad sehurfty mcdcgemedt system. DAYE? Yle extedt a` iahumedtei fd`armctfad `ar cd fd`armctfad sehurfty sehurfty mcdcgemedt system hcd if``er `ram ade argcdfzctfad ta cdatler iue ta?
3. Yle sfze a` argcdfzctfad cdi fts type a` chtfvftfes, prahesses, praiuhts cdi servfhes: >. Yle hampkexfty a` prahesses cdi tlefr fdterchtfads: cdi 8. Yle hampetedhe a` persads. 7.5.> Hrectfdg cdi upictfdg
Wled hrectfdg cdi upictfdg iahumedtei fd`armctfad tle argcdfzctfad slckk edsure cppraprfcte? 3. Fiedtf`fhctfad cdi ieshrfptfad (e.g. c tftke, icte, cutlar, ar re`eredhe dumner): >. @armct (e.g. kcdgucge, sa`twcre versfad, grcplfhs) cdi meifc (e.g. pcper, ekehtradfh): cdi 8. ^evfew cdi cppravck `ar suftcnfkfty cdi ciequchy. 7.5.8 Hadtrak a` iahumedtei fd`armctfad
Iahumedtei fd`armctfad requfrei ny tle fd`armctfad sehurfty mcdcgemedt system cdi ny tlfs Fdterdctfadck Xtcdicri slckk ne hadtrakkei ta edsure? 3. ft fs cvcfkcnke cdi suftcnke `ar use, wlere cdi wled ft fs deeiei: cdi >. ft fs ciequcteky pratehtei (e.g. `ram kass a` had`fiedtfckfty, fmpraper use, ar kass a` fdtegrfty). @ar tle hadtrak a` iahumedtei fd`armctfad, tle argcdfzctfad slckk ciiress tle `akkawfdg chtfvftfes, cs cppkfhcnke? 3. >. 8. 9.
ifstrfnutfad, chhess, retrfevck cdi use: starcge cdi preservctfad, fdhkuifdg tle preservctfad a` kegfnfkfty: hadtrak a` hlcdges (e.g. versfad hadtrak): cdi ^etedtfad cdi ifspasftfad.
Iahumedtei fd`armctfad a` exterdck arfgfd, ietermfdei ny n y tle argcdfzctfad ta ne dehesscry `ar tle pkcddfdg cdi aperctfad a` tle fd`armctfad sehurfty mcdcgemedt system, slckk ne fiedtf`fei cs cppraprfcte, cdi hadtrakkei. Chhess fmpkfes c iehfsfad regcrifdg tle permfssfad ta vfew tle iahumedtei fd`armctfad adky, ar tle permfssfad cdi cutlarfty ta vfew cdi hlcdge tle iahumedtei fd`armctfad, eth. Ya meet tle requfremedt a` 7.5, tle iahumedtctfad struhture a` Fd`armctfad sehurfty mcdcgemedt Xystem fs cs ietcfkei nekaw?
Yle hampadedts a` FXMX Iahumedtctfad cre? Kevek ‘ Kevek ‘ 2 2 Harparcte Fd`armctfad Xystem Xehurfty Rakfhy)? Ft fs tle Yap-kevek sehurfty pakfhy a` tle \\\. Kevek ‘ Kevek 3 FXMX Mcduck)? Ylfs iahumedt fdhkuies requfremedts a` tle FXA/FEH >7223?>238>238 ‘ 3 stcdicri, cdi ieshrfnes law tle ie`fdei FXMX meet tle requfremedts. Yle iahumedt ietcfks tle \\\. cpprachl tawcris mcdcgemedt cdi fmpkemedtctfad a` FXMX. ‘ > Kevek ‘ Kevek > Xuppartfdg Rakfhfes & Gufiekfdes C hampkete set a` wftlfd suppartfdg cdi gufiekfdes cs fiedtf`fei cdi ie`fdei ny tle \\\. tletehldfhck shape pakfhfes a` FXMX. Kevek ‘ 8 Rraheiures cdi Rrahesses ‘ Hadtcfds prahesses cdi praheiures requfrei `ar fmpkemedtfdg cdi suppartfdg tle ie`fdei pakfhfes & gufiekfdes. Kevek ‘ 9 Yempkctes cdi @arms ‘ \\\ \\\ stcdicri tempkctes/`arms usei fd tle prahesses / praheiures. Ylese cre usei ta strecmkfde tle aperctfad a` FXMX cdi `arm c ncsfs `ar reharis. Hadtrak a` Iahumedts
Ckk iahumedts rekctei ta FXMX requfremedts cre hadtrakkei cs per HR-28-FXMX-I^M-Iahumedt & ^ehari Mcdcgemedt Rraheiure. Ylfs fdhkuies?
^evfew cdi cppravck a` iahumedts `ar ciequchy prfar ta fssue / use
Upictfdg, revfew cdi cppravck a` dehesscry hlcdges fd hadtrakkei iahumedts Cvcfkcnfkfty a` hurredt revfsfads a` dehesscry iahumedts Wftlircwck a` ansakete iahumedts `ram ckk pafdts a` fssue ar use ta edsure gucrifdg cgcfdst udfdtediei use. Ckk sehurfty iahumedts cre cvcfkcnke ad tle Fdtrcdet `ar re`eredhe cdi use ncsei ad deeita-jdaw requfremedts. Cdy iahumedt f` prfdtei fs hadsfierei ansakete. Lawever, tlfs exhkuies ckk tle iahumedts rekctei ta “Nusfdess Hadtfdufty Rkcd Rkcd
Hadtrak a` ^eharis
^eharis cre fiedtf`fei wftlfd echl praheiure fd tle FXMX ta pravfie evfiedhe a` had`armcdhe ta requfremedts cdi e``ehtfve `udhtfadfdg a` tle FXXH. Mcster kfst a` reharis fs mcfdtcfdei. ^e`er “Kfst
a` @armct-Hadtedt @armct-Hadtedt Mcster‖. Atler cttrfnutes slckk ne cs per “RA-3>-FXMX-HKL-Fd`armctfad Hkcssf`fhctfad, Kcnekfdg cdi Lcdikfdg Rakfhy.iahx ‖
< Aperctfad 7223?>238 stcdicri Edsure hampkfcdhe wftl rekevcdt kegck, stctutary cdi hadtrchtuck requfremedts requfremed ts Had`arm ta tle fiedtf`fei fd`armctfad sehurfty requfremedts FXMX fs e``ehtfveky fmpkemedtei cdi mcfdtcfdei Rer`arms cs expehtei
Xehurfty Cuifts cre hadiuhtei fd chharicdhe wftl tle cuift praheiure ie`fdei fd “ DXY-HR-20 DXY-HR-20FXMX-FCR-Fdterdck FXMX-FCRFdterdck Cuift Rraheiure‖. Yrcfdei persaddek, dat lcvfdg ifreht respadsfnfkfty a` tle chtfvfty nefdg cuiftei, slckk hadiuht cuifts. M^ wftl tle lekp a` LAIs wfkk edsure tlct cdy dadhad`armcdhe `audi fs hkasei. M^ fs respadsfnke `ar pkcddfdg, shleiukfdg, argcdfzfdg cdi mcfdtcfdfdg reharis a` tlese cuifts.
6.8 Mcdcgemedt ^evfew Yap mcdcgemedt slckk revfew fd`armctfad sehurfty mcdcgemedt system adhe every tlree madtls, ar ad cd evedt-irfved ncsfs, ta edsure fts hadtfdufdg suftcnfkfty, ciequchy cdi e``ehtfvedess. Yle mcdcgemedt revfew slckk fdhkuie hadsfierctfad a`? 3. Yle stctus a` chtfads `ram prevfaus mcdcgemedt revfews: >. Hlcdges fd exterdck cdi fdterdck fssues tlct cre rekevcdt ta tle fd`armctfad sehurfty mcdcgemedt system: 8. @eeinchj ad tle fd`armctfad sehurfty per`armcdhe, fdhkuifdg tredis fd? 9. dadhad`armftfes cdi harrehtfve chtfads: 5. madftarfdg cdi mecsuremedt resukts: 0. cuift resukts: cdi 7. @uk`fkmedt a` fd`armctfad sehurfty anoehtfves: .
8. 9. 5.
3. tcje chtfad ta hadtrak cdi harreht ft: cdi >. ieck wftl tle hadsequedhes: evckucte tle deei `ar chtfad ta ekfmfdcte tle hcuses a` dadhad`armfty, fd arier tlct ft iaes dat rehur ar ahhur eksewlere, ny? 3. revfewfdg tle dadhad`armfty: >. ietermfdfdg tle hcuses a` tle dadhad`armfty: cdi 8. ietermfdfdg f` sfmfkcr dadhad`armftfes exfst, ar hauki patedtfckky ahhur: fmpkemedt cdy chtfad deeiei: ^evfew tle e``ehtfvedess a` cdy harrehtfve chtfad tcjed: cdi Mcje hlcdges ta tle fd`armctfad sehurfty mcdcgemedt mcdcge medt system, f` dehesscry.
Harrehtfve chtfads slckk ne cppraprfcte ta tle e``ehts a` tle dadhad`armftfes edhaudterei. Yle argcdfzctfad slckk retcfd iahumedtei fd`armctfad cs evfiedhe a`? 3. Yle dcture a` tle dadhad`armftfes cdi cdy sunsequedt chtfads tcjed, cdi >. Yle resukts a` cdy harrehtfve chtfad. Yle praheiure fs hrectei, `ar fmpkemedtfdg cdi trchjfdg trchjf dg tle harrehtfdg chtfad. ^e`er “HCRC“HCRC Harrehtfve & Rrevedtfve Chtfad Rraheiure‖. Rraheiure‖.
32.> Hadtfduck Fmpravemedt \\\ fs respadsfnke `ar hadtfduck fmpravemedt a` tle FXMX `ar suftcnfkfty cdi e``ehtfvedess. Fdputs ta hadtfduck fmpravemedt hcd ne?
Hlcdge fd sehurfty pakfhfes cdi anoehtfves Cuift resukts cdi Mcdcgemedt ^evfew ^eparts Fdhfiedt ^eparts Cdckysfs a` madftarei evedts Harrehtfve cdi Rrevedtfve Chtfads Nusfdess Hlcdges Edvfradmedtck Hlcdge (Dew tlrects cdi vukdercnfkftfes) Nest prchtfhes a` fdiustry
33 FXMX
Hadtraks
Ylfs sehtfad ieshrfnes tle sekehtfad cdi fmpkemedtctfad a` hadtraks ny xxx. Yle hadtrak anoehtfves cdi hadtraks kfstei fd tlfs sehtfad cre ifrehtky ierfvei `ram tle FXA/FEH >7223?>238 stcdicri, ncsei ad “Xehtfad 5.8.3 ‘ 5.8.3 ‘ Xehurfty Xehurfty Iamcfds ciir essei essei fd FXMX‖ ‖ a` tlfs iahumedt. Hadtraks cppkfhcnke ta \\\. lcve need medtfadei cdi ciiressei fd tlfs sehtfad. Hadtraks dat cppkfhcnke ta \\. cre medtfadei fd tlfs sehtfad cdi exhkusfad wftl oustf`fhctfad gfved fd XAC. ^e`er “FXA>7223->238XAC-P>.2.xksx‖
C.5 Fd`armctfad Xehurfty pakfhfes
Yle Fd`armctfad Xehurfty Rakfhy estcnkfsles requfremedts ta edsure tlct fd`armctfad sehurfty hadtraks remcfd hurredt cs nusfdess deeis evakve cdi tehldakagy hlcdges. Ylfs pakfhy fs punkfslei cdi hammudfhctei ta ckk empkayees cdi rekevcdt exterdck pcrtfes.
C.5.3 Mcdcgemedt Ifrehtfad `ar Fd`armctfad Xehurfty Yle Hlfe` Fd`armctfad A``fher fs respadsfnke `ar estcnkfslfdg, fssufdg cdi madftarfdg fd`armctfad sehurfty pakfhfes. Hadtrak Anoehtfve? Ya pravfie mcdcgemedt ifrehtfad cdi suppart `ar fd`armctfad sehurfty fd chharicdhe wftl nusfdess requfremedts cdi rekevcdt kcws cdi regukctfads. C.5.3.3 Fd`armctfad Xehurfty Rakfhy Iahumedt
C Harparcte Fd`armctfad Xystem Xehurfty Rakfhy iahumedt cppravei ny tle mcdcgemedt exfsts. Fd`armctfad sehurfty pakfhy lcs need punkfslei cdi hammudfhctei ta ckk empkayees a` \\\ tlraugl tle Fdtrcdet cdi mcfks, trcfdfdg cdi fdiuhtfad pragrcms.Yle Fd`armctfad Xehurfty Rakfhy hadtcfds aperctfadck pakfhfes, stcdicris, gufiekfdes cdi metrfhs fdtediei ta estcnkfsl mfdfmum requfremedts `ar tle sehure iekfvery a` aur Rraiuhts/ servfhes. Xehure servfhe iekfvery i ekfvery requfres tle cssurcdhe a` had`fiedtfckfty, fdtegrfty, fdtegrfty, cvcfkcnfkfty cdi prfvchy a` fd`armctfad cssets tlr tlraugl? augl?
Mcdcgemedt cdi nusfdess prahesses tlct fdhkuie cdi edcnke sehurfty prahesses: Adgafdg empkayee cwcredess a` sehurfty fssues: Rlysfhck sehurfty requfremedts `ar fd`armctfad systems: Gaverdcdhe prahesses `ar fd`armctfad tehldakagy: Ie`fdfdg sehurfty respadsfnfkftfes: Fiedtf`yfdg, hkcssf`yfdg cdi kcnekkfdg cssets: Edsurfdg aperctfadck sehurfty, pratehtfad a` detwarjs cdi tle trcds`er a` fd`armctfad: Xc`e-gucrifdg cssets utfkfzei ny tlfri pcrtfes: ^epartfdg fd`armctfad sehurfty fdhfiedts cdi wecjdesses: Hrectfdg cdi mcfdtcfdfdg nusfdess hadtfdufty pkcds: cdi, Madftarfdg `ar hampkfcdhe.
Yle Hlfe` Fd`armctfad A``fher rehagdfzes tlct fd`armctfad sehurfty fs c prahess, wlfhl ta ne e``ehtfve, requfres exehutfve cdi mcdcgemedt hammftmedt, tle chtfve pcrtfhfpctfad a` ckk empkayees cdi adgafdg cwcredess pragrcms. C.5.3.> ^evfew a` tle pakfhfes `ar fd`armctfad sehurfty
Yle Fd`armctfad Xehurfty Rakfhy must ne revfewei ad cd cdduck ncsfs cdi upictei wled requfrei. Yle Rurpase fs taa edsure fd`armctfad sehurfty pakfhfes remcfd hurredt wftl evakvfdg nusfdess deeis, emergfdg rfsjs cdi tehldakagfhck hlcdges. \\\. fs respadsfnke `ar tle hrectfad, mcfdtedcdhe cdi upictfdg a` tle pakfhy. Fd`armctfad Xystem Xehurfty Hammfttee cppraves tle pakfhy prfar ta rekecse. Yle revfew cdi evckuctfad evc kuctfad a` FXMX pakfhy fs hadiuhtei ct kecst adhe fd c yecr. Yle revfew gufiekfdes stcte tlct tle pakfhy fs ta ne revfewei
cgcfdst fts e``ehtfvedess, hampkfcdhe ta nusfdess prahess, cdi hampkfcdhe ta tehldakagy hlcdges. Yle Hlfe` Fd`armctfad A``fher fs respadsfnke `ar revfewfdg fd`armctfad sehurfty pakfhfes, stcdicris cdi gufiekfdes ad cd cdduck cdd uck ncsfs. Rakfhfes cdi stcdicris revfews must ne fdftfctei?
Fd hadoudhtfad wftl kegfskctfve, regukctary ar pakfhy hlcdges wlfhl lcve fd`armctfad sehurfty fmpkfhctfads: Iurfdg pkcddfdg cdi fmpkemedtctfad a` dew ar sfgdf`fhcdtky hlcdgei tehldakagy: @akkawfdg c Xehurfty Ylrect cdi ^fsj Cssessmedt a` mcoar fdftfctfves (e.g., dew fd`armctfad systems ar hadtrchtfdg crrcdgemedts): Wled cuift reparts ar sehurfty rfsj cdi hadtraks revfews fiedtf`y lfgl rfsj expasures fdvakvfdg fd`armctfad systems: F` tlrect ar vukdercnfkfty tredis praiuhei `ram cutamctei madftarfdg prahesses fdifhcte tle prancnfkfty a` sfgdf`fhcdtky fdhrecsei rfsj: rfsj: C`ter rehefvfdg tle `fdck repart a` fdvestfgctfad fdta fd`armctfad sehurfty fdhfiedts: Rrfar ta redewfdg tlfri pcrty chhess cgreemedts wlfhl fdvakve mcoar pragrcms ar servfhes: Wled fdiustry, dctfadck ar fdterdctfadck stcdicris `ar fd`armctfad sehurfty cre fdtraiuhei ar sfgdf`fhcdtky revfsei ta ciiress emergfdg nusfdess cdi tehldakagy fssues: cdi, Wled cssahfctei exterdck cgedhfes (e.g., Fd`armctfad cdi Rrfvchy Hammfssfader, Mfdfstry ad Fd`armctfad Yehldakagy) fssue reparts ar fiedtf`y emergfdg tredis rekctei ta fd`armctfad sehurfty.
C.0 Argcdfzctfad a` Fd`armctfad Xehurfty Ylfs ieshrfnes tle mcdcgemedt struhture struhture deeiei ta haarifdcte fd`ar fd`armctfad mctfad sehurfty chtfvftfes chtfvftfes,, fdhkuifdg wla haarifdctes tlem cdi wlct cgreemedts cre requfrei. Haarifdctfad a` fd`armctfad sehurfty chtfvftfes requfres tle suppart a` c detwarj a` hadtchts fd tle fd`armctfad sehurfty hammudfty ta ekfhft civfhe, madftar tredis cdi ieck i eck wftl atler exterdck `chtars.
C.0.3 Fdterdck argcdfzctfad Hadtrak Anoehtfve? Ya mcdcge fd`armctfad sehurfty wftlfd \\\. ‘ Fd`armctfad C.0.3.3 ‘ C.0.3.3 Fd`armctfad Xehurfty ^akes cdi respadsfnfkftfes
Yle Rurpase fs ta edsure empkayees cre fd`armei a` tlefr fd`armctfad sehurfty rakes cdi respadsfnfkftfes. Xehurfty rakes cdi respadsfnfkftfes a` empkayees, hadtrchtars h adtrchtars cdi tlfri pcrty users cre ie`fdei cdi iahumedtei fd chharicdhe wftl tle argcdfzctfad‖s fd`armctfad sehur fty fty pakfhy. Xehurfty rakes cdi respadsfnfkftfes `ar empkayees must ne iahumedtei. c) Xehurfty rakes cdi respadsfnfkftfes n) Hammudfhctfad a` sehurfty rakes cdi respadsfnfkftfes c) Xehurfty rakes cdi respadsfnfkftfes Empkayees must ne cwcre a` tlefr fd`armctfad sehurfty rakes cdi respadsfnfkftfes. Fd`armctfad Awders cdi Fd`armctfad Hustaifcds must?
Iahumedt fd`armctfad sehurfty rakes cdi respadsfnfkftfes `ar empkayees fd oan ieshrfptfads, stcdifdg a``ers, hadtrchts, cdi fd`armctfad use cgreemedts wlere rekevcdt: cdi, ^evfew cdi upicte fd`armctfad sehurfty rakes cdi respadsfnfkftfes wled hadiuhtfdg stc``fdg ar hadtrchtfdg chtfvftfes.
n) Hammudfhctfad a` sehurfty rakes cdi respadsfnfkftfes Xupervfsars must edsure empkayees cre fd`armei a` tlefr sehurfty rakes cdi respadsfnfkftfes ny estcnkfslfdg prahesses `ar hammudfhctfdg sehurfty rakes cdi respadsfnfkftfes ta prateht fd`armctfad cssets C.0.3.> ‘ C.0.3.> ‘ Xegregctfad Xegregctfad a` iutfes
Yle Rurpase fs ta reiuhe rfsj a` kass, `rcui, errar cdi udcutlarfzei hlcdges ta fd`armctfad. Fd \\\ iutfes lcve need segregctei fd arier ta reiuhe tle rfsj a` chhfiedtck ar iekfnercte system mfsuse. If``eredt fdifvfiucks cre respadsfnke `ar tlefr respehtfve crecs, cdi praper hadtraks exfst tlct tcje hcre a` passfnfkfty a` `rcui fd crecs a` sfdgke respadsfnfkfty wftlaut nefdg ietehtei. If``eredt crecs cdi cssahfctei respadsfnfkftfes cre ie`fdei cs per ^akes cdi ^espadsfnfkftfes. Icy ta icy cimfdfstrctfad & mcfdtedcdhe a` FY Fd`rcstruhture fs iade ny FY Iepcrtmedt & LA@/FY revfew if``eredt kags & hadiuht perfaifh PC. Iutfes cdi crecs a` respadsfnfkfty must ne segregctei ta reiuhe appartudftfes `ar udcutlarfzei ar udfdtedtfadck maif`fhctfad ar mfsuse a` fd`armctfad systems. c) Xegregctfad a` iutfes n) Hrftfhck ar sedsftfve fd`armctfad fd`armctfad systems. c) Xegregctfad a` iutfes Fd`armctfad Awders must reiuhe tle rfsj a` ifsruptfad a` fd`armctfad systems ny?
^equfrfdg hampkete cdi chhurcte iahumedtctfad `ar every fd`armctfad system: ^equfrfdg tlct da sfdgke fdifvfiuck lcs chhess ta ckk aperctfadck `udhtfads a` cd fd`armctfad system (e.g., aperctfdg system cimfdfstrctars must dat cksa lcve cppkfhctfad cimfdfstrctar prfvfkeges): ^atctfdg oan iutfes perfaifhckky ta reiuhe tle appartudfty `ar sfdgke fdifvfiucks ta lcve sake
hadtrak cdi aversfglt ad jey systems: Cutamctfdg `udhtfads ta reiuhe tle rekfcdhe ad lumcd fdtervedtfad `ar fd`armctfad systems: ^equfrfdg tlct fdifvfiucks cutlarfzei ta hadiuht sedsftfve aperctfads ia dat cuift tle scme aperctfads: ^equfrfdg tlct fdifvfiucks respadsfnke `ar fdftfctfdg cd chtfad cre dat cksa respadsfnke `ar cutlarfzfdg tlct chtfad: cdi, Fmpkemedtfdg sehurfty hadtraks ta mfdfmfze appartudftfes `ar hakkusfad.
n) Hrftfhck ar sedsftfve fd`armctfad systems Wlere suppartei ny c Xehurfty Ylrect cdi ^fsj Cssessmedt ar atler `armck cssessmedt, Fd`armctfad Awders must empkay twa-persad chhess hadtrak ta preserve tle fdtegrfty a` tle fd`armctfad system.
C.0.3.8 ‘ Hadtcht Hadtcht wftl cutlarftfes
Yle Rurpase fs ta `chfkftcte tfmeky respadse `ram cdi ha-arifdctfad wftl autsfie cutlarftfes iurfdg fd`armctfad sehurfty fdhfiedts ar fdvestfgctfads. Cppraprfcte hadtchts slckk ne mcfdtcfdei wftl kahck kcw ed`arhemedt cutlarftfes, emergedhy suppart empkayees.Cppraprfcte hadtchts/ cgreemedts cre mcfdtcfdei wftl tle `akkawfdg nut dat kfmftei ta? Xervfhes
^espadsfnfkfty
Fdterdet Xervfhe Rravfier (FXR) Leci/FY Lcriwcre Mcfdtedcdhe hadtrchts Leci/FY Yekeham servfhes iepcrtmedt Leci/FY Ekehtrfhfty servfhes iepcrtmedt Cimfd/L^ Kahck Ed`arhemedt Cgedhfes kfje Rakfhe, @fre Cimfd/L^
^espadsfnfkfty `ar cdy atler servfhes wlfhl `ckk udier Fd`armctfad Xehurfty prevfew, nut dat medtfadei cnave, fs cssfgdei ta Leci/FY. Ylfs fs dehesscry ta edsure tlct cppraprfcte chtfads hcd ne pramptky tcjed, cdi civfhe antcfdei fd tle evedt a` cdy sehurfty fdhfiedt. Argcdfzctfad‖s kegck iepcrtmedt fs hadsuktei `ar ckk tlfri pcrty hadtrchts cdi cgreemedts. Yle Hlfe` Fd`armctfad Xehurfty hadtchteiA``fher ny? must edsure tlct autsfie cutlarftfes, emergedhy suppart empkayees hcd ne
Mcfdtcfdfdg cdi ifstrfnutfdg cs cppraprfcte, c kfst a` fdterdck cdi exterdck argcdfzctfads cdi servfhe pravfiers. Iahumedtfdg emergedhy cdi dad-emergedhy praheiures `ar hadtchtfdg cutlarftfes cs requfrei iurfdg fd`armctfad sehurfty fdhfiedts ar fdvestfgctfads.
C.0.3.9 ‘ C.0.3.9 Hadtcht wftl spehfck fdterest graups ‘ Hadtcht
Yle Rurpase fs ta pramate cdi `urtler empkayee jdawkeige a` fd`armctfad sehurfty fdiustry tredis, nest prchtfhes, dew tehldakagfes cdi tlrects ar vukdercnfkftfes. Cppraprfcte hadtchts slckk ne mcfdtcfdei wftl spehfckfst sehurfty `arums cdi pra`essfadck cssahfctfads. Fd`armctfad sehurfty civfhe fs antcfdei `ram vediars, kegck civfsars cdi tehldfhck experts ad sehurfty mctters ta mcxfmfze tle e``ehtfvedess a` tle FXMX. Fdterdckky M^ slckk cht cs Xehurfty Civfsar. Exterdck civfhe slckk adky ne sauglt ny M^ f` requfrei. Ckk sehurfty fdhfiedts cdi nrechles cre repartei ta M^ `ar dehesscry harrehtfve cdi prevedtfve chtfads. Fd`armctfad sehurfty spehfckfsts must mcfdtcfd tlefr jdawkeige a` fd`armctfad sehurfty fdiustry tredis, nest prchtfhes, dew tehldakagfes cdi tlrects ar vukdercnfkftfes ny?
Rcrtfhfpctfdg fd fd`armctfad exhlcdge `arums regcrifdg nest prchtfhes, fdiustry stcdicris ievekapmedt, dew tehldakagfes, tlrects, vukdercnfkftfes, ecrky datfhe a` patedtfck cttchjs, cdi civfsarfes: Mcfdtcfdfdg cdi fmpravfdg jdawkeige regcrifdg fd`armctfad sehurfty nest prchtfhes: cdi Hrectfdg c suppart detwarj a` atler sehurfty spehfckfsts.
Yle Hlfe` Fd`armctfad Xehurfty A``fher must pramate pra`essfadck hertf`fhctfad cdi memnerslfp fd pra`essfadck cssahfctfads `ar fd`armctfad sehurfty spehfckfsts tlrauglaut tle argcdfzctfad. C.0.3.5 ‘ C.0.3.5 Fd`armctfad Xehurfty fd Rraoeht Mcdcgemedt ‘ Fd`armctfad
Yle Rurpase fs ta edsure tlct fd`armctfad sehurfty rfsjs cre fiedtf`fei cdi ciiressei tlrauglaut tle praoeht kf`e-hyhke. Rraoeht Rkcddfdg, Wlere praoehts fdvakve fd`armctfad ar fd`armctfad tehldakagy tehldakagy cssets tle fd`armctfad sehurfty s ehurfty fs ciiressei fd praoeht mcdcgemedt. Fd`armctfad Awders cdi Fd`armctfad Fd`armc tfad Hustaifcds must fdtegrcte fd`armctfad sehurfty fdta every plcse a` tle argcdfzctfad‖s praoeht mcdcgemedt metlai(s) ta edsure tlct fd`armctfad sehurfty rfsjs cre fiedtf`fei ecrky cdi ciiressei cs pcrt a` tle edtfre praoeht. Yle praoeht mcdcgemedt metlais fd use slauki requfre tlct?
Fd`armctfad sehurfty anoehtfves cre fdhkuiei fd praoeht anoehtfves: Cd fd`armctfad Xehurfty Ylrect cdi ^fsj Cssessmedt fs hadiuhtei ct cd ecrky stcge a` tle praoeht ta fiedtf`y dehesscry hadtraks: Fd`armctfad sehurfty fs pcrt a` ckk plcses a` tle cppkfei praoeht metlaiakagy.
Fd`armctfad sehurfty fmpkfhctfads slauki ne revfewei regukcrky fd ckk praoehts. ^espadsfnfkftfes `ar fd`armctfad mcdcgemedt sehurfty metlais.slauki ne ie`fdei cdi ckkahctei ta spehf`fei rakes ie`fdei fd praoeht
C.0.> Manfke Ievfhes cdi Yeke Warjfdg Hadtrak Anoehtfve? Ya edsure fd`armctfad sehurfty wled usfdg manfke hamputfdg cdi tekewarjfdg `chfkftfes. C.0.>.3 ‘ C.0.>.3 ‘ Manfke Manfke Ievfhe Rakfhy
Yle Rurpase fs ta prateht fd`armctfad starei ad manfke ievfhes `ram kass ar udcutlarfzei chhess. \\\. lcs wekk ie`fdei pakfhy cdi gufiekfdes ad tle use a` kcptaps. ^e`er “R^ -37-FXMX-CLR“R^ -37-FXMX-CLRCsset Lcdikfdg Rrahess.iahx‖.Cppraprfcte hadtraks must ne fmpkemedtei ta mftfgcte sehurfty rfsjs cssahfctei wftl tle use a` manfke ievfhes. c) Fd`armctfad pratehtfad pcrcmaudt n) Xervfhe-spehf`fh rfsjs cdi prchtfhes h) Rratehtfad a` hreiedtfcks i) Rratehtfad a` detwarj edipafdt cdi plysfhck ievfhe e) Lumcd `chtars `) ^fsj cssessmedt `chtars c) Fd`armctfad pratehtfad pcrcmaudt Yle use a` manfke ievfhes suhl cs kcptaps, tcnkets ar smcrtplades ta chhess, stare, ar prahess fd`armctfad fdhrecses tle rfsj a` fd`armctfad hampramfse. Manfke ievfhes cre typfhckky smckk cdi partcnke, usei fd udhadtrakkei punkfh edvfradmedts, cdi ecsfky kast, staked ar icmcgei. Fd`armctfad Awders must edsure tlct use a` manfke ievfhes fs mcdcgei cdi hadtrak hadtrakkei. kei. Ya edsure tlct su``fhfedt sc`egucris cre fmpkemedtei ta mftfgcte rfsjs manfke ievfhes must ne edrakkei fd Manfke Ievfhe
Mcdcgemedt Xervfhe. Users a` manfke ievfhes must prateht tle fd`armctfad cdi fd`armctfad tehldakagy cssets fd tlefr hustaiy ar hadtrak. n) Xervfhe-spehf`fh rfsjs cdi prchtfhes Rravfiers a` manfke hamputfdg servfhes (suhl cs Yehldakagy Xervfhes Ifvfsfad) must per`arm regukcr rfsj cssessmedts ta fiedtf`y servfhe-spehf`fh rfsjs (e.g., per`arm ar upicte tle rfsj cssessmedts ad cd cdduck ncsfs). Fd`armctfad Awders cdi Fd`armctfad Hustaifcds must ievekap, iahumedt cdi mcfdtcfd pakfhfes, stcdicris, prchtfhes cdi gufiekfdes tlct ciiress tlese rfsjs, cdi hammudfhcte tlem ta empkayees. h) Rratehtfad a` hreiedtfcks User fiedtf`fers cdi user hreiedtfcks must ne pratehtei ta reiuhe tle rfsj a` udcutlarfzei chhess ta fd`armctfad cdi fd`armctfad tehldakagy cssets. Fd pcrtfhukcr, empkayees empka yees must prateht cgcfdst vfsuck ecvesirappfdg a` pcsswaris, RFDs cdi atler hreiedtfcks, espehfckky wled fd punkfh pkches. i) Rratehtfad a` detwarj edipafdt cdi plysfhck ievfhes Manfke ievfhes cre typfhckky usei ta stare fd`armctfad ar remateky chhess tle detwarjs cdi servfhes. Yle pakfhfes cdi praheiures gaverdfdg remate chhess cppky ta manfke ievfhes. Wlere ^emate Chhess servfhes cre usei, tle manfke ievfhe must ne had`fgurei ta prevedt fts use cs c
hadiuft if``eredt detwarjs (e.g.,detwarjs PRD spkft tuddekfdg must ne Detwarj chhess tanetweed manfketle ievfhes `ram udctlarfzei must ne nkahjei ny ifscnkei). fmpkemedtctfad a` `frewckk ar `fkterfdg tehldakagfes ta prateht cgcfdst cttchj (e.g., ta prevedt detwarj cttchjs cgcfdst tle manfke ievfhe). Manfke ievfhes must ne pratehtei cgcfdst manfke cdi mckfhfaus haie. Manfke ievfhes must ne kahjei cdi/ar sehurei wled udcttediei ta prevedt udcutlarfzei use ar tle`t (e.g., use ievfhe kahjs, hcnke kahjs, plysfhck hadtcfder kahjs, RFDs ar shreedscver kahjs). e) Lumcd `chtars Fd`armctfad Awders cdi Fd`armctfad Hustaifcds must pravfie empkayees usfdg manfke ievfhes wftl sehurfty cwcredess trcfdfdg ta edsure tlct tley cre?
Cwcre a` tle ciiftfadck rfsjs cdi respadsfnfkftfes fdleredt fd manfke hamputfdg cdi wled usfdg manfke ievfhes: @cmfkfcr wftl aperctfad a` tle pratehtfad tehldakagfes fd use: cdi, @cmfkfcr wftl tle Fd`armctfad Fdhfiedt Mcdcgemedt Rrahess.
`) ^fsj cssessmedt `chtars Yle Xehurfty Ylrect cdi ^fsj Cssessmedt must hadsfier tlrects ta fd`armctfad cdi fd`armctfad tehldakagy cssets, suhl cs?
Rlysfhck tle`t: Use a` manfke ievfhes ta remateky chhess tle detwarjs cdi systems: Ictc fdterheptfad: Hreiedtfck tle`t: Udcutlarfzei ievfhe use: Ievfhe ifspasck: Fd`armctfad ifspasck:
View more...
Comments
