ISO 27000 B tiu chun v h thng qun l an ton thng tin

Trong bi cnh c s pht trin nh v bo ca cng ngh thng tin, ngy cng nhiu cc t chc, n v, doanh nghip hot ng l thuc gn nh hon ton vo h thng mng my tnh, my tnh, v c s d liu. Ni cch khc, khi h thng cng ngh thng tin hoc c s d liu gp cc s c th hot ng ca cc n v ny b nh hng nghim trng v thm ch c th b t lit hon ton. Mt trong cc bin php phng nga c nhc n trong thi gian qua chnh l trin khai p dng H thng Qun l An ton Thng tin (ISMS: Information Security Management System) theo cc nguyn tc ca b tiu chun quc t ISO 27000. C th ni rng, ISO 27000 l mt phn ca h thng qun l chung trong t chc, c thc hin da trn nguyn tc tip cn cc ri ro trong hot ng, thit lp, p dng, thc hin, theo di, xem xt, duy tr v ci tin m bo an ton thng tin ca t chc. Cho ti nay, vic p dng h thng qun l an ton thng tin ph hp ISO 27000 c trin khai rng khp hu ht cc quc gia trn th gii c bit l trong lnh vc ti chnh ngn hng. Ti Vit Nam, mt s ngn hng cng ang trin khai p dng h thng ny v bc u c c nhng kt qu nht nh. Xt v lch s hnh thnh ca b tiu chun, ISO 27000 cng c ngun gc t Anh quc. Bt u vo nm 1992, Phng Thng mi v Cng nghip Anh (UK Department Trade and Industrial) ban hnh ra qui phm thc hnh v h thng an ton thng tin da trn cc h thng m bo an ton thng tin ni b ca cc cng ty du kh. Ti liu ny sau c Vin tiu chun ho Anh chnh thc ban hnh thnh tiu chun quc gia vi m hiu BS 7799-1 vo nm 1995. Nm 2000, tiu chun ny c T chc Tiu chun ho Quc t (ISO) chnh thc chp nhn v ban hnh vi m hiu ISO/IEC 17799:2000 - tin thn ca b tiu chun ISO 27000 ngy nay. B tiu chun ISO 27000 v s bao gm nhng tiu chun c th sau: - ISO 27000 quy nh cc vn v t vng v nh ngha (thut ng) - ISO 27001:2005 xc nh cc yu cu i vi h thng qun l an ton thng tin - ISO 27002:2007 a ra qui phm thc hnh m t mc tiu kim sot an ton thng tin mt cc ton din v bng la chn kim sot thc hnh an ton tt nht - ISO 27003:2007 a ra cc hng dn p dng - ISO 27004:2007 a ra cc tiu chun v o lng v nh lng h thng qun l an ton thng tin gip cho vic o lng hiu lc ca vic p dng ISMS - ISO 27005 tiu chun v qun l ri ro an ton thng tin - ISO 27006 tiu chun v hng dn cho dch v khi phc thng tin sau thm ho ca cng ngh thng tin v vin thng Theo con s thng k cha y th hin nay s lng cc t chc p dng ISMS v c chng nhn trn ton th gii l 2063 trong ng u l Nht Bn vi s chng ch c cp ra l 1190 sau l Anh 219, i loan 69... Cc lnh vc p dng i vi ISMS cng chim cc t l khc nhau. V d lnh vc vin thng c p dng nhiu nht vi 27% tng s lng chng ch cp ra, Lnh vc ti chnh ngn hng chim 20%, Lnh vc cng ngh thng tin chim 15%,.. Hy vng trong thi gian ti ti Vit Nam s c thm nhiu hn na cc t chc p dng ISMS c th gim thiu cc ri ro lin quan ti an ton thng tin, m bo cho s pht trin bn vng.

Tin t Trung tm Quacert