【英文标准名称】:Informationtechnology-Securitytechniques-Informationsecurityincidentmanagement
【原文标准名称】:信息技术.安全技术.信息安全事件管理
【标准号】:ISO/IECTR18044-2004
【标准状态】:作废
【国别】:国际
【发布日期】:2004-10
【实施或试行日期】:
【发布单位】:国际标准化组织(IX-ISO)
【起草单位】:ISO/IECJTC1/SC27
【标准类型】:()
【标准水平】:()
【中文主题词】:保护措施;IT系统;应急的;数据处理;通信规程;组织;管理;计划;信息技术;信息交换;定义;网络互连;安全工程;指导手册
【英文主题词】:Communicationprocedures;Dataprocessing;Definitions;Emergency;Guidebooks;Informationinterchange;Informationtechnology;ITsystems;Management;Networkinterconnection;Organization;Planning;Protectivemeasures;Safetyengineering
【摘要】:ThisType3TechnicalReport(TR)providesadviceandguidanceoninformationsecurityincidentmanagementforinformationsecuritymanagers,andinformationsystem,serviceandnetworkmanagers.ThisTRcontains11clausesandisorganizedinthefollowingmanner.Clause1describesthescopeandisfollowedbyalistofreferencesinClause2andtermsanddefinitionsinClause3.Clause4providessomebackgroundtoinformationsecurityincidentmanagement,andthatisfollowedbyasummaryofthebenefitsandkeyissuesinClause5.ExamplesofinformationsecurityincidentsandtheircausesarethenprovidedinClause6.Theplanningandpreparationforinformationsecurityincidentmanagement,includingdocumentproduction,isthendescribedinClause7.TheoperationaluseoftheinformationsecurityincidentmanagementschemeisdescribedinClause8.Thereviewphaseofinformationsecuritymanagement,includingtheidentificationoflessonslearntandimprovementstosecurityandtheinformationsecurityincidentmanagementscheme,isdescribedinClause9.Theimprovementphase,i.e.makingidentifiedimprovementstosecurityandtheinformationsecurityincidentmanagementscheme,isdescribedinClause10.Finally,theTRconcludeswithashortsummaryinClause11.AnnexAcontainsexampleinformationsecurityeventandincidentreportforms,andAnnexBcontainssomeexampleoutlineguidelinesforassessingtheadverseconsequencesofinformationsecurityincidents,forinclusioninthereportingforms.TheAnnexesarefollowedbytheBibliography.
【中国标准分类号】:L71
【国际标准分类号】:35_040
【页数】:50P;A4
【正文语种】:英语