Welcome to Scribd. Sign in or start your free trial to enjoy unlimited e-books, audiobooks & documents.Find out more
Download
Standard view
Full view
of .
Look up keyword
Like this
3Activity
0 of .
Results for:
No results containing your search query
P. 1
Analiza de Risc Intre Reglementare Si Necesitate

Analiza de Risc Intre Reglementare Si Necesitate

Ratings: (0)|Views: 209|Likes:
Published by Vladan Marcel

More info:

Published by: Vladan Marcel on Sep 17, 2010
Copyright:Attribution Non-commercial

Availability:

Read on Scribd mobile: iPhone, iPad and Android.
download as PDF, TXT or read online from Scribd
See more
See less

11/05/2010

pdf

text

original

 
33
decembrie 2008
Arta de a tr^i în siguran]^ 
Alarma
analiza de risc între reglementare şinecesitate. metode de analiză a riscului
a rş
Directr de rgra UTI Systes s.a.
l       ue ţ âă h ş    ş- ă j xă, „ţ” ,   ţ ă,  ţă ş   
-
 . o  ză  ă  z ş , ţ ş h  ş    râ. r   ă, ă ,  ,  
-
h   ş h  , 
standardele eurene din failia EN 50131...50136,
ăă       ş  ţ     ue.aş   ,  râ,  
-
  ă . îâ   ă, ţ    , ă  
-
,     hzţă    ă   . aă  xă  ţ   ă        ş ţ, ă ă 
-
 ş  ă ş . să  j    ş z, ţ ş ţăţ   
-
. o  ă   ă   ză   ş z
-ea de sericii secifice, catibile, e ntreg teritriuleurean .
câ  j ă,  z ă   hzţ     ă , şh ă   ţ,    ţă  „ ”,    z   
-
 ă ă   ţă  
de derulare a cntractului.
iţ     ăţ,â  ţ ă, â ş  ,  ă   ţă  ,     ăţ ,  - 
calitate, iar furnizrul - la credibilitate .
p hă     ă  z    ţ  ,   ă    .p ţ   
-
  ş  z âş,  z
de riectare a sisteelr de securitate, cnstau n
ă :-   ză hş     4   ,   
-
 i (ţ  ţ   ), âă   iv- (ţ   ,  ţă     )- h ş      4
grade de securitate :1.
gradul 1 (risc scăzut)
- h  ăz      hţ  şţ   ş ţâ  ;
2.
gradul 2 (risc mediu)
- h  ăz      hţ  şţ   ş ţâ   z 
-
 ş   ;
3.
gradul 3 (risc mediu spre ridicat)
- ecia-
  ă z      hţ şţ    ş ţâ ă ă   ş ;
4.
gradul 4 (risc ridicat)
- h  ăz      hţ   ăţş  ă   z ş ţâ h
-
 ş j h     
-nente de securitate.
e, ă   ş    ,  ă ă  ă  z    ă ţă   
-eriare.
d ,     ăţă ţ    ţă    ,  şţ   h  , zâ   ş    .dă           ăţ  (âş  h  ),        ş  ză    ? . d  ş   
-
  ş „ă„    ţ ş    j? î ă h,     z xţ 
-
, ăă  ă ă ă   ( ,
alri, cntinuitatea rcesului redinant de actii-
, ţ, ,  ) ş  x  ,    ţ . d    ţ  ş  ă, z  ă   ă       h, ă  ş   ş ă  ,   ă, ţă ţ   .sţ  ă ţ   z ,  ţă     
-
 ă ş xţă ă.
ANAlIzA DE RISc
r,  ţ, ză ăţ   ţ ă ă    ş ă ă  ţă ă.c ,   ă ză ţ , â   , â,  ,   ş .aţ       
 
34
decembrie 2008
Arta de a tr^i în siguran]^ 
Alarma
xă, ăşă      
-
 ş âă    xţ,  
-
     ş  ă,
 n literatura de secialitate sub nuele de
manage
-
ment al riscului.
 princialele etae ale anageentului sunt :
 ; ;  .a ă    ză   ş ă   ş ţ    
-
  j ş z ă   şţ ,     şş ţă . p ă   ă     , ă     
-
 j. c ţ ,  : : z, ,ţ,  ; ţă  ;ş ăţ   
-
  „” ţă;    zţă      ş 
-
   zţ: ,  
-
 ş ,    .
Analiza de risc ate fi :
calitativă
, â   ă  ,   ă    ă  , 
cantitativă
, â ă   (   zţ,  
-
  ş   ).
 în ractica analizei riscului, literatura de seciali-
 ţză  ă ă   ş h,  ş       ză    ş    
- jate. Dintre cele ai frecent utilizate aintesc :a. etda atricilr de risc;b. etda oCTAvE;c. etda mEhARI .
A. METoDA MATRIcIloR DE RISc
metda arte biectiul de rtejat n atru
  ză : ză; ţă (ă); ţă;  .aâ      ţăţ ţă ş ăţ,       ţ        ăş  ă  z ţ.m    ă   ţă,   ăţ , ş   , z  jţ   
-tri .
c z  ă   
-
, z xă ă, z ăă, z ţ ţ, z ţ  ăă  ,  
-
  ţ. p ţ,  zţ,     ş ,   z,  x   ăţ ă . c
-
 ţă  ză   
e care l are n biecti, asectele sale structurale (
 hw ş w),  ş â  ţă   ţ  ş  x. o ţ ă ă ţ , â  z ţ  ş âă   , j,  ş z  
-lui rriu.Calculul riscului glbal,
R
g
,  ţ  
-
 ă    , ă  
-alizare de tiul :
R
g
=
 p
1
x
R
 p
+
 p
 2
x
R
+
 p
3
x
R
+
 p
4
x
R
 ps
,unde :
R
 p
, este riscul asura cnentei rcesuale
R
, este riscul asura cnentei fizice
R
,     ţ
R
 ps
, este riscul asura cnentei de ersnal ,iar :
 p
1
,
 p
 2
,
 p
3
,
 p
4
sunt nderile secifice
zţ ().
Eident
Σ
p
i
=1 .
l â ă,      ză  ă ă     
-
   ;  x:
 
R
=
Σ
 
 p
x
R
fk 
, cu :
 p
,  ă  k
R
ck 
, riscul aferent eleentului k al c-nentei fizice
m  ă ş   
 ntr-un instruent de ealuare.
e ză,  ,  ă : « s
-
 ă » ş « s    » ,ă  e uti p  2001  2006.
b. METoDA ocTAvE
metda oCTAvE (oeratinally Critical Treat,Asset and vulnerability Ealuatin
Sm
), ă ş , ş  ă,ză   ş  hă,  ză ăţ   j. exă  ă zţ , â âă 100   ş   ş octave-s. p
-
     ă z hă  3-5 ş,       , z ţ ţ,   ţ ş     
 
35
decembrie 2008
Arta de a tr^i în siguran]^ 
Alarma
riscurilr identificate .
a  ză    3 z .
Faza 1
 ă  ţă  z  x  zţ() ş    ă  :1.  ţ zţ;2.   ţă.
pe durata
 procesului 1
se definesc criteriile de
     zţ, ză  ,  ş  
securitate la data auditului . în cadrul
 procesului 2
    ş 
-
hz   ,  ţ  
-
   ş  ţă 
alrile critice . 
Faza a 2-a
,    ăţ 
-
,  ă z   ţ
de calculatare, din unctul de edere al alrilr crit-
. p  z ă  x ă  (z ş )   ţ,  ş 
tenlgiilr utilizate entru ileentare. în cadrul
fazei a 3-a
,   ză ă  :1.  ş z ;2. z   ţ ş 
-nurilr de reducere a riscurilr.
aăţ  
 primului proces
, de identifi-
 ş ză  ,   ă 
-
 ţă, ă ăţ 
-
    ş ă ăţţă.
 în cntinuare, e arcursul celui de-
al doilea pro-ces
,      ţ ş  
-
    ,  zăă ăţ :hţ    ţ; ţ   ;z    
riscurilr;
 hă   ţ .d ă ă z  ţză
câtea caracteristici ale etdei, care ncee cu se-
 ş  ţă    zţ, ă  z ă 
-
 ţ ş   h   
-egiei de securitate, ci cu redactarea lanurilr cncrete
    , ăţ       ş  .
c. METoDA MEhARI
Una din etdele utilizate e lan eurean esteetda
MEHARI 
, ă   hă  şz,  ză â z, â ş 
-
 , â,  ş , 
-
  . î      xă
bază de cunoştinţe
  ţ  ,ţă   ţ w,   ,ă ş ză.sh ă  z   ţ şă :
1.
 x 
, care se face e
z   ,  ţ  x
-unerii (
expunere foarte slabă, slabă, medie, ridicată
)
ş  ţ         ţă:
o
accidente
(, ţ, ă  
electrice, deranjaente de eciaente IT sau telef-
,     ş ş,  
ersnal irtant s.a.)o
actiuni răuvoitoare
(andalis, terris, al-
 ţă   ş ş,   ş  it,  şă ţă w-  ţ, j    ,
etc.)o
actiuni intenţionate, dar fără intenţierăuvoitoare
(ţă    it, 
-
    ţ h, z ă w ţ )
o
erori 
(  ţ  
-
  ă ţ , şţă  ,     
uane, bug-uri n rgrae alicatie, erri la intr-ducerea datelr de intrare, etc. )2.
   j ş 
-nire
(  ţ, h h,
rceduri, ersnal de secialitate )3.
 ţăţ ( ţ  
-
    ,  ş     – status-eXpo, status-diss, sta
-
tus-prev- ş  ză ţ  
STATUS-p)4. ealuarea iactului direct ; are ca unct de
  ă  ă  ză :
o bunuri (alri);
o  ş ţ;o  (ţ ş );o  ă;
o disnibilitatea ersnalului;
o   ă ş 
 n aterie.
(   ţ,   
-
 x  ţză  ,   
afectate :
D
 ţ,
ntegritateasau
ţ )
5. ealuarea factrilr de rtectie, censare
ş  ; x    5   ă 
reducere a riscului : descurajare; reenire;
 ţ;
 censare; recuerare.6. ealuarea reducerii iactului ( n cadrul eta-ei de audit de securitate se face analiza factrilr de
   ş   ;     ş ţ, 
-
 ţ, ţ ş  ş ,
entru iact )

You're Reading a Free Preview

Download
scribd
/*********** DO NOT ALTER ANYTHING BELOW THIS LINE ! ************/ var s_code=s.t();if(s_code)document.write(s_code)//-->