銀行及財務金融機構之資訊安 全防護指導方針 -ISO 普華資安股份有限公司 資訊安全諮詢顧問 蔡興樺

ISO Information Security Program Components Control Objectives and Suggested Solutions Implementing Cryptographic Controls

Information Security Program Components General duties Risk acceptance Insurance Audit Regulatory

Information Security Program Components Disaster recovery planning Information security awareness External Service Providers Cryptographic operations Privacy

Control objectives and suggested solutions Information classification Logical access control Audit trails Change control Computers

Control objectives and suggested solutions Networks Software Human factors Voice, telephone, and related equipment Facsimile and image

Control objectives and suggested solutions Electronic mail Paper documents Microform and other media storage Financial transaction cards Automated Teller Machines

Control objectives and suggested solutions Electronic Fund Transfers Checks Electronic commerce Electronic money Miscellaneous

Implementing Cryptographic Controls Applying encryption Implementing message authentication code Implementing digital signatures Key management Trusted third parties Disaster cryptographic and cryptographic disasters

敬請指教 普華資安：蔡興樺