TCVN TIEU CHUAN QUOCGIA TCVN 11930:2017 CONG NGHE THONG TIN - CAC KY THUAT AN TOAN - YEU CAU CO’ BAN VE AN TOAN HE THONG THONG TIN THEO CAP DO Information technology.Security techniques - Basic requirements for securing information system according to security levels HA NOI - 2017Myc tye Lad gidi thigu .. Pham vi 4p dyng Tai ligu vign dan. ‘Thuft ngé& va djnh nghla.. Yéu edu co ban va an toan hé théng théng tin theo cp 6... Yéu cu co ban cho h§ théng thong tin cdp 46 4. 5.1 Yéu cdu quan ly... 6.1.1. Thiét lp chinh séch an toan théng tin 6.1.2 Té chirc bao dam an toan théng fin...... 4.3 Bao dim ngudn nhan yc. 5.1.4 Qué ly thidt ké, xay dyng hé thdng ... 6.1.6 Quan ly van hanh hé théng.. 62 Yeu cduky thuat. 5.2.1 Bao dim an toan mang 5.2.2 Bdo dim an toan may chit 5.2.3 Bdo dim an toan (rng dung.. 5.2.4 Béo dim an toan dot liu. 6 Yéu clu co ban cho hé théng thong tin cdp a6 2. 61 Yeu cdu quan ly... arena 6.1.1' Thiét ip chinh séch an toan théng tin 6.41.2 Tb chize bdo dam an toan théng tin... 6.1.3 Bdo 64m ngudn ahan hve 6.1.4 Quan ly thiéeké, xay dung hé théng, 6.1.6 Quanly ven hanh he thér 6.2 Yeucdu ky thuat.. 8.2.1 Bao dim an toan mang... 6.2.2 Bao dim an toan may chi... 6.2.3 B&o 44m an oan tng dung... 8.2.4 Bao Gm an toan dO LGU savin7 Yéu cu co ban cho hé théng théng tin cAp 46 3....... 7A Yeu cdu quan Wy... 25 7.4.4 Thidt lap chinh sdch an toan théng tin. sevsreresssasnenes 2D. 7.4.2 Té chire bao Gam an toan théng tin... 7.1.3 Bdo dim ngudn nhan lye . 7.14 — Quan ty thiét k6, xay ding he théng.... 7.1.6 Quan ty van hanh he théng... 28 .27 7.2 You cdu kf thuét... 7.24 Béo dim an toan mang ... 7.2.2 Bao dam an toan méy chi... 7.2.3 Béo ddm an toan ting dung se 7.2.4 Bao dim an toan dif lieu... 8 Yéu chu co ban cho hé théng théng tin cdp a6 8.1 Yéucdu quan ly 8.1.1 Thiét 8p chinh sch an toan théng tin.. 8.1.2 Téchire bdo Gam an toan thong tin.. 81.3 Bao dim ngudn nhan lye... 8.1.4 Quan ly thiét ké, xay dyng hé thédng, 8.4.5 Quan ly vén hanh hé théng. 8.2.1 Bao démantodn meng 8.22 — Bdo dm an toan méy chi... 823 Bao dam antoan tng dung 8.2.4 Bao dim an toan dé itu .. 9 Yéu cdu co ban cho hé théng théng tin cdp 46 5. 94 ‘Yeu cau quan I 9.1.1. Thiét gp chinh séch an toan thong tin. 91.2 TS cht bdo dam an toan thong tin. 9.1.3 Bo dm ngudn nhan tye...9.1.4 — Quan iy thiét ké, xay dung hé théng ... 9.1.5 — Quén ty van hanh hé théng... 8.2 Yau cdu kp thud... 9.2.1 Bao dam an toan meng.... 9.2.2 Bao d4m an toan may chi... 92.3 Bao daman toan tng dyng...... 9.2.4 Bao diman toan dé fidu.. Phy lye A (Quy dinh): Yéu cau co ban va an toan vat ly cho hé théng théng tin theo cép 46.. 121.87Lei n6l dau. TCVN 11930:2017 dug xAy dyng trén oo so tham khao Tidu chudn quéc té ISO/IEC 27001:2013 va Tiéu chudn SP 800-53 phién ban 4.0 cla Vign Tieu chudn va Céng nghd Quéc gla (NIST) M9, c6 didu chinh, sta dBi, b3 sung 8 phi hyp v6i dibu kign cila Viet Nam. TCVN 11930:2017 do Cyc An toan thong tin bién soan, BO Théng tin va Truyén théng dé nghj, Tong cuc Tidu chudn Bo luting Chat lugng tham dinh, BO Khoa hoc va Céng nghé cing bé.Léi gidi thigu Tiéu chu&n nay quy dinh céc yéu cau co ban vé an toan hé théng thong tin theo cAp 6, bao gém hai nhém: yéu cau quan ly va yéu cu kf thugt. Nhém cdc you cau quan ly [8 co s& 48 co quan, 18 che x@y dyng chinh s&ch, quy trinh quan If an toan théng tin cho hé théng cda minh trong qué trinh thiét ké, xy dyng, van hanh, khal the, sir dung, Nhom yéu odu ky thuat lA co so G8 oo quan, t8 chute thiét ké, thidt fap cdu hinh hé théng trong qué trinh xay dyng hé théng thong tin. Co quan, t8 chérc sau Khi xc dinh c4p 4 an toan hé théng thong tin va phurong én bao dam an toan h6 théng théng tin, od thé tridn Khel cdc blén phép bdo dm an todn théng tin, 4p ting cdc yu cAu co ban néu tai Tiéu chudin nay, nhéim bao dém an toan hé théng théng tin & mirc 46 co ban theo cp 66 tuong tng. ‘Dé bdo ddm an toan hé théng théng tin & mirc d6 cao hon, phi hyp voi yéu cau thyc té va dc thi cla ho théng thong tin oda cor quan, {8 chiro cdn tin hanh dénh gid ri ro an todn hé théng théng tin d& xe inh va trién khal cée bign phdp bao Gam an toan thong tin bd sung. Khuyén khich co quan, tS chitc trién khal cdc bin phép bao dm an toan théng tin dap (ng toan bo céc yéu cu an toan co ban cho cép 66 a8 xéc dinh va bé sung thém cdc yéu cau an toan & cép 4} cao hon nhém tang cuéng bdo dam an toan thong tin cho hé théng théng tin cia minh, 4 huéng dan co quan, td chic xéc dinh cdc yéu cu co ban vé an toan vat ty, Phy Ive A, tiéu chudn nay dua ra cdc yéu clu co ban vé an toan vat ly cho hé théng thdng tin theo ttng c4p 46. Co quan, tb chite 06 thé ép dung 48 66 phurong n bdo dim an toan vat ly co ban cho hé théng théng fin cia minh,————— TIEU CHUAN QUOCGIA TGVN 11930:2017 Céng nghé théng tin - Cac ky thuat an toan - Yéu cau co ban vé an toan hé théng théng tin theo cap dé Information technology - Security techniques - Basic requirements for securing information system according to security levels 4 Pham vi &p dung Tiéu chuan nay quy dinh cdc yéu edu oo ban vd an toan hé théng théng tin theo cp 49. ‘Yeu edu an toan co ban quy dinh trong tiéu chudn nay tép trung vo cAc yéu cau bao dim an toan he théng thong tin. Cac yéu cdu khéc vé an toan théng tin, khong llén quan tnvc tiép dén bdo dim an toan hé théng théng tin (vi dy: bdo v8 théng tin c& nh&n, b&o vg tré em trén mang...) khong thuge pham vi ofa Tidu chuan nay. 2 Taitigu vien din Céc tal Hu vign o&in sau 1a cn thidt cho vide Ap dung tiéu chuan nay. O6i vdi céc tai ligu vign din ght nm céng bé thi 4p dyng ban dugc néu. 84! véi cdc tal ligu vin din khéng ghl nam céng bé thi 4p dung phién b&n mé! nhét, bao gbm od cae siva dBi (ndu o6). ISO/IEC 27001:2013 Information Technology - Security techniques — Information security management system — Requirements (Cong nghé thong tin = Cc k7 thuét an toan — H@ thdng quan ly an toan thong tin~ Cac yéu cdu) SP 800-53 R4, Security and Privacy Controls for Federal information Systems and Organizations (Bign php kiém sodt bdo mét va riéng tu cho céc Hé théng thOng tin lién bang vd TS chic). 3 Thuat ng va dinh nghia Tleu chudn nay sir dyng cdc thuat ngt va dinh nghfa trong céc titu chudn ISOMEC 27001:2013, SP 800-53 Ré va cdc thudt ngtr, dinh ngbia sau: 34 An toan dif Ilgu (data security) Tap hop cdc bién phép quan ty va ky thuat nham bao dém tinh bi met, tinh nguy8n ven va khd dyng ea thong tin, dO ligu khi luu tt, xb ty, truy c&p va trao ai do ligu qua mol trrdng mang. 32 An toan mang (network security)TCVN 11930:2017 Tap hop cée bién phép quan ly va kj thuét nh&m bao 6am vigc thiét 8p, quan ly, van hanh ha tang mang (bao gdm kénh két néi, thiét b] mang, thiét b{ bao mét, thiét bj phy try va cdc thanh phan khac nu c6) bao é4m an toan. 33 An toan mang khéng day (wireless network security) Tap hop céc bién phép quan ly va ky thuat nhém béo d&m vige két néi, truy cp va trao di thong tin si dung mang khong day bao d&m an toan. 34 An toan may chil (server security) Tap hop cdc bién phép quan If va kf thuat nh&m bdo dam an toan cho may chi trong qué trinh thiét 1p, quan ty, van hanh va go bd, 38 ‘An toan théng tin/An toan théng tin mang (Information security) Sy bao vé thing tin, h8 théng théng tin trén mang tranh bj truy cap, sir dung, tat 16, gin doan, ska di hoe phd hoal trél phép nhdm bdo dam tinh nguyén ven, tinh bt mét va ffnh kha dung cua thing tin, 38 An toan dng dyng (application security) Tap hep c&c bin phdp quan ty va kf thuat nhdm bdo dam c&c tng dung, dich vy cung cép bai hé théng bao 4m an toan trong qué trinh thiét Iép, quan ly, van hanh. a7 Chinh each an toan thong tin (information security policy) T€p cdc quy inh, quy t&c, quy trinh quan IY, khal théc, van hanh va sir dung hé théng théng tin bao dm an toan théng tin. 38 Chéng thét thoat dc Iigu (data leak prevention) Gidl phap gi¢p co quan, 18 chirc bdo vé dt liéu quan trong cla minh tranh vigc b] danh cp, r 1 ho&c khi dC ligu bi v6 y mt mat, tht lac thi bén thé ba khéng thé Khal thac dé litu 46 tréi phép. 38 idm yéu an toan théng tin (information security vulnerability) Bi thn tai trén sn ph&m phan cig, phan mam, dich vu hod hé théng trong qua trinh phat trién, cai Gat va thiét fp, 06 thé gay ra nguy co mét an toan cho hé théng théng tin Khi bj tin tac khai thdo. 10TCVN 11930:2017 340 OG ligu quan trong (important data) Oi ligu trong hé théng, duoc co quan, t8 chic xc dinh 18 quan trong, cn duge uu tién bdo vé. DF liu quan trong bao gdm, nhumg khéng gidi han cAc loal dir ligu chira cc théng tin sau: thong tin nghiép vy, théng tin bi mat nha nuéec, théng tin riéng va cée loal théng tin quen trong khéec (nu 05). 34 Dy phang néng (hot standby) Khd nang thay thé chirc ning cla thiét bj khi xy ra sy ob ma khéng lam gian dogn hoat dong cia he théng. 342 Glam sit an toan hg théng théng tin (information system security monitoring) Hoat dong la chon 461 tueng, cong cy giém sét, thu thép, phan tich thdng tin trang thal cde 46 trong gidm sat, béo co, cdnh bao hanh vi xAm phem an toan théng tin hod oé kha néing gay ra sy cb an toan thong tin 46] voi he théng thong tin. 343 Gidm sat hg thdng théng tin (information system monitoring) Bién phdp giém séit, theo ddl trang thai hoat dng ciia hé thdng a8 phdt hign, canh bao som cdc sy ch. 6 thé gay gidn doan host dong oda hé théng va lam mét tinh kha dung odie hé théng thdng tin. 344 Hg théng Igc phan mdm déc hal (matware fitter system) ‘Tap hgp phan cing, phan mdm durgc két néI vao mang dé phat hién, ngan chén, loc va théng ké phan mam 66c hai 3.16 H6 théng théng tin (Information system) ‘Tap hyp phan céng, phan mdm va co 8% dé lisu dug thiét lap phuc vy muc dich teo lap, cung c&p, truydn dura, thu thép, xiP ly, luu tré va trao adi théng tin tren mang, 348 H@ théng théng tin cfp dd 1 (information system level 1) H6 théng théng tin ma khl bj phé hoal 36 lam tén hal tdi quyn va I¢l ich hop phdp cla 18 chiro, c& nhan nhung khéng i&m tdn hel t64 Ii (ch cong céng, trat tyr, an foan x4 hoi, quéc phéng, an ninh quéc gla.TCVN 11930:2017 347 Hé théng théng tin cdp a6 2 (Information system level 2) H@ théng thong tin ma kh! bi pha hoal 98 lam tén hai nghiém trong t6i quyan va igi ich hep phép cia 5 chic, c& nhan hoae lam tén hai t6i Igi ich cdng céng nhung khong fam thn hal tot trat ty, an toan x8 hOi, quéc phdng, an ninh quéc gla. 348 H@ thing thing tin cdp 46 3 (Information system level 3) Hé théng thing tin ma khi bj pha hoal sé lam tn hai nghiém trong t61 sdn xudt, lol {oh cong obng va {rat ty, an toan x8 Ndi hoge lam tén hal toi quéc phong, an ninh quéc gla. 3.49 He théng théng tin cp 46 4 (Information system level 4) Hé thdng théng.tin ma khi bi ph hoal sé lam tn hel dc biét nghiém trong t6t lot Ich ctng cing va trét ty, an toan x4 hi hoge lam tén hei nghiém trong toi quée phang, an ninh quée gia. 3.20 H@ thdng thong tin cdip 46 5 (information system level 5) Hé théng thong tin ma khi b| phd hog! sé lam tn hal dac bigt nghlém trong t6i quéc phdng, an ninh quéc gia. 3.21 Két ndi mang an toan (secure network connection) Vide thiét lgp, str dyng cdc glao thire mang cé h& try cde tinh nang bo met (ma hoa, xéc thyrc) nhAm bdo dam viée trao dBi thong tin qua méi tring mang an toan. Vi dy mot s6 glao thirc: SSH, SSUTLS, VPN hoe céc giao thie trong diong khée. 3.22 Nhat ky hé théng (system log) NhGng sy kién dug hé thdng ghl lai lién quan dén trang thai hoat déng, sy od, sy kién an toan théng tin va cde théng tin khde lién quan &6n host dong cila hé théng (ndu 06). 3.23 Phan mém déc hat (malware) Phan mam 6 kha néing gay ra hogt dong khéng binh thudng cho mét phan hay toan bo hé théng thong tin hoc thy hign sao chép, sira di, x6a bé trél phép thong tin lu tri trong he théng thdng tin, 3.24 12TCVN 11930:2017 Phan mém phéng chéng ma d{c (anti-malware software) Phan mém c6 chic n&ing phat hign, cdnh bao va xi ly phan mém d¢c hal. 3.28 Phan mém thué khoan (outsource software) Phan mdm duoc phét trién, nfing cdp, chinh siva theo cdc yéu chu riéng cla {8 chire hoge ngudi si dung nham dap tng yéu cau dac thi clia td chirc, 3.26 Phuong tign Iu tro (media storage) Cac thiét bj, phurong tin dugc sir dyng 48 luu tr@, sao chép, tra a8l thdng tin gia cac thiét bi, may tinh mét céch gidn tiép, 327 Quan ly tal khoan a%e quyén (privileged identity management - PIM) Bien php quan ly tap trung céc tal knoan cd quyén quan tri cao nhdt (c6 Gay di cée quyn hé théng ung cp) trén hé théng. 3.28 ‘Sy c6 an toan théng tin/Sy cé (information security incident) Vige théng tin, ne théng théng tin bj g4y nguy hal, anh hudng Wei tinh bl mat, tinh nguy8n ven hod tinh khd dung, 3.28 ‘Thiét bj mang chinh (core network device) Thiét bj gy gin éoan host déng cilia toan bs hé théng khi xdy ra sy ob. Vi dy: thiét bl chuy&n mach tung tam, thiét bj dinh tuyén bién, tuong lira trung tam va c&c thiét bi khdc oS chire nding va vi tri tuong duong. 3.30 Tinh bio mat (confidentiality) Tinh chét bao 4m théng tin khdng bi tiét 1b va sir dung trai phép. 3.34 Tinh kha dyng (avallabilty) “Tinh chét bo d&m tinh s&n sang cia théng tin khi cén truy cap va sir dung theo yéu cau. 3.32TCVN 11930:2017 Tinh nguyén ven (integrity) Tinh chdt bdo dm théng tin khéng bi can thiép, sia dl trél phép. 3.33 ‘Vang mang bién (outside zone) ‘Ving mang due thidt I8p 44 cung cdp cdc két néi hé théng ra b6n ngoai Internet va cac mang khac, 334 ‘Ving DMZ (demilitarized zone) ‘Ving mang duge thiét sp 44 dat c4c may chil obng cing, cho phép truy cép tryc tiép tir c&c mang bén goal va meng Internet, 3.38 Vang may chit ngi bg (intemal server zone) ‘Ving mang duge thiét lap 44 dat cdc may chu ndi bS, cung chp cfc tng dung, dich vu phyc vy hoat bng néi bé cla 18 chiro va cdc hoat dong khéc ma khéng cho phép truy cp tnyc tiép tir cdc mang ben ngoal. 3.36 \Viing mang néi b§ (LAN - local area network) ‘Ving mang nay dug thidt lap a8 cung cAp két ni mang cho cac may tram va cdc thiét bj dau cudi va céc thidt bj khac cla nguai str dung vao hé théng. 3.37 ‘Vang quan tr (management zone) ‘Ving mang duge thiét iap 48 a8t cdc may chi, may quan tri va cac thiét bj chuyén dyng khac phyc vy vige quan ly, van hanh va gidm sét hé théng. 3.38 Ving quan tr| thiét b] hg théng (device management zone) Vang mang riéng cho céc dla cht quan trj cla cdc thiét bi hg théng cho phép thidt lap chinh s4ch chung va quan Wy tap trung cdc thiét bj hé théng. 3.39 ‘Vang may chi co s& di ligu (database server zone) ‘Ving mang dug thiét lap 68 dat cdc may chi oo sé dif ligu. Céc méy chil trong ving nay duge trign khal tfich blét voi c&c may chi (eng dyng nham téing cvdng cdc bien Kiam sodt truy cAp gira cdc ving may chil khdc véi viing may chi nay. 14TCVN 11930:2017 $.40 Xée thye da nhan t6 (mult-factor authentication) Phuong phap xac thy khong chi diya vao mot ma Ja két hop mot sé yéu t6 lién quan dén ngudi dung, bao gdm: nhtmng théng tin ma ngué! ding biét (mat khdu, mB sé truy c&p...), nhOng théng tin ma ngud! dang s@ hiu (ching thy 86, thé théng minh...) ho&c nhing théng tin va sinh trac hoc olla ngudi ding (van tay, méng mét...). 4 — Yéu cdu co ban vd an toan hé thdng théng tin theo cép 46 Cée you cu cla tieng c&p do duye chia fam hal nhom: yéu cdu quan ly va yéu cAu ky thuat. ‘You cdu quan ly dua ra cdc yéu cau vé mat quan ly nhdm quan ly vige xay ding, quan ty van hanh va. 98 bd hé thing théng tin bdo d4m an toan. Cac yéu cau quan ly duge chia thanh c&c nhém yéu cau: thi6t fap chinh eéch an toan théng tin; t8 chire bdo dm an toan théng tin; bao dém ngudn nhdn ye; quan ly thiét k6, xy dyyng hé théng; quan Wy ven nanh hé théng. ‘YOu cdu ky thudt dua ra cdc yéu cau vé mat kg thugt 48 bdo dam vide thiét ké, xéy dyng va thiét lap he théng théng tin bdo dm an toan, Cac yéu cu ky thuat duc chia thanh cdc nhém y8u cau: béo dém ‘an to&n mang; bao 44m an toan may chi; bdo dam an toan tng dung; bdo dm an todn dé ligu. 5 Yu cau co’ ban cho h@ théng théng tin cfp do 4 64 Yéu cau quan ly 414 Thiét {€p chinh sch an toan thong tin 6.1.4.4 Chinh sdch an toan théng tin ay dung chinh séch, quy trinh quan ly, vn hanh hogt dong binh thudng cia hé théng nhém béo dam tinh sin sang cla hé théng trong qué trinh van hanh, khal théc, 8.1.1.2 Xay dyng va cong bd. Chinh s&ch dugc 18 chérc’b phan durgc dy quy8n théng qua trudc khi cong bé ap dung. 6.1.1.3 Ra sodt, stra doi Binh ky 03 néim hog khi ¢6 thay 461 chinh sdch an toan théng tin Kiém tra fal tinh phi hop va thyc hién 1 goat, cap nhat, bd sung. 8.1.2 Té chic bao dam an toan théng tin 6.1.2.4 Don vj chuyn frich vi an toan théng tin C6 c&n bd cd tréch nhiém bdo 44m an toan théng tin cho hé théng théng tin. 5.1.2.2 Phél hyp vél co quanité chire 6 thdm quyén 2) C6 édu méi lién hé, phd! hop vel e&0 co quan, 18 chic 06 thm quyén quan ly va an toan thong tin; 415TCVN 11930:2017 b) C6 dau méi lién hé, phdi hyp véi céc co quan, té chirc trong cAng téc h8 try didu phdi xi ly sy oS an toan thong tin. §.1.3 Bao dam nguén nhan Ive 6.1.3.4 Tuyén dung Can b6 duge tuyén dyng vao vj tri lam v8 an toan thong tin c6 trinh 46, chuyén nganh phd hop vot vi trf tuyén dung. 5.1.3.2 Trong qué trinh lam vige. a) C6 quy dinh vd vige thyc hién ndi quy, quy ché bao dam an toan théng tin cho ngudi su dung, cdn. bd quan ly va van hanh hé théng; b) Cé hinh thirc phd bién, tuyén truyén néng cao nhn thirc v8 an toan thong tin cho ngudi si dung. 5.1.3.3 Chim dit hod thay 461 cong vic Cén bé chdm dirt hoe thay Bl céng viée phal thu hal thé truy cp, théng tin dugc luru trén cdc phuong tien Iuu tr, c&e trang thiét b] may mée, phan cung, phan mdm va cde tal edn khac (néu 0d) thude s& hau ca t5 chic. 6.1.4 Quan ly thiét k6, xay dyng hé théng 6.1.4.1 Thiét ké an toan hé théng théng tin a) Co tai ligu md tA quy mé, pham vi va 66i tueng si dung, khal théc, quan ly van hanh hé théng théng tn; b) C6 tai figu m6 ta thiét k& va cdc thanh phan cla hé théng théng tin. 5.1.4.2 Thir nghigm va nghigm thu hg théng ‘Thye hign kiém thir he théng thud kh! diva vao van hanh, Khai théc st dung. 1.6 Quan ly van hanh hg théng 8.1.6.1 Quan ly an toan mang XAy dung va thyc thi chinh sdch, quy trinh quan ly van hanh hoet dng binh thuréng eda ha tng meng. 6.1.5.2 Quan ly an toin may cha va Gng dung fy dyng va thie thi chinh each, quy trinh quan ty, van hanh hoat ng binh thu’ng ca hé théng may chi va dich vy, 8.1.5.3 Quan ly an toan dé tigu C6 phuong an sao iru dy phdng théng tin, dO ligu, cdu hinh hé théng. 16TCVN 11930:2017 6.2 Yéucdu ky thuat 6.24 Béo dim an toan mang 5.2.1.1 Thidt kb hg théng a) Thiét ké céc ving mang trong hé théng theo chire nang, bao gdm 161 thidu cde vung mang: > Ving mang ndi bd; - Vang mang bién; - Ving DMZ. b) Phong 4n thidt ké bao dam cdc yéu cu sau: - Co phwong én quan ly truy c8p, quan tr hé théng tur xa an toan; + C6 phwong én quan ly truy c$p gira cac ving mang va phdng chéng xam nhap, 6.2.1.2 Klém soat truy c4p tir bén ngoal mgng a) Thiét lap h@ théng cht cho phép st? dyng cdc két néi mang an toan khi truy cép théng tin ndi bd hose quan tri hé théng tir cc mang bén ngoai va mang Intemet; d) Kidm soat truy ep tir bén ngoal vao hé théng theo tig dich vy, ting dung cy thd; chain tét cd tuy cap tél cdc dich vy, eng dung ma hé théng khéng cung cép hotic khong cho phép truy cap tir bén. goal. 6.24.3 Nh&t ki hd théng ‘Thiét 8p chee ning ghi, lu tror nat ky hé théng trén céc thiét bi mang chinh, 6.2.1.4 Phong chéng xAm nhép a) Co phueng an phéng chéng xam nh§p 48 bao v8 vung DMZ; ) Binh ky cp nhét co 8% aC Tigu déu higu phat hign thn cong mang (Signatures). 5.2.1.8 Bao vg thiét bi hg théng a) Cu hinh chire ning xac thyc tr8n cdc thigt bh thSng (néu hB tro) 48 xc thye ngud ding khi ‘quan tr thiét bi true thdp hode tir xa: ) Thiét lap cu hinh chi cho phép sir dung cdc két néi mang an toan (néu hd tre) khi truy cap, quan tr} ‘thidt bj tle xa, 6.2.2. Bio dim an toan may chd 5.2.2.4 Xe thye 8) Thiét lap chinh sdch xdc thyc rn may chi 68 xdc thyc nguot ding khi truy cAp, quan ly va sir dung may chi; 17TCVN 11930:2017 b) Thay dd] cc tal khoan mae djnh trén hé théng hod v6 higu héa (néu khong sir dung); ) Thiét fp cdu hinh méy chi 48 aém bao an toan mét khdu ngudi sir dyng, bao gbm céc yeu cau sau: + Yéu cu thay 681 mat khdu mac dinh; = Thidt lp quy tc dat mat khdu va 86 ky ty, loal ky tu. 6.2.2.2 Kiém sodt truy cép ‘Thidt 18p hé théng chi cho phép sir dung cdc két ndi mang an toan Khl truy cp, quan trl may chi tir xa. 6.2.2.3 Nhat ky he thdng 8) Ghi nhét ky hg théng bao gdm nhing théng tin co ban sau: = Théng tin két ndi mang t61 may chid (Firewall log); = ThOng tin dang nhap vao may cha; b) Bang bé thdi gian gia méy chd v6i may chd thai gian. 6.2.2.4 Phang chéng xAm nhap 8) Logi bé cc tai khoan khong siv dung, cdc tai khodn khéng cdn hop Ié trén may cha; b) Si dyng tung Itra cla hé didu hanh va hé théng dé cém cdc truy cép tral phép tl may chi. 6.2.2.6 Phong chéng phan mém age hal Cai 48t phan mém phéng chdng ma déc (hoc c6 phueng én khéc tueng dong) va thidt lap ché 46 ty Gong cAp nh&t cor sé dO ligu cho phan mam. 6.2.3 Bao dm an toan dng dung 6.2.3.1 Xde thyre 2) Thiét lp cdu hinh tng dung 48 xéc thye ngudl sit dung khi truy cp, quan tr, cdu hinh Gng dung: b) Luu tr cé mé héa théng tin xdc thyre hé théng; ©) Thiét [4p edu hinh tng dung 48 dém bdo an toan mat khdu ngudi six dyng, bao gdm céc yéu cu sau; + Yéu cau thay 441 mat khau mae dinh; + Thiét ap quy tdc 4&t mat khdu va 86 ky ty, loal ky ty. 5.2.3.2 Kiém soat truy c§p @) Thiét Ip hé théng chi cho phép si dung c4c két né mang an toan khi truy cp, quan tri img dung tir xa; ) Thiét Ip gi6i han thdi glan ché (timeout) 4& déng phién két néi khi tng dung khdng nhén duge yéu cAu ter nguéi ding. 18TCVN 11930:2017 6.2.3.3 Nhat ki hé théng Ghi nhat ky hé théng bao gdm nhGng théng tin o ban sau: ~ Thong tin truy cp tng dung; = Thong tin dng nhap khi quan tr} dang dung, 6.24 Bio dim an toan dériigu 8.2.4.1 Sao luu dy phong Thyc hign sao luu dy phong céc thong tin, dé feu quan trong trén hé théng. 6 Yéu cu co ban cho hé théng thang tin cdp a6 2 6.1 Yéu cdu quan ly 6.4.4 Thiét I§p chinh séch an toan thong tin 6.4.4.4 Chink s4ch an toan théng tin Xéy dyng chinh séch an toan théng tin, bao gdm: ~ Quan ly an toan mang; ~ Quan ly an toan may cha va eng dung: ~ Quan ly an toan do ligu; + Quan ly an toan ngudi sir dyng dau cudi. 6.1.4.2 Xay dyng va cong bb Chinh séich dues 18 chirc/b} phan dug dy quyan tiéng qua tude khi cng bé ap dung; 6.1.1.3 Ra soat, sire adi ‘Binh ky 03 ném hoge khi 6 thay d4I chinh sch an toan théng tin kiém tra fel tinh pha hgp va thye hién 1 sot, cp nhat, bd sung. 6.4.2 Téchirc bdo dim an toan théng tin 6.1.2.1 Don vj chuyan trach va an toan théng tin C6 bd phan 06 tréich nhigm bdo ddm an foan théng tin cho t8 chitc. 6.1.2.2 Phél hyp vél co quanité chire cé thm quyén 8) C6 dau m6 tién hé, phdi hop voi cdc co quan, t8 chit 06 thm quydn quan If v8 an toan théng tins b) C6 dau mdi én hé, phéi hop véi c&c ex quan, 8 chite trong cong tac hd tro didu phél xir iy sy ob an oan théng tin; ©) Tham gia céc host déng, cing téc bdo d4m an ton théng tin khi cé yéu cu cla t8 chirc cé thm quyén.TCVN 11930:2017 6.1.3 Bao dim ngudn nan Ivo 6.1.3.4 Tuyén dung Can bd duge tuyén dyng vao vi tr Im v8 an toan thing tin ob trinh 40, chuyBn nganh phi hop voi vi teh tuyén dung. 6.4.3.2 Trong qué trinh lam vige a) C6 quy dinh vd viée thyc hién ni quy, quy ché bdo 6m an toan thong tin cho ngudi sir dung, can quan ly va van hanh he théng; b) CO ké hogch va dinh ky hang nam td chic phd bién, tuyén truy&n néng cao nhén thirc vd an toan thdng tin cho ngudi sit dung. 6.1.3.3 Chdm di#t hoc thay 64i céng vie a) Can bé chdm d&t hode thay 481 céng vise phai thu hdi thé truy cap, thong tin duge Iuu tnén Cac phuong tien luu trl, cae trang thiét b| may méc, phan cimg, phan mém va cdc tai sén khdc (ndu cd) thude sé hi alia t8 chirc; b) C6 quy trinh va thye hin vd hidu héa tt cd cdc quyén ra, vao, truy c&p tal nguyén, qudin tri hé théng ‘sau khi edn bd thoi vide, 6.1.4 Quan ly thiét ké, xay dyng hé théng 6.1.4.1 Thiét ké an toan hé théng théng tin a) C6 tal ligu mé t8 quy md, phem vi va d6i tong sir dung, khai théc, quan ly van hanh hé théng thong fin; b) CO tai ligu mé ta thidt ké va. ‘ee thanh phan eta h6 théng théng tin; ) Cé tai figu m6 ta phwong an bao Gam an toan thing tin theo cdp 49; d) Cé tai liéu mé ta phuong 4n Iya chon giai php cing nghé bao Am an toan thing tin; ) Khi 06 thay 441 thiét k6, d4nh gid lei tinh phd hgp cla phuong an thiét ké 461 voi cdc ydu cdu an toan dat ra 461 v6i h8 thong. 6.1.4.2 Phat trién phan mém thué khoan a) C6 bién ban, hyp ddng va cdc cam két 461 véi bén thué khodn cdc ndi dung lién quan dén viée phat trién phan mam thué khodn; *b) Yéu cdu cdc nha phat trién cung c4p ma ngudn phan mdm. 6.1.4.3 Thiv nghiém va nghi¢m thu hé thong a) Thy hién kiém thir hé théng trudée khi dura vao vn hanh, khai thc sir dung; ») CO ndi dung, ké hoach, quy trinh thoy nghigm va nghigm thu hé théng:’ 20TCVN 11930:2017 ¢) C6 bd phan c6 tréch nhiém thyc hién thir nghiém va nghiém thu hé théng. 6.4.8 Quan ty vén hanh hé théng 6.1.6.1 Quan ly an toan mang Chinh séch, quy trinh quan ly an toan mang bao gdm: 8) Quan ly, van hanh host déng binh thuéng eda né théng; b) Cap nhét; sao luu dir phing céc tp tin cu hinh hé théng va khél phyc hé théng sau khi xay ra sy ob; ¢) Truy cap va quan ly cu hinh hé théng. 6.1.6.2 Quan ly an toan may chd va img dung Chinn s4ch, quy trinh quan ly an toan may chd va ing dyng bao gam: a) Quan fy, van hanh hoat dng binh thuémg cla hé théng may chi va dich vy; 'b) Truy cap mang cilia may chi ¢) Truy cp va quan tri may chd va tg dung; ) Cap nhat; sao ru dy phdng va khdl phyc sau khl xdy ra sy 08. 6.1.5.3 Quan ly an toan dé ligu Chinh sch, quy trinh quan ly an todn dé ligu bao gdm: a) Chinh séch, quy trinh dy phong va knol phy 46 fipu; b) Binh ky ho&c khi cé thay di céu hinh trén hé théng thyc hign quy trinh sao luu dy phong: tap tin cu hinh hé théng, ban dy phdng h@ didu hanh may chil, co s% dé Néu; di iu. thong tin nghiép vu. 6.1.6.4 Quan ly sy¢é an toan théng tin Chinh sch, quy trinh quan ly sy 06 an toan théng tin bao gm: a) Phan nhém sy cé an toan théng tin mang; b) Phuong an tiép nhan, phat hign, phan logi va xir ly ban dau sy 06 an toan thong tin mang; c) Ké hoach teng phd sy cd an toan théng tin mang; ) Giém sat, phat hign va cnh béo sy ob an toan thing tin; 4) Quy trinh tng ciru sy o6 an toan théng tin mang théng thudng; ©) Quy tinh tng ctu sy 06 an toain thong tin mang nghiém trong; 9) Co ché phéi hyp voi co quan chic nding, c&c nhém chuyén gia, bén cung cép dich vy hB try trong vide xir ly, khdc phye sy od an toan thong tin. 2TCVN 11930:2017 6.1.6.5 Quan Ij an toan ngudi siedyng dau cud! Chinh séch, quy trinh quan ly an toan ngudi six dyng dau cudi bao gdm: a) Quan ly truy cp, sir dung tal nguyén nol bd; ») Quan ly truy c&p mang va tai nguyén trén Intemet. 62 Yéucdu ky thuat 6.2.1 Bao dim an toan mang 6.2.4.4 Thidét ké hé théng a) Thidt ké cdc vung mang trong hé théng theo chirc:ndng, bac gdm ti thidu o&¢ ving mang: ~ Viing meng ni 8; ~ Vang mang bién; = Vong DMZ; = Vong méy chi noi bd; - Ving mang khéng day (néu ¢4) tach ring, 4dc Ip voi céc ving mang khéc. b) Phuong dn thiét ké bdo dam céc yu clu sau: = C6 phurong an quan ly truy op, quan tri ho théng tir xa an toan; + Cé phuong 4n quan ly truy c@p gira cdc viing mang va phdng chéng xm nhap; = Cé phuong én diy phdng cho ede thiét bj mang chinh. 6.2.1.2 Kidm soat truy c§p tir ban ngoal mang a) Thidt lap hé thdng chi cho phép sir dyng cdc két nbi mang an toan khi truy c&p théng tin ndi bd hodc quan tri hé théng ty o&c mang bén ngoal va mang Internet; b) Ki&m soét truy cap tty ban ngoai vao hé théng theo tung dich vy, @ng dung cy thé; chan tét cd truy cp tél cdc dich vy, cng dung ma hé théng khéng cung c4p hodc khéng cho phép truy cp tir bén Agoai; c) Thiét ip gi6l han thoi gian ché (timeout) 48 dong phidn két néi khi hé théng khong nhan duge yeu clu tiv ngudi ding. 6.2.1.3 Kibm soit truy cap tir bén trong mang Chiccho phép truy cap cae ung dung, dich vy bén ngoai theo yéu cdu nghigp vy, chin cdc dich vy Khe khéng phyc vy hoat dng nghiép vu theo chinh séch cila té chirc. 6.2.1.4 Nhat ky hé théng a) Thiét lap chive nang ghi, lu tr nhat ky hé théng trén ede thiét bj hé thdng (néu cd); 22TCVN 11930:2017 b) Sir dung mdy chi thd! gian a8 ddng bp thoi gian gide céc thiét b| mang, thiét bj ddu cusi va cd thanh phan khée trong hé théng tham gia host dng glém sat. 6.2.1.8 Phong chéng xam nhap a) C6 phuzong 4n phong chéng xém nhép 48 bao v6 ving DMZ va ving may chi ni bo; b) Dinh ky ofp nhat oo se dé gu du hiéu phat hién tn obng mang (Signatures). 6.2.1.6 Bao vé thiét b} hé théng 9) Céu hinh chic nang xéc thye trén ode thiét bj hé théng (néu h& tre) 68 xdc thyre ngwal ding khi quan tj thidt bj tryc tiép hoa tir xa; b) Thiét Ip cdu hinh chi cho phép si dung céc két ndi mang an toan (néu hd tr) khi truy c&p, quan tr} thiét bj tir xa; ¢) Cu hinh thiét bi (néu hd tre) chi cho phép han ché cdc dia chi mang c6 thé két néi, quan tri thiét b} ti xa. 6.2.2 Bao dam an toan may chi 6.2.2.1 Xée thye a) Thiét ip chinh sach xac thyc trén may chi dé xac thyc ngudi ding khl truy cp, quan ly va ei dung may chi; b) Thay ddi cfc tai khodn mae dinh trén hé théng hodc vo higu héa (néu khong si dyng); ¢) Thiét tgp cfu hinh may chii d8.dam bao an toan mgt khdu ngvdi str dung, bao gdm cac yeu cau sau: = Yéu cdu thay a8i mat khdu mac dinh; ~ Thidt lp quy tdc dat mat khdu vé sé ky tyr, loal ky ty; + Thidt 8p thai gian y8u cau thay di mat khdu; = Thidt lp thai gian mat khdu hop i. 6.2.2.2 Kiém soat truy cip 8) Thiét Ip hé théng chi cho phép sir dyng cdc két ni meng an toan khi truy o&p, quan tri may chi ti» xa; b) Thiét lap gigi han thei gian che (timeout) 68 dong phidn k&t néi khi may chi khdng nhan dure yéu cdu tir ngudi ding. 6.2.2.8 Nhat ky hé théng 8) Ghi nat ky hé théng bao gdm nhdng thing tin oo ban sau: - Thong tin két ndi mang toi may chd (Firewall log); - ThOng tin dang nhap vao may chi; 23TCVN 11930:2017 ~ L8i phat sinh trong qué trinh hogt dong; = Théng tin thay 68! cdu hinh may chi; = Th6ng tin truy cp dif figu va dich vy quan trong trén may chi (néu od). b) Bang bé thal gian gita méy chi voi may chd thé glen; ©) Luu nhat ky hé théng trong khodng thai gian 161 thiéu la 01 thang. 8.2.2.4 Phang chdng x4m nhap 8) Logi bé cdc tal khodin khdng si? dyng, céc tal khodn khéng cén hop Ié trén may chi; b) Sd dyng tong lira cita hé didu hanh va hp thong 8 cém céc truy cap trai phép toi may chi; c) V6 higu héa cac giao thie mang khong an toan, cc dich vy hé thdng khong si? dung; d) Cé phuong én cfp nhat ban va, xt ly aiém yéu an toan thong tin cho hé didu hanh va céc dich vy hé théng trén méy chi. 6.2.2.6 Phang chéng phan mém déc hai 8) Cai dat phan mam phong chéng mi dc (hode cd phuong 4n khde tuong durong) va thiét lap ché 46 ty d6ng cap nhat co sé dé ligu cho phan mam; b) Cé phuvong én kiém tra, dd quét, xi ly phan m&m dc hal cho cdc phan mém inréc kh! cal dat. 6.2.2.6 Xie ty may cha khl chuyén giao C6 phurong én xda sach thing tin, dO litu trén méy chi khi chuyén giao hode thay adi myc dich sir dung. 6.2.3 Bao dm an toan tng dung 6.2.8.4 Xéc thye ) Thiét lap céu hinh ting dung d8 xéc thyc ngudi sir dung khi truy cp, quan tr, cAu hinh cng dung; 'b) Luu tro 66 ma héa théng tin xéc thy h6 théng; c) Thiét [ap cu hinh mg dyng 48 dm bao an todn mat khdu ngudi sir dung, bao gdm céc yéu chu sau: - YOu cu thay d8i mat khdu mae dinh; ~ Thidt lp quy tdc dat mat khdu vd 96 ky ty, loal ky ty; ~ Thiét lp thal gian yéu cAu thay 44; mét khdu; ~ Thidt lap thd glen mat khdu hop Ie. d) Han ché 66 lan dng nhép sal trong khoding thdi gian nh&t dinh vél tal khodn nhdt dinh. 24TCVN 11930:2017 6.2.3.2 Kiém soét truy cép a) Thiét lbp he théng cht cho phép six dung céc két néi meng an toan khl truy cp, quan tr] ng dung tir xa; b) Thiét Kip giéi hen théi gian cho (timeout) 62 déng phién két nél khi Ging dung khong nhgn dug yeu cu tty ngudt ding; ¢) Gidi han dia chi mang quan tri duoc phép truy c&p, quan tr] Ging dung te xa. 6.2.3.3 Nhgt ky hé théng 8) Ghi nhat ky hé théng bao gdm nhimg theng tin oo bén ~ Théng tin truy ofp dng dung; ~ Théng tin dng nhap khi quan tr] Ung dung; = Théng tin cdc Ii phat sinh trong qué trinh hogt 66g; = Théng tin thay di cdu hinh tng dung; b) Luu nhat ky né théng trong khodng thd gian tdi thiéu la 01 thang. 6.2.3.4. An toan tng dyng va ma nguén. C6 chite nang kidm tra tinh hop 16 cia théng tin, dé figu dau vio trade khi xi ly. 6.2.4 Bao dam an ton dor iigu 6.2.4.1 Bao mgt da ligu Lun tro co ma née ede thong tin, dO ligu (khong phil 18 thong tin, di igu cBng kha trén hg théng leu trOfphuong tién luru tro. 6.2.4.2 Sao luu dy phdng ‘Thyc hign sao lu dr phdng cdc théng tin, dif liu co ban sau: tép tin cu hinh hé théng, ban dy phong: hé dibu hanh méy cha, co s& dir lidu; dor lidu, thong tin nghigp vy. 7 Yau cdu co ban cho h§ théng théng tin cAp 46 3 74 Yu cdu quan ly TAA Thiét tap chinh séch an toan théng tin 7.4.4.1 Chinh séeh an toan thong tin X@y dung chinh sdch an-toan théng tin, bao gdm: a) Xd dinh céc muctiéu, nguy8n téc bdo dm an toan thng tin; b) Xac dinh tréch nhiém oda don vi chuyén tréch vd an toan thong tin, céc cén b6 kam vé an toan thong tin va céc Adi tung thude phem vi didu chinh cda chinh sach an toan thong tin;TCVN 11930:2017 ¢) Xée dinh phem vi chinh sdch an toan théng tin bao gdm: - Pham vi quan ly vb vat ly va logic cita 18 chiro; + Cae Ung dung, dich vy hé théng cung cép; = Ngudn nhan Iie bao 42m an toan théng tin, d) X4y ding chinh s4ch an to&n thong tin bao gam: + Quan ly an toan mang; + Quan ly an toan may chit va tng dyng; = Quan ly an toan d0 liu; ~ Quan ly an toan thiét bj du cul; - Quan ly phong chéng phan mam déc hal; + Quan Iy iém y6u an toan théng tin; + Quan ly gidm sét an toan hé thdng théng tin; + Quan ly an toan ngudi si dyng dau cudi. TAA.2 Xay dyng va céng bd 8) Chinh séch due t& chirc/o} phan dug dy quyan thing qua trudc khi céng bé dp dung; b) Chinh sdch dirge cing bé thd khi ap dung. 7.4.1.3 Ra soat, sta G61 Binh ky 02 nam hoge khi c6 thay ddl chinh séch an toan théng tin Kiém tra lai tinh phi: hep va thyc hign ra sot, cp nhat, bé sung. 7.4.2. Té chize bao d4m an toan théng tin 7.1.2.4 Bon v| chuyén tréch vb an todn théng tin @) Thanh lap hog chT dinh don vb phn chuyén tréch v8 an toan théng tin trong t8 chirc; b) Phan dinh val td, trach nhiém, co ché phdi hyp ciis cae bd phan, can b6 trong don vi chuyEn trach v8 an toan théng tin, 7.1.2.2 PhOi hop voi nhGng co quan/té chire cé thdm quyén @) C6 dau mi lién hé, phdl hyp v6l c&¢ oo quan, t8 chire od thdm quydn quan ly vé an toan théng tin; b) C6 dau mi fién hé, phd! hop véi e&c.co quan, t8 chirc trong cing tac hd tre didu phéi xiv ty sy oS an toan théng tin; ¢) Tham gia cac hoat dng, cong tac bdo dém an toan thing tin khi cé y8u cu cua t8 chirc cé tham quyén, 26TCVN 11930:2017 7.4.3 Bao dim nguén nhan Ic 7.4.3.4 Tuyén dung a) Cén bd dug tuy&n dyng vaio vj tri lam va an toan thong tin o¢ trinh 6, chuyén nganh va finh ve ‘96ng nghé théng tin, an foan théng tin, phis hyp vai vi trf tuyén dung; b) CO quy dinh, quy trinh tuy&n dung can bé va didu kién tuyn dung can bé. 7.1.3.2 Trong qué trinh lam vide a) C6 quy dinh vd vigc thye tien nél quy, quy ché bao dim an todn thong tin cho ngudi sit dung, cén bd quan ly va van hanh hé théng: b) C6 ké hoech va dinh ky hang nam 18 chirc phd bién, tuyén truyén nang cao nhan thac va an toan ‘Wong tin cho ngudi sik dung; ©) Binh ky hang nam, 18 chic do tao céc ky nang oo ban vé an toan thong tin cho ngui sit dung. 7.1,3.3 Cham det hoc thay 441 céng vigc a) Cén b6 chém dt hoge thay 431 cing viée phal thu hdl thé truy c&p, thOng tin duge wu tran cée phuong tin wu tr, cc trang thiét bl m4y méc, phn (rng, phan mam va cdc tal sn khac (néu 6) thuge 8& nou cia 18 chor; b) Cé quy trinh va thyc hidn vo higu héa tét cd cae quydn ra, vao, truy cp tal nguyén, quan tri hé théng sau khi cn b6 thdl vite; ¢) Cé cam két gid bi mat théng tin lién quan dén tS chirc sau khi nghi viec. TAA Quan ly thiét ké, xdy dyng hé théng 7.4.4.1 Thidt ké an toan hp théng thong tin 8) Cé tal ligu mé t& quy md, pham vi va d6i tugng sir dyng, khai théo, quan ly van hanh hé théng thong tin; b) Cé tal ligu mé td thidt ké va cdc thanh phan cla hé théng théng tin; ©) Cé tai figu mé 1 phurong 4n bdo dm an toan thong tin theo chp 46; ¢) C6 tai iéu mé t phuong én Iya chon gia phdp obng nghé bao dam an toan thing tin; €) Khi ¢6 thay di thiét ké, danh gid Iai tinh phd hep eda phuong dn thiét ké 661 vol céc yéu cau an toan dat ra déI v61 hé théng. 7.1.4.2 Phat trién phan mém thud khoan 8) Cé bién ban, hop ddng va cac cam két dél voi bén thué khoan céc ndl dung lién quan dén viée phat tridn phan mam thud khodn; ») Yéu cau cdc nha phat trib cung cdp m& nguén phin mém; 27TCVN 11930:2017 ©) Kidm thi phdn mém trén m8i trvéng thir nghigm trade khi dua véo sir dung; ¢) Kiém tra, dénh gié an toan thong tin, trrde khi dua vao sir dung. 7.1.4.3 Thi nghigm va nghigm thu hg théng a) Thy hign Kiém thi? hé théng trudc khi dura vao van hanh, khal thdc sir dung; b) Condi dung, ké hoach, quy trinh thir nghiém va nghiém thu hé thdng; ©) C6 b6 phan od tréch nhiém thy hign thir nghi¢m va nghiém thu hé théng; 4) C6 don vi doc lap (bén thir ba) hodc bd phan dtc lp thude don vi thyc hién tir van vA gidm sét qué trinh thir nghigém va nghignn thu hé théng; 4) C6 béo odo nghigm thu duge xéo nhan ca bd phan chuyén trach va phé duyét cia ch quan he théng théng tin truréc khi dua vao sir dung. TAS Quan ly vn hanh he théng 7.1.8.4 Quan ly an toan mang Chinh séch, quy trinh quan ly an toan mang bao gm: @) Quan fy, van hnh hoat dng binh thudng cia hé théng; ‘b) Cap nhat, sao Iuu dy phéng va khéi phyc hé théng sau khi xdy ra ey 06; c) Truy cp va quan ly c4u hinh hé théng; d) Cu hin tél wu, tang curtng bdo mat cho thiét bj hé théng (cing héa) truéc khi dura vao van hanh, khai thc, 7.4.6.2 Quan ly an toan méy chi va ing dung Chinh séch, quy trinh quan ly an ton may chii va tng dung beo gdm: a) Quan ly, van hanh hoat dong binh thudéng cilia hg thong may chil va dich vy; b) Truy cp mang cla méy chi; ©) Truy c&p va quan tri may chi va tng dung: 4) Cap nhat, sa0 wu dy phong va khdi phyc sau Khi xay ra sy 06; 4) Cal 48t, g6 bd hé cidu anh, dich vy, phan mam trén hé thong may chi va dng dyng; @) Két ndi va gv bé he théng may chi va dich vy khéi hé théng; 9) CAu hinh t6i wu va tding cwdng bdo mat (ctng héa) cho hé théng may chil truéc khi dua vao van hanh, khai thac, 7.1.8.3 Quan ly an toan do ligu Chinh sch, quy-trinh quan ly an toan dé ligu bao gdm: 28TCVN 11930:2017 a) Xy dyyng va thye thi chinh séch, quy tinh die phong va Knol phye dir lieu; ¢) Binh ky hoge khi ¢6 thay 461 cfu hinh trén hé théng thyc hién quy trinh sao lvu dy phéng: tap tin chu hinh h@ théng, ban dy phang hé didu hanh mdy chi, cor 88 dé ligu; dé ligu, théng tIn nghiép vy. 7.1.6.4 Quan ly an toan thiét bj du cud! ‘Chinh séch, quy trinh quéin ly thiét bi du cusi bao gdm: 8) Quan ly, van hanh hoat d6ng dinh thurdng cho thiét bi dau cudi; b) Két nd, truy cp va eth dung thiét bj dau cudi ti xa; ¢) Cal det, két ndi va gé bé thiét bj du cubl trong hg théng, 7.1.8.5 Quin ly phdng chéng phan mdm doc hat Chinh séch, quy trinh quan ly phn mam d6c hai bao gdm: a) Cal dat, c&p nhat, sd dyng phan mém phéng chéng mé déc; dé quét, kiém tra phan mm dc hal trén méy tinh, may chi va thiét bl dl é6ng; b) Cai G8t, sir dung phan m&m trén méy tinh, thiét bj dl dong va vige truy c&p cdc trang théng tin trén mang; . ¢) Git nhan tp tin qua mé! truéng mang va céc phuong tidn Iyu tro dl dong; d) Dinh ky thyc hign kldm tra va dd quét phn mbm doc hal trén toan bd hé théng; Thyc hién kiém tra va xir ly phn mém dc hel ici phat hién déu higu hoge cdnh béo v8 déu higu phan mém déc hai xudt hign trén hg thong, 7.1.8.8 Quan ly glam sét an toan hé théng thong tin Chinh sach, quy trinh quan ly giém st an toan hé théng théng tin bao gdm: a) Quan Ij, van hanh hoat déng binh thudng ala hé théng giam sat; b) bi tong gidm sét bao gdm: thiét bl hé théng, my chi, (mg dung, dich vu va cdc thanh phan khac ‘rong hé théng (néu c6); ¢) Két n6i va givi nhat ky he théng tir 64] eng giém sat vd né théng glam sat; 4) Truy cap va quan tri hg théng giém sat; ) Loal théng tin cn duge gidm sat; e) Luu trit va bao vé théng tin gidm sat (nhat ky hé théng); 9) Bdng bé théi gian glira hé théng glém sat va thist bi dug gidm sat; h) Theo déi, giém sét va canh béo sy of phat hign durge trén hé théng théng tin, 29TCVN 11930:2017 7.4.6.7 Quan ty dim yéu an toan thong tin Chinh séch, quy trinh quan ly diém yéu an toan théng tin bao gdm: a) Quan ly thong tin cdc thanh phn 0d trong hé théng c6 kha nding t8n tal didm yéu an toan théng tin: thidt bj hg théng, hé didu hanh, may chi, (eng dyng, dich vy va cdc thanh phan khdc (néu 00); b) Quan Iy, c&p nhat ngubn cung cép diém yéu an toan théng tin; phan nhém va mic 4 ota diém yéu cho cdc thanh phan trong hé théng da xdc dinh; ¢) Co ché phdi hgp vél cfc nhém chuyén gia, b&n cung c4p dich vy hé try trong vide xir ty, kh8c phyc Giém yéu an toan thong tin; @) Kiém tra, d4nh gid va xir ly diém yéu an toan thing tin cho thiét bl hé théng, may chi, dich vu trréc khl dua vao si? dung; 4) Dinh ky kiém tra, danh gid iém yéu an toan thong tin cho toan bd hé théng théng tin; Thy hién quy tinh kiém tra, d4nh gl, xt ty diém yéu an toan théng tin khi od théng tin ho&c nhn durgc canh béo vé aiém yéu an toan théng tin d6i véi thanh phan cy thé trong hé théng. 7.4.6.8 Quan I9 si cd an toan thong tin Chinh sach, quy trinh quan ty sy ¢é an toan th6ng tin bao gdm: a) Phan nhém sy cé an toan thong tin mang; b) Phuong 4n tiép nhén, phat hién, phan logi va xr ly ban dau sy cd an toan théng tin mang; ©) Ké hoach tang phé sy cb an toan théng tin mang; 4) Gidm sét, phat hién va cénh béo sy of an toan thong tin; 4) Quy trinh Geng céru sy cb an toan thong tin mang thong thudng; @) Quy trinh Gng cau sy cé an toan théng tin meng nghiém trong; 9) Cor ché phdi hop vot co quan chire néing, céc nhém chuyén gia, bén cung cdp dich vy hé tro trong vige xi Ij, thc phuc sy oS an todn thang tin; h) Binh ky 18 chao ain tap phwong én xi ly sy o6 an toan thang tin, 7.4.8.9 Quan ly an toan ngudi sir dung dau cubi Chinh séch, quy tfinh quan If an todn ngudi sir dung dau cudi bao gdm: 8) Quan ly truy c&p, sir dung tal nguyén ndi bb; ) Quan ly truy c&p mang va tai nguy8n trén Internet; ¢) Cai dt va sir dyng may tinh an toan, 30TCVN 11930:2017 7.2 Yeu chu kp thugt 7.2.4 Bao dam an toan mang 7.2.4.4 Thidt ké hg théng a) Thiét ké cac viing meng trong hé théng theo chic nang, cae ving mang t6I thidu bao gém: - Ving mang ndi b; Ving mang bién; - Ving DMZ; - Vung may chii noi b8; ~ Vang mang khong day (néu ¢6) téch riéng, déc lap vil ede ving meng khéc; ~ Vang mang may chil co sé do ligt; Ving quan tr}; b) Phuong an thidt ké bao dam cdc yéu cau sau: = C6 phuong an quan ly truy c&p, quan tr] h@ théng tir xa an toan; ~ C6 phurong én quéin ly truy o&p gira c&c ving mang va phéng chéng x4m nhép; = C6 phuong an can bang tal va dy phéng néng cho cdc thiét b] mang chinh; ~ C6 phuong én bao dim an toan cho may chi co 96 dé gu; ~ Cé phurong én chin ioc phan mém déc hai tran mdi trréng mang; = Cé phuong dn phong chdng t4n céng tir chéi dich vy; = C6 phuong dn giém sat hé théng thing tin tép trung; - Cé phuong én glam sat an todn hé théng thing tin tp trung; ~ Cé phurong én quén ly sao Iu dy phéng tép trung: - C6 phurong an quan iy phan mém phong chéng ma déc trén cdc may chiv/may tinh ngudi ding tp ‘trung; ~Cé phuong dn phéng, chéng that thoat d@ ligu; = C6 phurong én dy phéng két n6i mang Intemet cho cdc may chi dich vy; - C6 phuong én bdo dém an toan cho mang khéng day (néu od). 7.2.4.2 Kiém oat truy cp ti bén ngoal meng 8) Thidét lap he théng chi cho phép sir dyng cdc két néi meng an toan khi truy cp thng tin ndi bd ho&e qudn tri hé théng tir céc mang ban ngoai va mang Intemet; unTCVN 11930:2017 b) Kid soat truy cp tir bén ngoal véo hé théng theo timg dich vy, tng dung cy thé; chan t&t cd truy cp 161 cde dich vy, dng dung ma hd théng khng cung ofp hod khéng cho phép truy cap tir bén goa; ©) Thidt !8p gl6l han thi glan cher (timeout) 48 déng phién két ndi khi hé théng khéng nhan duoc yéu cau tir ngudi ding; 4) Phan quyén va c4p quyén truy cap tt bén ngoal vao hé thdng theo tirng ngudi diing hogc nhém ngudi ding c&n cé theo yéu cau nghiép vy, yéu cdu quan ty; 6) Gidi han s6 lurong két ndi ddng thai tir met dia chi ngudn va ting 66 iuong kat néi dng thdi cho tieng tng dyng, dich vu dug hé théng cung edp theo nang ve thyc té cia hé théng. 7.2.4.8 Kidm soét truy c&p tir bin trong mang 8) Chi cho phép truy cp cdc @ng dung, dich vy ben ngoal theo yéu cau nghigp vy, chan céc dfch wy khdc khéng phyc vy hoat dong nghiép vy theo chinh sch cia 15 chic; b) Gidi han truy cap céc tng dung, dich vy bén ngoal theo the! gian (theo chinh séch truy cap cia 8 chéte néu 06); ©) C6 phuong én kim soat truy c&p cila ngudi dilng vao c&e dich vy, cée may chii ngi bd theo chac ning va chinh sch eta td chire. 7.2.4.4 Nhat ky hg théng a) Thiét lp chérc nding ghi, luu tri nh&t ky hé théng trén cdc thiét bi hé théng (ndu hé try), bao gdm. ‘6c théng tin sau: = Tdi gian k6t di, = Théng tin k&t néi mang (dla cht IP, cSng k&t né); + Hanh déng dél vi két nd (cho phép, ngdn ch&n); ~ Thong tin che thiét bj du cust két néi vido hd théng theo éia chi vat Iy va logic; + Théng tin céinh bao tir c&c thiét bi; = Théng tin hiéu néing hoat dong cba thiét bj va tal nguyén meng. b) Sik dung may chi thai gian trong hé théng 46 ding b6 thdi gian gidva cdc thiét bi mang, thiét bj dau cuél va céc thanh phan khée trong hé théng tham gia hoat agng glém sat; ¢) Luru tro va quan ly tap trung nhgt ky hé théng thu thép duge tiv cdc thidt bj he théng; ©) Luu tr nhat ky he théng cia thiét bj 16! thidu 03 thang. 7.2.4.6 Phang chéng xAm nhép 8) C6 phurong an phong chéng xam nhap dé bdo vé cdc ving meng trong hé théng; 32TCVN 11930:2017 b) Binh ky cp nhét co 88 dé ligu dau higu phat hign tén cong mang (Signatures); c) Bao dam nang Ive hé théng d4p Gng dui theo yeu cau, quy md s6 Ivgng ngud! dung va dich vy, Gng dung otia hé théng cung cdp. 7.2.4.6 Phong chéng phin mim dgc hal trén mdi trvéng mang a) C6 phuong an phong chéng phan mém doc hai trén mdi tng mang; b) Binh ky c@p nhét d@ ligu cho hé théng phong chéng phan mém 46c hei; ¢) Bao dim nang lye hé théng dap ing dii theo yéu cau, quy mo $6 kryng ngudl dung va dich vy, Ging dung cil hé thing cung cdp. 7.2.1.7 Bao vé thiét b| hé théng a) Cu hinh chic néing xac thie trén céc thiét bi hé théng (néu hd tro) 68 xdc thyc ngudl dling khi quan trf thiét b] tryvc tiép hod tir xa; b) Thiét ap cu hinh chi cho phép st dyng céc két ndi mang an toan (néu h8 try) khi truy cp, quan tr] thiét bj to xa; ¢) Cu hinh thiét bj (néu h8 tr) chi cho phép han ché cdc dia chi mang o6 thé két néi, quan tri thiét bi teva; d) Han ché duge 86 tan déing nhap sal khI quan tr hodic két ndi quan tr] tle xa theo dja chI mang; ) Phan quyn truy cp, quan tr] thidt bj déi vbi cdc tai khogn quan trj cé quyén han khée nh e) Nang cp, xir ty diém yéu an ton thing tin cla thiét bj hg théng truréc khi dura vao sit dung: 9) X6a bd théng tin cu hinh, dO tigu trén thiét bj hé théng khl thay ddI myc dich siy dyng hoe gi bé kndi hé théng, 7.2.2 Bao dam an toan may cha 7.2.2.1 Xée thye a) Thist lap chinh sch xc thye trén may chi a8 xdc thye ngudt dung knl truy e@p, quén ty va six dung may chi; b) Thay 681 ofo tal khodin mée dinh trén hé théng hodc v6 higu héa (néu khéng str dung); ¢) Thiét lp cdu hinh may chi a8 d&m bdo an toan mat khdu ngudi sik dung, bao ghm cdc yéu cu sau: - You cu thay 461 mat khdu mac dinh; = Thidt Igp quy tc d&t mat khdu va sé ky ty, loal ky ty; + Thidt lap thoi gian yeu cau thay 681 mét khau; + Thidt 9p thoi gian mat khdu hgp I. 4) Han ché 86 lin Gang nh§p sat trong khodng thél gian nh&t dinh véi mét tai khodn nhat dinh;TCVN 11930:2017 6) Thiét lap cu hinh d& vd higu héa tal khodn néu tai khodn dé dng nhép sai nhidu lan vugt sé lan quy dinh. 7.2.2.2 Kibm soat truy c§p ‘a) Thidt tp hé thdng chi cho phép sir dung cc két nél mang an toan khi truy cp, quan tri may chil tir xa; b) Thiét 8p gidi han thd glan ché (timeout) 68 G5ng phién két nd! khi méy chis khéng nhan dugc you cau tis ngudi ding; ©) Thay 44] cdng quan tri mac dinh cila may chi; 4) Gidi nan dja cht mang dug phép truy cap, quan tr| may chi tir xa. 7.2.2.3 Nhat ky hé théng a) Ghi nhét ky hé théng bao gdm nhing théng tin co ban sau: = Théng fin két nd mang t6i may chi (Firewall log); + Théng tin ding nh&p véo may chi; - LB phat sinh trong qué trinh host dong; = Théng tin thay 441 cdu hinh méy cho; = Thong tin truy cap di ligu va dich vy quan trong trén may chd (néu cd). b) Bang bé thai gian gitra may chil véi méy chil thé glan; ¢) Gidi han 4 dung lugng vu trie nhat ky hé théng 48 khéng mét ho&c tran nhat ky hé théng: 4) Quén ly va luu tro tap trung mhat ky hé théng thu thap dug tir méy chi; 4) Luu nhat ky hé théng trong khodng thai gian tét thidu 1a 03 thang, 7.2.2.4 Phong chéng xam nhap a) Logi bd céc tal khodn khéng sir dyng, céc tal kho&n khong cda hop ié trén may chi; >) St dung tung lira cia he didu hanh va hé théng 42 c&m chs truy c&p trl phép toi may chil, ¢) Vé higu héa eéc giao thie mang khdng sn toan, cdc dich vy hé théng khong si dung; 4) Cé phugng 4n cap nhgt ban v4, xi? ly diém yéu an toan théng tin cho hé didu hanh va ed dich vy hg thing trén may cha; ) Thy hign nang ofp, xi ly diém yéu an toan thong tin rn may chil tric khi dura vao sir dung. 1.2.2.8 Phong chéng phan mdm dc hai a) Cal G&t phan mdm phdng chéng m4 dc (hode od phuong an khdc tong dirong) va thiét lap ché 46 fy dong cp nhét oo sé dor ligu cho phan mam; 34TCVN 11930:2017 b) Co phuong dn kiém tra, dd quét, xi ly phan mém age hai cho cas phan mém truée khi cai dat; ) Quan ly tap trung (cp nat, cdnh bao va quan ty) cdc phan mam phang chéng ma doc cdl dat trén méy chi va céc may tinh ngudl sir dung trong hé théng. 7.2.2.6 Xir ly may chi khl chuyén giao a) Cé phuong &n x6a sach théng tin, di ligu tran may chii khi chuyén giao hoc thay 4&1 muc dich sir dyng; b) Sao lwu dy phéng théng tin, dO ligu tran may chi, ban dy phong hé didu hanh may chi tude khi thyc hién xéa dé ligu, hé didu hanh; ©) Cé bin phap kiém tra, bao dém déf lidu khéng thé khél phuc sau khi xéa. 7.2.3 Bao dam an toan dng dyng 7.2.8.1 Xée thys a) Thiét ap c4u hinh Gng dyng 48 xac thyc ngurdi si’ dung Khi truy cap, quan tf, chu hinh Ong dung; ») Luu tro c6 ma héa thong tin xéc thyc hé théng; c) Thiét 18p cu hinh tng dung 68 ddm bao an toan mat khdu ngudl six dung, bac gdm cdc yéu chu sau: - Yéu cdu thay 481 mat khdu mac dinh; ~ Thiét lap quy tde dat mat khdu va sé ky ty, loai ky ty; = Thidt lp thoi gian yeu cdu thay d5i mat kau; + Thiét lap thdi gian mat khdu hop 16. d) Han ché 86 lan dang nh@p sai trong khoang thai gian nhAt dinh vét ti khodn nhat dinh; 4) MB héa théng tin xdc thyrc tnd khi gil qua méi trong mang; ¢) Thiét Ip cdu hinh (ng dung 68 ngan can vide ding nhap ty dng déi vol cac wng dung, dich vy cung cdp va xi ty d@ llgu quan trong trong hé théng. 7.2.3.2 Kibm soét truy c4p a) Thidt lap h@ théng chi cho phép si? dyng cc két ndi mang an ton khi truy cap, quan tri ting dung ty x3 b) Thiét lap giéi han thdi gian che (timeout) 48 déng phian két néi khi @ng dung khéng nhén duge yéu cau t@ ngudi ding; ¢) Giét han dja chl mang quan tri dug phép truy cép, quan ti ng dung tir xa; d) Phan quy&n truy cap, quan tri, adr dyng {al nguyén khdc nhau cla tng dung voi nguél si dung/ nhém ngwdi sir dung 06 chire nang, yéu cu nghiép vy khée hau; 35TCVN 11930:2017 ©) Gidi han s6 long céc két nbl ddng thd (két néi khdt teo va 8 thigt lap) d6i voi cdc ting dung,.dich. ‘vy may chd cung cAp. 7.2.3.3 Nhgt ky hg théng 8) Ghi nhét ky n@ théng bao gdm nhGng théng tin oo ban sau; ~ Thong tin truy cp Ung dung; + Théng tin d&ng nhap khi quan trj ng dung; - Théng tin c&c 18i phat sinh trang qué trinh hoet dong; - Théng tin thay 48! odu hinh ng dung. b) Quan ly va hvu trir nhét ky hé théng trén hé théng quan ly t€p trung; c) Nhat ky hé théng pha durge iuru tre trong khoding thdi gian tdi thidu ia 03 théng. 7.2.3.4 Bao mgt thong tin lién Iae a) Ma héa théng tin, di ligu (khéng phal (a thong tin, dé ligu cdng khai) truée Khi truyén dua, trao ddi qua mél truréng mang; sir dung phurong én mii hda theo quy dinh va bdo vé bi m&t nha nuée dé vbi thong tin mat; b) Sd dung két néi mang an toan, bdo dam an toan trong qué trinh khdi tao két ndi kénh truyén va trao 64i théng tin qua kénh truydn. 7.2.8.8 Chéng chél bd Sit dung chi ky 26 khi trao d&I théng tin, dO ligu. quan trong, 7.2.3.6 An toan tng dyng va ma nguén 8) Cé chire néing kiém tra tinh hgp Ig cla thdng tin, dir lidu dau vao truer Kh iP IY; b) Cé chic ndng kiém tra tinh hyp 1 cla thong tin, di figu Gu ra trudéc khi gil vd may yéu cau; ©) Cé phuong an bdo vé tng dung chng lal nhitng dang tdn cong phd bin: SQL Injection, OS command injection, RFI, LFl, Xpath injection, XSS, CSRF; 1) C6 chit nding kiém soét Wi, théng bao Ibi tiy Geng dung. 7.2.4 Bao dim an toan dé ligu 7.2.4.1 Nguyén ven d@ ligu C6 phwong én quan ly, Itru trib dé ligu quan trong trong hé théng cling voi ma kiém tra tinh nguyén ven. 7.2.4.2 Bao mat dG Iigu 2) Luu tri c6 ma héa cée théng tin, dé tiju (khong phal la théng tin, dé lu ofng khal) tén hé thdng wu trO/phuong tién tuu tro; 36TCVN 11930:2017 b) SO dung céc phyong phép mé héa manh (cha duge cde t8 chire quée té céng bé diém yéu an toan théng tin) 8 ma héa dir ligu. 7.2.4.3 Sao lu dy phong a) Thuc hién sao luu dy phéng cdc théng tin, di liéu oo ban sau: tp tin cdu hinh hé théng, ban dy phéng hé didu hanh may chi, co sé df ligu; dé lidu, théng tin nghidp vu; b) Phan togi va quan ly cac dd ligu duge iu tré theo tiyng log/nhém théng tin due gan nihdn khac nhau; c) Co hé théng/phuong {ign ltu tre doc lap 34 sao iru dy phdng. 8 You cau co ban cho hé théng théng tin cp 464 81 Yeucdu quanly 8.1.1 Thiét Ip chinh s4ch an toan thong tin 8.1.1.1 Chinh sch an toan théng tin Xy dyng chinh séch an toan théng tin, bao gém: a) Xe dinh céc myc tlau, nguyén t& bao dam an toan thong tin; b) Xc dinh tréch nhlgm cia don vj chuyén tréch vé an toan théng tin, céc.cdn bo lam vb an toan théng tin va cdc 46i twrong thude pham vi didu chinh cia chinh sch an toan théng tin; ©) Xéc dinh pham vi chinh sdch an toan thing tin bao gdm: ~ Pham vi quan ly vé vat ly va logic eda t8 chore; = Cac tng dung, dich vy hé théng cung cdp; + Ngudn nhan Ive bao dam en toan thing tin. d) Xay dyng chinh sch an toan thing tn bao gdm: - Quin ly an toan mang; ~ Quan ly an todn may chii va tng dung; ~ Quan iy an ton do Ogu; ~ Quan ly an toan thiét bj dau cusi; = Quan ly phong chéng phan mam dgc hel; + Quam ty diém yéu an toan théng tin; = Quan ly glam sdt an toan hé théng théng tin; + Quan ly sy cé an toan théng tin; ~ Quan fy an toan ngudi ste dung dau cud, 37TCVN 11930:2017 8.1.1.2 Xay dyng va cing bb 8) Chinh sdch dug t8 chirc’bd phan dug dy quy&n thong qua truréc khi cing bé ap dung; b) Chinh s4ch durgc céng bé taréc khi ap dung; ©) T5 chitc tuy&n truy8n, phd bién cho toan bé cn b6 trong t8.chirc. 8.1.1.3 Ra sost, stra ddt @) Binh ky hang nam hoe khi 06 thay 681 chinh séich an toan théng tin kiém tra lel tinh pha hep va thye hién ra soat, cap nhat, bd sung; b) C6 hd so fw lal théng tin phan hdi cla 461 tugng ép dung chinh stich trong qué trinh trién khal, dp dyng chinh sch an toan théng tin. 81.2 Td chire bao dim an toan thing tin 8.1.2.4 Bon v| chuyén tréch vb an toan thdng tin 8) Thanh lap hode chi inh den vj chuyén trach vé an toan théng tin trong t8 chiro; b) Phan ginh val trd, tréch nhiém, co ché phéi hgp cla cae bO phan, c4n bd trong don vj chuyén tréch va an todn théng tin; ©) Chl dinh bd phn chuyén tréch trong don vi chuyén trach va an toan théng tin 08 trach nhiém xy yng va thy thi chinh sach an toan thong tin. 8.1.2.2 Phéi hep vél nhimg co quansté chire ¢¢ thdm quydn a) Cé dau méi lin hé, phél hop véi céc cor quan, t8 chérc o& thdm quydn quan ty vé an toan thong tin; b) Cé dau méi lién hé, phéi hgp véi cdc co quan, 15 chic trong cing tac hd tre diéu phd xi ly sy ob an toan thong tin; ¢) Tham gia cdc hogt dong, céng tac bdo dam an toan thing tin khi cé yéu cau cia tb chiro od thm quyén. 8.1.3 Bio dim ngudn nhan iyo 1.3.4 Tuyan dung a) Cén bd duge tuyén dung vao vj trf fam vé an toan thong tin © trinh 40, chuyén nganh va inh vo c6ng nghé théng fin, an toan thdng tin, phii hop vél vi tri tuy&n dung; b) Cé quy dinh, quy trink tuyén dung cn bd va didu Kién tuydn dung on bd: ¢) C6 chuyén gia trong Iinh vyc dénh gid, kidm tra trinh 69 chuyén mén phi hep voi vi tei tuyén dung. 8.1.3.2 Trong.qué trinh lam vige 8) Cé quy dinh vé vide thy hién ndi quy, quy ché bao ddm an toan thing tin cho ngudi si dyng, can bd.quén ly va van hanh hé théng; 38TCVN 11830:2017 b) C6 ké hoach va dinh ky hang nim t8 chare phd bién, tuyén truyén nang cao nhén thie v8 an toan thing tin cho ngwdi str dung; ©) Cé ké hoach va dinh ky hang nm 18 chive dao tao vé an toan théng tin hang nm cho 03 nhém 461 ‘turgng bao gdm: can bd ky thuét, cdn bé quan ly va nguéi siz dung trong hé théng. 8.1.3.2 Chdm det hoc thay adi céng vigc 8) Can bd chém dirt ho’c thay 1 cong vigc phai thu hdi thé truy cap, thong tin duye lu trén cdc phuong tién hru tri, cAc trang thiét b| may méc, phan cng, phan mém va cac tal sdn khac (néu 04) thude 9 hGu cia 18 choc; b) C6 quy trinh va thyc hién vb higu héa tat cd cde quyén ra, va0, truy c&p tal nguyén, quan tr] hé thong sau khi can bd thél vide; ©) C6 cam két git? bi mat théng tin fién quan d6n td chirc sau khi nghi viée. 8.1.4 Quan ty thiét kd, xy dyng hé théng 8.1.4.1 Thiét ké an ton hé théng théng tin 8) Cé tal itu mé ta quy mé, pham vi va déi tuong si? dung, khai thc, quan ly vén hanh hé théng théng tin; b) C6 tal ligu mé ta thiét ké va cdc thénh phan cila hé thong théng tin; c) Cé tai litu mé ta phurong dn bdo dam an toan théng {in theo cdp do; 8) Cé tai ligu mé td phuong dn Iya chon gidl php cbng nghé bao dém en toan thing tin; ©) Khi c6 thay 481 thiét ké, d4nh gid lai tinh phd hop eda phuong an thiét ké d6i voi cdc you clu an toan dat ra d6i voi hé théng; e) Cé phuong 4n quan ly va bao vé hd so thiét KS; 9) Cé bd phn chuy&n mén, 18 chuyén gla danh gl& hd so thiét ké hé théng théng tin, cdc bign phdp bdo dam an toan thong tin trrde khi tridn khal thyc hién, 8.1.4.2 Phét tridn phan mém thud khodn a) Cé bién ban, hep déng va c&c cam két G6] v6i bén thué khodn cde ndl dung lién quan dén viéc phat trlén phan mém thué khoan; b) Yéu cu céc nha phat trin cung cép ma ngudn phan mém; ©) Kidm thir phan mam tran mal truémng thir nghiém truréc khi dua vao sir dung; 4) Kidm tra, dénh gid an toan théng tin, trée khi dure vao sir dung: 6) Khi thay 461 m& ngudn, kién trac phan mam thyc hién kidm tra, danh gid an todn thong tin cho phn mam;TCVN 11930:2017 e) Cé cam két cla bén phat trién v8 bao dam tinh bf mat va ban quyén cila phan mém phat trién. 8.1.4.3 Thiy nghlém va nghigm thu hé théng @) Thy hién thir nghiém va nghiém thu hé théng treée khi ban giao va dua vio sir dung; b) Cé ndi dung, ké hoach, quy trinh thir nghiém va nghiém thu hé théng; 6) CO bd phn o6 trach nhiém thy hién thé: nghiém va nghiém thu hé théng; 6) C6 don vj ddc ‘Sp (bén th ba) hodc b6 phéin doc lap thude don vj thyc hign tur vn va gidém sét qué trinh thay nghigm va nghipm thu he théng; ©) Cé bao c&o nghiém thu éuge xéc nhgn cla bd phan chuyén tréch va phé duyét ola chi quan hé théng thdng tin truée khi dura vao si dung. 8.46 Quin If van hanh hg théng 8.1.6.1 Quan Iy an toan mang Chinh sch, quy trinh quan ly an toan mang bao gbm: @) Quan ly, vén hanh hoat dong binh thydng cia hé théng; b) Cp nhat, sao Iuu dy phdng va khdi phyc hé théng sau khl xdy ra sy od; ¢) Truy cap va quan ly cu hinh hé théng; ¢) Cu hinh t6i wu, tng curéng bdo mat cho thiét bl h8 théng (c(ng héa) truée khi dua vao van hanh, Khai thac, 8.1.8.2 Quan ly an ton may chd va dng dyng Chinh séch, quy trinh quan iy an toan may chi va tng dung bao gdm: 8) Quén Wj, vin hanh host édng binh thudg oda hé théng my chi va dich vur b) Truy cap mang cia may chi; ) Truy 4p va quan tr] may chi va cong dying; d) Cp nhat, sao tu dy phéng va khdi phyc sau khi xdy ra sy cb; 4) Cal dat, g& bd hé didu hanh, dich vy, phn mém trén hé théng may chi va ting dung; €) Két n6i va g& bo hé théng may chil va dich vy khdi hé théng; g) Céu hinh t6i wu va tang cvdng bao mat (cng héa) cho hé théng may chi truéc khi dua vao van ham, khal thé, 8.1.6.3 Quan I an toan di Ibu Chinh séch, quy trinh quan ty an toan 40 ligu bao gdm: a) Yéu cu an toan a61 véi phirong php ma héa; 40TCVN 11930:2017 b) Phén logi, quan ly va air dung khéa bf mét va def lltu ma hoa; ¢) Co ché m& héa va kiém tra tink nguyén ven cia dé liu; 4) Trao d8i df figu qua mél irrémg mang va phuong tign lw trib; 6) Sao lvu dy phong va khoi_ phyc dG ligu (tn sudt sao Izu dy phéng, phuong tign vu tra, thoi glan (wu tro; noi lwu tro, phyong thirc uu trér va phuong thirc ly dO ligu ra khdi phuong tién luu tri, ) Cp nhat déng b6 thang tin, di fiéu gitra hé théng sao hru dy phdng chinh va hé théng phy; 9) Binh ky hod khl cé thay a8 cu hinh trén hé théng thy hién quy trinh sao liu du phéng: tap tin cd hinh hg théng, ban dy phong hé didu hanh méy chi, co 6& do ligu; di liu, théng tin nghigp vu va cde thOng tin, do leu quan trong khdc trén hé théng (néu 4). 8.1.5.4 Quan ly an toan thiét bj ddu cud) Chinh sch, quy trinh quan ly thiét bj du cud! bao gdm: a) Quan ly, van hanh hoat dng binh thutng cho thiét bl dau cudl; b) Két néi, truy cap va sd dung thiét bj dau cudi tir xa; c) Cal dat, két nd} va g& bé thiét bj du cudl trong he théng; d) Cdu hinh t6] wu va ting cudng bdo mét (eteng héa) cho méy tinh ngudi sik dyng va thyc hin quy tinh trrdc khi diva he théng vao sit dung; ¢) Kiém tra, dénh gid, xir fy diém ydu an toan théng tin cho thiét bi du cuéi truvrc khi dura vao str dung. 8.1.8.6 Quan ly phong chéng phin mbm abc hel Chinh séch, quy trinh quan ly phn mbm dc hal bao gm: 8) Cal G8t, cp nhat, st dyng phan mam phéng chéng m4 déc; dd quét, kiém tra phn mém doc hai trén méy tinh, may ché va thiét bj di dong; b) Cal dit, et dung phan mém tr8n may tinh, thidt bj di dong va vide truy cp cdc trang théng tin trén mang; ¢) Giki nh@n tap tin qua méi trrdng mang va cdc phuvong tin uu tro di dong; ) Binh ky thy hign kidm tra va dd quét phan mam dé hei trén toan 6 ng théng; Thyc hi¢n kiém tra va xi ty phn mam déc hai khi phat hién ddu higu ho&c canh béo vé d4u higu phan mém ddc hal xudt hign trn hé théng. 8.1.5.6 Quan Ij glém sat an toan hd théng thang tin Chinh sach, quy trinh quan ly glam sat an toan hé théng thong tin bao gdm: a) Quan ly, van hanh hoat 6$ng binh thudng cia hd théng glam sét; 41TCVN 11930:2017 b) B6i turgng glém sét bao gdm: thiét bi hé thSng, may chi, fig dyng, dich vy va cdc thanh phan khéc trong hé théng (néu cb): c) Két ndi va giti nhat ky hé théng tle 441 tugng gidm eat vd hé théng giam sat; 4) Truy cap va quan tri hé théng giam at; 4) Loal thong tin can durge giém sat; ¢) Luu tri? va béo ve théng fin gidm sat (nha ky he théng); g) Dong bs tho! glan gia he théng giam sét va thiét bj dugc giam sét; bh) Theo di, glam sét va canh bao sy ob phat hign durge trén hg thng thdng tin; i) B6 trf ngudn Ie va 18 chtre glam sdt an toan ha théng théng tin 24/7, 8.1.8.7 Quan ly diém yéu an toan théng tin Chinh sdch, quy trinh quan ly diém yéu an toan théng tin bao gdm: a) Quén ly théng fin cdc thanh phan od trong hé théng ¢6 khd nang tdn tai diém yéu an toan thong tin: thidt b| h@ théng, h@ didu hanh, may chi, tng dyng, dich vy va céc thanh phan khac (néu 06); b) Quan ly, cap nhat ngudn cung cdp diém yéu an toan théng tin; phan nhém va mire 40 cla diém yéu cho oc thénh phan trong hé théng &8 xe dinh; ©) Co ché phéi hep vei cde nhém chuyén gia, bén cung c4p dich vy hd tre trong viec xi ly, khdc phy Giém yéu an toan thing tin; ¢) Kidm tra, dénh gid va xi iy alm yu an toan théng tin cho thigt bl hé théng, may chil, dich vy truéc khi dura vao si dung: ©) Binh ky kim tra, dénh gid aim yéu an toan théng tin cho toan bd hé théng thong tin; Thyc hién quy trinh kiém tra, danh gid, xi ty diém yéu an‘toan théng tin khi cd théing tin hod nhan dugc cdnh béo vd iém yéu an toan thng tin 44i voi thanh phan cy thé trong hé théng. 8.1.6.8 Quan ly sy cé an toan théng tin Chinn séch, quy trinh quain ly sy can toan théng tin bao gdm: a) Ph&n nhém sy od an toan théng tin mang; b) Phuong én tidp nhén, phét hién, phan loal va xir iy ban dau sy 6 an toan théng tin mang; ©) Ké hoach Gng pho sy cé an toan théng tin. meng; d) Gidm sat, phat hign va cAnh béo sy ¢é an toan thong tin; ) Quy trinh Gng ciu sy 06 an toan théng tin mang théng thuéng; €) Quy trinh ing cou sy 06 an toan thong tin meng nghiém trong; 42TCVN 11930:2017 9) Co ché phdi hop voi co quan chitc nang, cde nhém chuyén gia, b&n cung cép dich vy hé try trong vige xir ly, khde phyc sy c& an toan théng tin; h) Dinh ky t8 chirc din t8p phurong An xir ty sy cf an toan thong tin, 8.1.6.9 Quan ly an toan ngui sir dung dau cudi Chinh séch, quy trinh quan ly an toan ngudl sir dung ddu cud bao gdm: 8) Quan ly truy op, si dyng tal nguyén nol bo; b) Quan fy truy cap meng va tal nguyén trén Internet; ©) Cal Gat va stv dung may tinh an toan. 8.2 Yéucdu kg thuat 8.24 Bio dam an toan mang 8.2.4.1 Thidt ké hé théng a) Thidt ké céc ving mang trong hé thing theo chirc ning, c&c ving mang thi thiéu bao gdm: ~ Ving meng ndi bd; = Ving mang bién; = Ving DMZ; ~ Ving may chil ngi bd; - Ving mang khong day (nu 06) téch riéng, déc lap voi cde ving mang khac; - Ving mang méy chi co 8& dé libu; ~ Ving quan tri; ~ Vang quan tri thiét bi hé théng. b) Phuong én thiét ké bao dam cdc yéu cau sau: ~ CO phuong an quan ly truy cp, quan tri hé théng tir xa an toan; = C6 phuong én quain ly truy cp gia c&c ving mang va phdng chéng xém nh&p; - C6 phuong én dy phéng cho c&c thiét bi mang va phuong én can bang tal, dy phéng néng cho thiét bj meng chinh; - Cé phyong én bao dam an toan cho may chd co sé dir ligu; ~ 06 phurong &n chéin loc ph&n mam dc hal trén méi truéng mang; - C6 phurong dn phéng chéng tin odng tir chdi dich vu: = C6 phuong én glam sat h@ théng thong tin tap trung; 4aTCVN 11930:2017 - C6 phureng &n gldm sét an toan hé théng thong tin tap trung; ~C6 phueng &n quan I sao lu dy phang tap trung; ~ C6 phwong an quén ly phn mdm phong chéng ma dec tren cde may chiméy tinh ngudi ding tap trung; ~ C6 phurong én phéng, chéng that thoat dé lidu; + Cé phuang dn duy tr It nhdt 02 két ndi mang Internet tly c&c ISP sir dung ha tang két ndi trong nude khae nhau (néu hé théng bude pha cé két néi mang Internet) ; - C6 phuong én bao 6m an toan cho mang khéng day (néu c6); - C6 phuong dn quan ly tal khodn dc quydn. 8.2.4.2 Kibm soat truy cp ti bén ngoal mang @) Thiét lap hé théng cht cho phép sir dung cc két n6l mang an toan khi truy cap théng fin ndi bd hoac quan tri hé théng tir c&c mang bén ngoai va mang Intemet; b) Kidm soat truy cép tir bén ngoal vao hé théng theo timg djch vu, tng dung cy thd; chin tdt od truy Ap 161 cc djch vy, Gng dyng ma hé théng khtng cung c&p hodic khong cho phép truy cap tir bén goal; ¢) Thidt lap gidi han thdl gian chd (timeout) 6é déng phign két néi khi hé théng khéng nhan duge yéu cau tly ngudt ding; d) Phan quyén va c&p quydn truy cp tir bén ngoai vao hé théng theo ting ngudi ding hode nhom ngurdi diing c&n et theo yéu cau nghiép vy, yau cdu quan ly; 6) Gi6i han 86 Iugng k&t néi ddng thai tir mét dia ch ngudn va ting 96 treng két ndi ddng thdi cho timg tng dyng, dich vy durge hg théng cung c4p theo néing luc thyc 16 clia hé théng. 8.2.1.3 Kiém soat truy c§p tir bén trong mang 4) Chi cho phép truy ofp cdc tng dung, dich vy ban ngoai theo yéu clu nghiép vu, chin céc dich vy kh&e khong phyc vy hoat dng nghiép vy theo chinh sdch cia té chic; b) Cé phuong an kidm soat truy o&p olla ngudl ding vao cde dich vy, cde may chi ngi bo theo chars dng va chinh sdch cda #8 chic; ©) Khéng cho phép hoac gléi han truy cép (theo chire nang clia may chi) tir cde may chil ra céc meng bén ngoai hé théng; 4) Cé phurong An quan Iy céc thiét bj Au cuéi, méy tinh ngudi ding két ndi vao hé théng mang (theo dja chi vat ty, dja chI logic), chi cho phép thiét bj ddu cudi, may tinh ngwdi si dung hop 1é két néi vao hé théng.TCVN 11930:2017 8.2.4.4 Nhgt ky he théng 8) Thiét lap chive nang ghi, lu tO nh@t ky hé théng tran céc thiét bj ha théng (néu hd tro), bao gm cdc théng tin sau: = Thdi gian két ni; ~ Thong tin két ndi mang (dja chi IP, Sng két nd); ~ Hanh d6ng 461 vor k&t ndl (cho phép, ngn chan); = Théng tin céc thidt bf dau cud! két ndi vdo hg théng theo dja chl vat ly va logic; = Théng tin cénh bao tty ede thidt bf; = Théng tin higur ning hoat déng clia thiét bj va tai nguyén mang. 6) Si dung may chi thai glan trong hé théng 48 ddng bp thot gian gidra céc thiét bj mang, thiét b| ddu cudl va cdc thanh phan khdc trong hé théng tham gia hoat ééng glam sat; ¢) Luu tr’ va quan ly tap trung nhat ky hé théng thu thap duge tir cdc thidt bj hd théng; 4) Gil han tal nguyén cho chire ning ghi nht kj trén thiét bi, 48 bao Gam chirs nang nay khong lam anh hudng, glan doan hoat dong cba thiét bl; 6) Luu tro dy phdng d® flgu nhat ky hé théng trén hé théng liu tro riéng biét, ob ma héa véi ning dé ligu nhét ky quan trong (néu 5); e) Luu tro’ nhat ky hé théng cia thiét bj t6i thidu 06 thang. 8.2.1.5 Phong chéng xam nhap 8) Cé phvong én phong chéng xm nh@p 8 bao vé cdc ving mang trong hé théng; b) Binh ky cp nhat co sé dé ligu du higu phdt hign thn cong mang (signatures); ©) Bao dm néing lye hé théng dap tng dU theo yau cau, quy mé sé lugng ngual ding va dich vy, (ng dung cia hé théng cung cép; d) Hé théng 3 phy-eng dn can bang tdi va dy phéng néng. 8.2.1.6 Phong chéng phan mém doc hal tron mol trudng mang 8) C6 phuong én phong chéng phan mm doc hai trén mol trvgng meng; 'b) Dinh ky cap nhat do liu cho hé théng phdng chéng phan mam 4c hal; ©) Bao dam ning Ive hé théng dap tng dd theo yeu cau, quy mo s6 lugng ngudi ding va dich vy, ng dung cia hé théng cung ofp; 4) Hé théng 63 phurong dn can bang tdi va dy phong néng. 45TCVN 11930:2017 8.2.1.7 Bao vé thiét bj hé théng a) Cu hinh chive nang xic thyc trén cdc thiét bj hé théng 48 xac thyc ngudl ding khi quan tr] thiét b} tnyc tlép hodc tir xa; b) Thiét lap edu hinh chi cho phép st dyng céc két n6i mang an toan Khi truy cp, quéin tri thidt bi tir xa; ¢) Khong cho phép quan tri, c4u hinh thiét b] trye tiép tir c&c mang bén ngodil, trudng hop bat bude phai quan tr] thidt bj tir xa phal thyc hién gidn tiép thong qua c4c may quan tr] trong hé thdng va si dung két ndi mang an toan; ) Han ché dug sé ln dang nh&p sal khl quan tr} ho&c két nd quan tr] tir xa theo dla chi mang; 4) Ph&n quyén tray c&p, quén tri thiét bj 661 vé4 cdc tal khodn quan tri cé quydn han khdc nhau; 8) Nang c&p, xit by ciém yéu an toan théng tin cila thiét bj hé théng truée khI dura vio sir dyng; 9) Cu hinh 16% wu, tang curdng bdo mat cho hé théng thidt b] hg théng truve khi diva vao sib dung; h) X6a bé théng tin cdu hinh, dé figu trén thiét bj hé thdng khi thay 48i myc dich sir dung hoge ge bd khdt hé théng. 8.2.2 Bao dam an toan may cha 8.2.2.1 Xac thy ) Thiét 1gp chinh sch xac thyc trén may chil 48 xéc the ngudl ding khi truy c&p, quan ty va si dung may chi; b) Thay dl cc tal khodn mac dinh trén hé théng hodc v6 higu héa (néu khéng si ding); ¢) Thiét 4p cdu hinh may chi 48 dm bdo an tean mat khdu ngudi stv dyng, bao gdm cc yéu cau sau: ~ Yéu cu thay di mat khdu mac dinh; ~ Thiét lap quy tde dat mat khdu vb 86 ky te, loai ky tu; ~ Thiét lap thoi gian yéu cau thay adi mat khdu; + Thiét igp thoi gian mat khdu hop Ié. 4) Han ché s& ln dng nhgp sal trong khoding thd glan nhét dinh v6i mot tai khodn nhat dinh; 6) Thiét lp cu hinh dé v6 higu héa tai khogn néu tai khodn 6 dang nhép sal nhidu lan vugt sé Bn Quy dinh; €) Thiét lp hd théng a8 chi cho phép dang nhgp vao hé théng vao khodng thei gian hep 18 {theo quy @inh cia t chic); 9) Si dung co ché xdc thyre da nhan 16 62 xéc thye ngut sir dung khi truy c&p, quan tri vao c&c may chd quan trong trong hé théng. 46TCVN 11930:2017 8.2.2.2 Kiém sodt truy cép a) Thiét lap hé théng chi cho phép si dung cic kAt n6i mang an toan khi truy c&p, quan tr] may chit xa; b) Thiét lap gibi han thoi gian che (timeout) 48 déng phién két nd khi méy chd khéng nhan duge yéu cu tiy ngudi ding; ¢) Thay 441 céng quan tri mac dinh cila may cha; d) Khéng cho phép quan tri, cdu hinh may chi tryc tiép tir cdc mang bén ngoaii, truéng hop bat bude phat quan tej thidt bj tor xa pha thye hign gldn tiép théng qua céc may quan trl trong hé théng va sir dyng két néi mang an toan; 4) Phan quy8n truy cap, quan tri, str dyng tai nguyén khde nhau trén may chd v6i ngudi sir dyng/ hom nguel si dung o6 chic nang, yéu clu nghip vu khéc nhau; €} Cap quybn 16 thidu (quydn truy c&p, quan te) cho tal khodn quén tri may chi theo quyén hen. 8.2.2.3 Nhét ky hg théng a) Ghi nh@t ky hg théng bao gdm nhGng thong tin oo ban sau: + Théng tin két n6l mang tét méy chi (Firewall log); = Théng tin ding nh§p vdo méy ché; ~ LBi phat sinh trong qué trinh hoat dong; ~ Thong tin thay 81 edu hinh may chd; ~ Théng tin truy c&p OF ligu va dich vy quan trong trén may chi (néu 06). ¢) GI6i han 40 dung lvgng Ivy try nhat ky hé théng 48 khong mat hod tran nhat ky ha théng; ¢) Quan ly va ku tro t@p trung nhgt ky he théng thu thep duge t may chi; 6) Luu nhét ky hé théng trong khoding thdi gian 164i thidu 1a 06 théng; e) Luu tro dy phéng dO ligu nhét ky hé théng trén hé thdng lwu tre riéng biét, cb m& héa voi nhOng dir fiéu nhat ky quan trong (néu c6), 8.2.2.4 Phong chéng x4m nhép 8) Logi bé céc tai khodin khdng sir dung, cdc ti khodn khing cin hep Ig trén may chi; b) Sir dyng tong liva cia hé didu hanh va hé théng dé cém cac truy cép trai phép tél may chi; ©) VO higu héa cfc giao thire meng khong an toan, cdc dich vy he théng khéng sir dung; d) Cé phrong &n cap nhat ban va, xi? ty diém yéu an toan théng tin cho hé didu hanh va céc dich vy hé théng trén méy chi; ©) Thyc hign nang cdp, x ty dim yéu an toan théng tin tran may chd truéc khi dura vao sik dung: 47TCVN 11930:2017 ) Cb bign phap quan ly tp trung vigc cp nhét va xi ty ban vd, dim yéu an toan théng tin cho hé didu hanh va céc dich vy hé théng trén may cha; g) Thy hién cdu hinh ¢6i wu, t&ng crdng béo mat cho may chil truréc khi dura vao sir dung. 8.2.2.6 Phong chéng phan mém déc hal a) Cai dat phn m&m phdng chéng ma doc (hodc ob phuong én khdc tong dong) va thidt lap ché 4 ty d4ng cap nhat co s& dO ligu cho phan mam; b) C6 phurong én kiém tra, dd quét, xt 7 phan mam dc hel cho céc phan mam trrérc khi cAi Gat; ¢) Quan ly tap trung (cap nhét, cdnh bao va quan If) céc phan mam phing chéng mé doc cal dat trén may chii va cdc méy tinh nguei sir dung trong hé théng; 4) C6 co ch& kiém tra, xi Nj ma dc cla cc phuong tign luru tro di dng true kht két ndl vél may cha. 8.2.2.6 Xin ly may cha khi chuyén giao a) Cé bign phép chuydn dyng a8 x6a sgch théng tin, do ligu tran may chd kh! chuyén giao hoge thay G81 myc dich sty dyng; b) Sao Iuu dy phdng thing tin, dé fiéu trén may chi, ban dy phdng hé didu hanh may chi true kht thuc hién x6a dG ligu, hé didu hanh; ©) C6 bign php kim tra, bo dm 40 liu Khong thé knOl phuc sau khi xoa, 8.2.3. Bao dim an toan ing dung 8.2.3.1 Xéc thye a) Thiét 4p cdu hinh tng dung dé xéc thye ngudi si dyng khi truy cp, quan tri, cAu hinh tng dyng; b) Luru tri’ cé mai héa thing tin xde thyc hé théng; ©) Thiét lap c&u hinh Ging dung dé 4m bdo an toan mat khdu ngudi sé dung, bao gém cdc yéu cau seu: ~ Yéu clu thay 44 mat khdu mac jah; ~ Thiét Ip quy tic a&t mét khdu v8 $6 ky ty, loal ky ti; ~ Thidét {Qp thdi gian yéu edu thay dd) mat khdu; + Thiét ip thoi gian mat khdu hop 1d; ¢) Han ché s6 tdn ding nhap sal trong khoang théi glan nhét dinh véi tai khoan nhét éjnh; 6) Ma héa théng tin xéc thy true khi gisl qua méi truéng meng; @) Thiét 4p cdu hinh eng dung 68 ngan c&n vide dang nhép tir Gong d6i vei cdc tng dung, dich vu cung cdp va xiF ly dtr ligu quan trong trong hé théng; 9) Vé higu héa tal khodn néu dang nhép sai nhiéu fan vugt 36 lan quy dinh. 48TCVN 11930:2017 8.2.3.2 Kidm soat truy cp a) Thiét tap hé théng chi cho phép si dung cac két ndi mang an toan kh truy cp, quan tr] eng dung ty xa; b) Thiét lap gi6i hen thdi gian ché (timeout) 48 déng phién két nél khi ding dung khong nhan dupe yeu cau ty ngudi dung; ¢) Gi6i han dja cht mang quan ti duge phép truy cp, quan tri dng dung tir x9; d) Phan quyén truy cap, quan tri, siv dung tai nguyén khac nhau cia dng dung wi ngudi str dyng/ nhom ngwél sir dung o6 chiro nang, yu edu nghiép vy khdéc nhau; 6) Gidi han 36 ivong cde két néi ddng thoi (két ndi khdi tao va G4 thidt Ip) d6i vol c&c Gng dung, dich ‘vy may chi cung cép; e) Cp quyn t61 thidu (quyén truy cap, quan tr) cho tal khon quan tr| Gng dung theo quyn han; 9) Thidt fp quyAn t6i thidu (chi cdp quyan truy cp oo sév di liéu) cho taf khoan kat ndi co s¥ dé ligu, 8.2.8.3 Nhét ky hg théng 8) Ghi nhat ky hé théng bao gdm nhiing théng tin co ban sau: ~ Thong tin truy cp Geng dung; = Théng tin dng nhgp khi quan tr] Ung dung; = Théng tin cdc 18! phat sinh trong qué trinh host dong; = Thdng tin thay 481 cdu hinh tng dung. b) Quan fy va iuu tri nht ky hé théng trén hé théag quan ly tap trung: ) Nhat ky hé thong phai due luu trl trong khoang thai gian t6i thiéu la 08 thang: ¢) Luu tri dy phong dir ligu nhat by hé théng trén hé théng luru tri riéng biét, co ma héa voi nhieng dd figu nhat ky quan treng (néu ¢6). 8.2.3.4 Bao mgt thong tin Ildn lac. a) M& héa théng tin, d& ligu (khong phai I& thong tin, dO il@u cdng khal) truéc khi truydn dua, trao abi qua mél tring mang; sir dyng phuong &n ma héa theo quy dinh va bao vé bi mat nha nue déi vei thong tin mat; b) Str dung két ndi mang an toan, bao dam an toan trong qua trinh khéi tao két néi kénh truyén va trao i thong tin qua kénh truyén; ©) Sir dung két hop cdc két néi mang an toan hogc bién phép mA hda dé bao d&m di ligu quan trong dug m& hée 02 jan khi truyén qua méi trong mang; d) S& dung kénh vat ly riéng Khi truy8n diva, trao di qua mol truéng mang déi voi di ligu quan trong. 49