Ukuchaza iManyano yeNkcubeko yeSebe leLizwe

Amasebe esizwe asebenza njengesiseko somsebenzi ekuzalisekiseni iinkqubo ze-intanethi ebanzi. Ukugunyaziswa kwawo kudlulela ngaphaya kokuthobela; ajongene nokuguqulela kwimiyalelo yemigangatho ephezulu kunye nemigaqo-siseko yolawulo kwiinkqubo zokhuseleko ezisebenzayo, umgangatho womhlaba. Kwixesha apho uhlaselo lwe-enters zogcino-lwazi, kunye nokunikezela ngoxinzeleleko lweziko lorhulumente olujoliswe kulo ngobuninzi obuphezulu, indima yalo yesebe iye yasuka ekusebenziseni kwengxaki eqhubekayo ekulawuleni kwemingcipheko. Umzekelo, iSwee, iSweareal Arential Squareal neTechnoloji (N) I-CYbersecurefity Isebenzi yomsebenzi wezomthetho inikela isiseko esisisiseko sokulawula okuthiwamninzi, kodwa yi-drenterventi ye-odvity, kunye nemeko yelizwe elingumba-ogxasongelo.

Ukhuseleko lwezokhuseleko olusebenzayo luqala ngokuphuhliswa kwenkqubo ecacileyo. Amasebe karhulumente asoloko ekhokela imigudu yokulungisa nokuhlaziya, ebandakanya igalelo elivela kumthetho, kulawulo longxamiseko, kunye nolwahlulo lwe-IT. Le nkqubo kufuneka ihambelane nokhokelo lorhulumente olusuka kumaqumrhu afana nokhuseleko logcino-lwazi loluntu olufana nolu- kunye noHlaziyo lweNguquko loKhuselo lokhuseleko lwezenzo (CISCA)[FLT] [FLT]] ngelixa ihlala ithambe ngokwaneleyo ukucotha iingozi ezifana nokhuseleko lonyuselo, ukhuseleko logcino-lwazi lukawonke-wonke, okanye ugcino-mali olubalulekileyo. Inkqubo yokuhamba iquka imijikelo yobomi esoloko, i-partiservey, kunye nolwano lolwakhiwo lweziko lweziko-mthetho lokulungisa ukuqinisekisa uncedo nxamnye nolwano oluvelayo.

Iimbopheleleko zemisebenzi

Ukuvelisa Nokuhlaziya Imilinganiselo Yokuziphatha

Inkqubela-phambili yenkqubo yeCIS iyindlela eqhubekekayo. Amasebe karhulumente kufuneka ahlole umngcipheko wekhompyutha wangoku, iziphumo zesakhelo esichasene noontanga, kwaye adibanise imisebenzi elungileyo evela kumsebenzi we- weSininzi sogcino-lwazi kunye neCIS Controls. Avelisa amaxwebhu agquma ulawulo lonikezelo, ulwahlulo logcino-lwazi, isiganeko, kunye nolawulo lwesithathu lomngcipheko. Inkqubo nganye mayibhalwe ngokucacileyo, ulwimi olunyanzelekileyo kwaye iquke ii-tricle yokuthobela. uhlaziyo rhoqo "ngokufuthi okanye emva kweziganeko ezinkulu.]

Ukuzalisekisa imithetho yokuziphatha yokhuseleko ngaphaya kwemibutho yorhulumente

Ulawulo olusezantsi kumaziko amaninzi karhulumente, ngalinye elinemeko yalo ekwi II, ngumsebenzi omkhulu. Amasebe karhulumente athumela izisombululo ezisembindini ezifana nokufumana indawo ekuyo kunye nokuphendula (EDR), uqinisekiso lwezininzi (MFA), kunye nokukhusela amasango e-imeyili. Zikwamisela nemigangatho encinane yokhuseleko ekufuneka ukuba onke amasebe ahlangane nayo, ngokufuthi esebenzisa indlela elandelelanayo esekelwe kulwazi. Ukugqibelela kubandakanya ukuqokelela, ukudibanisa izivumelwano zomxhasi womxhasi wezoshishino (EDR), kunye nokunikezela ngenkxaso yobugcisa kwimibutho ye-IT. Iinqanawa eziphumeleleyo zifuna ulawulo oluqinileyo kunye nonxibelelwano oluhle ekunciphiseni ukuphazamisa ungqubano.

Ukuhlolwa okuqhubekayo kweemeko ezingekho mthethweni kunye nezisongelo

Amaziko okhuseleko omgangatho wemeko (OEM) okanye amaziko adibanisa ugcino-lwazi olusuka kulwazelelelo lwenethwekhi, ukusondla ukulumka, kunye nokugada koluntu. Ukuhlola okuqhubekayo kuvumela amasebe ukuba afumane umsebenzi owenziwe ngethuba elingaphambili. Asebenzisa izixhobo ezifana nokhuseleko Lolwazi kunye noLawulo lwezihlo (SIEM) kunye nokwenza uvavanyo oluthe rhoqo lokungalawuleki. Ukulungisa ukuchanabeka okubalulekileyo kuyimfuneko, ingakumbi kwiinkqubo ezililifa lemfuno ezixhasa iinkonzo eziyimfuneko ezinjengokuqokelela irhafu, ukuqokelelwa kwerhafunxa, okanye iingenelo zempilo. Abaninzi bathi banenxaxheba kuvavanyo [[[FLT:] lweSigrati-Sti-Stialtial Information Information kunye noHenterces (ISC)[FLT] ukwamkela ugrosongelo lokwenene kunye nenkxaso.

Uqeqesho lokusebenza kwe-CPF neenkqubo zoXhosa

Impazamo yomntu ingunobangela ophambili wokwaphuka. Ukuyila nokunika uqeqesho olunyanzelekileyo lokuqonda ikhompyutha kubo bonke abasebenzi, kwizindlu nakumagunya anyuliweyo. Uqeqesho lugquma iphishi, ucoceko lwegama eligqithisiweyo, iinkqubo zokuphatha ugcino-lwazi, kunye nokuxela umsebenzi okrokrelekayo. Iinkqubo eziqhubela phambili ziquka ukuqhatha kwamaqela kunye neemodyuli ezisebenza ngokungqinelana. Amasebe avelisa nezinto ezinceda abemi ukuba baqaphele ukuqhatha iinkonzo zikarhulumente, njengokuqhatha irhafu okanye ukurhoxisa irhafu.

Ukusabela okukhawulezileyo kunye nolawulo lokuchacha

Xa ulwaphuko lusenzeka, amasebe karhulumente asebenzisa izicwangciso zokuphendula ezimiselwe kwangaphambili. Ayadibanisa ukuqulatha, ukuphelisa, kunye nemigudu yokulungisa amasebe achaphazelekayo. Oku kuquka ukugcina ubungqina bomthetho wokunyanzelisa abantu abachaphazelekayo, ukuchaza abantu, kunye nokufaka ngaphandle kweefemu ze-ontensic xa zifuneka. Ifekta-mjingngs-zikhokelele kwimigaqo ehlaziyiweyo kunye nolawulo oluphuculiweyo. Isebe likwalawula ulwalamano kunye nabathwali-inshorensi be-inshorensi kwaye lingalawula unxibelelwano olusemgangathweni ukuze kulondolozwe uluntu. Ukulungiswa kwemiqathango engaphakathi, ukudityanisela i-obhulo, kunye nokusebenza ulawulo oluphuculayo ukuze kuthintelwe ukuphinda-phinde kwenzeke.

Imisebenzi yesakhelo edityanisiweyo kunye nolwahlulo lolwazi

Imikhosi Yomsebenzi Neebhunga Zokungenelela

Ukungakhuselwa okusebenzayo kwikhompyutha akunakuzenzekela ngokwako. Amatyala amaninzi amisela imisebenzi okanye amabhunga aquka abameli abasuka kwi-IT, ukunyanzeliswa komthetho, ulawulo longxamiseko, kunye namacandelo achuliweyo eenkonzo. La maqela adibana rhoqo ukuze axubushe ubukrelekrele bobugxwayiba, ukuququzelela iziganeko, kunye nokucwangcisa izinto eziphambili zotyalo-mali. Umzekelo, i- isiQumrhu soMyalelo saseMichigan-Cyber sisebenza ngaphaya kwamaziko ukulungiselela ukumanyana kokhuseleko okumanyana okumanyeneyo. Amaqumrhu anjalo asebenzisana noorhulumente basekuhlaleni, imimandla yesikolo, kunye nezingeni ezinokungabikho abasebenzi abazinikele kwi-bylightseast.

Umanyano

Iinkampani zamacandelo angawabantu zisoloko zinolwazi oluphambili lokufumana uluvo loluvo kunye nobuchule bokuphendula. Amasebe karhulumente alungelelanise unxulumano olusemthethweni ngezivumelwano zolwazi, ukuqheliselana, kunye neebhodi zolawulo. Ezi zivumelwano zinceda amagunya ahlala ehleli kubugcisa bohlaselo olufana nonyango, izimali, namandla. Ngokubuyayo, amaqabane azimeleyo ayangenelwa kwizilumkiso zangaphambili kunye namaqhinga okuzikhusela. Amanye amaqela eenkqubo eziphumo zekhompyutha aquka amatshanti azimeleyo phantsi kweambrela ye- inkqubo ye-Infragadruvers okanye imibutho engancedi nto.

Umanyano lomanyano kunye neeNkqubo zokuNika

Isebe lesizwe elilungelelaniswe rhoqo namasebe karhulumente kuquka i-CISA, iFBI, kunye neSebe loKhuseleko lwasekhaya. Inkxaso, njengaleyo ivela kwi- iStatent kunye neNkqutyana ye-Cybersecurity Grant Program (SLGP)[[FLG1]], ibonelela ngenkxaso-mali yabasebenzi, izixhobo, kunye nemisebenzi. Le nkxaso i-ofisi kufuneka inike ingxelo yeemfuno kwaye ithathe inxaxheba kwimithambo edityanisiweyo efana Isichotho seCYUTYUM okanye [FLT:]]. [[FLT]]

Ukucombulula Iingxaki Eziqhubekayo

Uqingqo - mali Olulinganiselweyo Neengxaki Zeendlela Zokusetyenziswa Kwezibonelelo

Phezu kwako nje ukugxekwa kokhuseleko lweziko lekhompyutha, amasebe amaninzi karhulumente asebenza ngoqingqo-mali olunyanzelekileyo olungqubana nezinye izinto eziza kuqala njengemfundo, ezothutho, kunye nezonyango. Urhulumente oqhelekileyo uchitha imali engaphantsi kwesihlanu ekhulwini soqingqo-mali lwawo ekukhuselekeni kwe-IC. Amasebe kufuneka enze uthengiso olunzima: ukuqokelela izixhobo eziyimfuneko, ukuqesha abasebenzi abanobuchule, okanye ukuqesha intlawulo lwemali. Ukunyusa iinkonzo ezisikelweyo, izixhobo ezivulekileyo, kunye nentlawulo lorhulumente. Ukwenyuswa kohla kohla kohlahlo kusoloko kufuna uphando olunyanzelekileyo kunye nentengo yeziphumo zemali.

Ukungakwazi nokuzibekela imilinganiselo

Isithuba somsebenzi wekhompyutha esichaphazela onke amacandelo, kodwa oorhulumente bamazwe bajongene nemiqobo eyongezelelekileyo. Iihampe zokuthengisa, iinkqubo zokuqesha ezicothayo, namathuba okuhambela phambili alinganiselweyo enza kube nzima ukukhuphisana necandelo labucala. ISebe liphikisa oku ngokunikela intelekelelo, ukuqeqesha iziqinisekiso, kunye namalungiselelo omsebenzi aguqukayo. Kwakhona bafaka imali ekwakheni imibhobho yombane ethalebhusayithi ngomanyano kunye nonxulumano kunye neekholeji zoluntu. Ukuqeqesha i-IT esisiseko kunceda ukudambisa uxinzelelo oluthile, kodwa iindima ezikhethekileyo ezifana nezizingeli zihlala kunzima ukuzalisa.

Iinkqubo zokufa namatyala obugcisa

Amasebe amaninzi karhulumente axhomekeke kwiinkqubo ezindala ekunzima ukuzikhusela. Iinkqubo ezingundoqo, iinkqubo zokusebenza eziphelelwe lixesha, kunye nezicelo zesithethe zisenokungabi nazo iimpawu zokhuseleko okanye inkxaso yorhwebo. Amasebe elizwe kufuneka alungelelanise umngcipheko wokuqhubeka kusetyenziswa nxamnye nexabiso lokuzinziswa kwale mihla. Asebenzisa ulawulo olunento enzima njengolwahlulo lothungelwano, ulawulo olungqongqo, kunye nokuhlola okungakumbi ukwenzela iinkqubo ezilifa. Ukufuduka kwabantu ukuya kwiinkonzo zamafu kunye namaqonga angoku kuyindlela ende yexesha elide, kodwa kufuneka ucwangciso olulunonophelo lokuphepha iinkonzo.

Ukunyanzelisa inkqubo engaguqukiyo

Imigaqo-nkqubo yesizwe ngokubanzi isebenza kumaziko amaninzi azimeleyo, ngalinye elinobuchule obuhlukeneyo kunye nozimele zobupolitika. Ukuthobela ngokuzinzileyo kulucelomngeni. Amanye amasebe asenokuchasa ulawulo olusembindini okanye angabi nabo oovimba bokuhlangabezana neemfuno. Amasebe karhulumente asebenzisa intsebenziswano yemiyalelo, izihlomelo, kunye noncedo. Aqhuba uphicotho-zincwadi, anike ukhokelo lobugcisa, kwaye andise imiba enzima kakhulu kukhokelo lwegunyaziso. Kwiimeko ezimbi, asenokungawavumeli amacebo okanye afune ukulungiswa ngemiqathango. Ukwakha impucuko yokhuseleko kuwo onke amasebe kuthatha iminyaka emininzi yokuganana.

Izisongelo Ezicaphukisayo

Abadlali abasoyikisayo bayaqhubeka betshintsha iindlela zabo. Basebenzisa inkqubo ekhawulezayo efana nokuzingela nokuzingela kunye nobugcisa bokukhohlisa. Ngenxa yokuba uqingqo-mali kunye nezibonelelo azikwazi ukugquma zonke izisongelo, amasebe eenqanawa afumana uvavanyo olutsha. Amasebe karhulumente kufuneka ahlale ehleli ngoku ngomrhumo wobuntlola, isalatha-mbombo, kunye nokuqhubeka efunda. Basebenzisa inkqubo yokulungisa kunye nobuchule bokuzikhusela ngokuzingela nokuzingela. Ngenxa yokuba uqingqo-mali kunye nezibonelelo azinazisongelo, amasebe aphucula ukhuseleko olusekelwe kumngcipheko-----oklolonga ezona zinto zibalulekileyo kuqala xa kujongwa utshintsho kwimeko lwendalo.

Iindlela ezicwangcisiweyo zokuzalisekisa

Imisebenzi yolawulo lweziphene

Imisebenzi yesakhelo enjenge-ISC Cybersecurity Framework kunye neZiko loKhuseleko lwe-Internet (CIS) zinika iindlela ezicwangcisiweyo zokulawula umngcipheko wekhompyutha. Amasebe karhulumente asebenzisa ezi zicwangciso ukuchonga, ukukhusela, ukuva, ukuphendula nokufumana kwakhona. Ukwenziwa kwemiqathango kubandakanya ukuqhuba uhlolo lomngcipheko, ukuphuhlisa inkqubela emiselwe kwangaphambili, kunye nokulinganisa inkqubela ngokuchasene neemodeli ezisemgangathweni. Ukusebenzisa isakhiwo esinye kwakhona kunceda unxibelelwano nabaqwalaseli, abasebenzi bemiqathango, kunye nezixhobo zemali eziqonda iintetho ezisemgangathweni.

Ulwakhiwo lweqanda lokuthembana

Uninzi lweemeko luhamba lusiya kuozero iimodeli zokhuseleko, ezithi akukho msebenzisi, sixhobo, okanye uthungelwano oluthembekileyo ngokwemvelo. Amasebe karhulumente ayila ukwakhiwa kobuchule obukwimiqathango emincinane, uqinisekiso oluqhubekayo, kunye nokufumana okuncinane. Ukufinyeza uthelekelelo lufuna utyalo olubalulekileyo kulawulo lolwazi, ukuthobela isiphelo, kunye nokuthotywa kwemiqathango. Noko ke, kunciphisa umngcipheko wokuhamba emva kokulala.

Ukuzihambela nokuququzelela

Ukoyisa izithintelo zezibonelelo, amasebe karhulumente azenzekelayo imisebenzi ephindaphindwayo enjengeyolawulo lwezizibakala, uhlalutyo lwesixhobo sokulinganisa isantya, kunye nesiganeko. Ukhuseleko lomculo, ukusetyenziswa kwezixhobo zokulinganisa, kunye nokuphendula (i-(SOAR) kwenza amaqonga afumane ngokukhawuleza kwaye agcine. Uthutho lomsebenzi ozenzekelayo lungaphelisa ukuvingca ii-IP eziyingozi, iincam ezisulelweyo ezisulelweyo, kunye nabagcini-mathiriyeli bokwazisa ngaphandle kongenelelo lomntu. Isebe likulungela ukuvumela imithetho ezenzekelayo enokuthi iphazamise imisebenzi esemthethweni.

Uhlolo kunye novavanyo oluqhubekayo

Uhlolo lokhuseleko oluthe rhoqo-kuquka uvavanyo lokungena, imithambo-ndlela yetafile, kunye nokuchanabeka kwemiqathango kunye nokulawula. Amasebe karhulumente acwangcisa le misebenzi ngokwemigangatho yomngcipheko kunye neemfuno zolawulo. Ukufumana kufunyaniswe kwimida yokulungisa kwaye kubukelwe bukhokelo. Amazwe amaninzi akwathatha inxaxheba kwi-Cybersecurity Review (NCSR), ubuchule bokwenza ibhethridi ngokuchasene noontanga kwaye achaza iindawo zokuphucula.

Ukwakha Umsebenzi Onobuchule Ngokuqeqesha

Ngaphandle kolwazi olusisiseko, amasebe karhulumente anikela uqeqesho olukhethekileyo lwe-IT kunye nabasebenzi bokhuseleko. Iziqinisekiso ezifana ne-CISP, i-CISP, kunye nokhuseleko lwe- CompTIA+ ziyakhuthazwa, kwaye amanye amasebe anika izinto zokufunda kunye neendleko zovavanyo. Ukuqeqesha ngezandla ngokuthatha iziganeko okanye iziganeko ezifanisiweyo zivelisa ubuchule obusebenzisekayo. Ukuqeqesha phakathi kwamaqela kuqinisekisa ukugutyungelwa kwabasebenzi ngexesha lokujika.

Ukuphumelela nokuphendula

Imisebenzi

Amasebe karhulumente amisela izibonisi ezingundoqo zomsebenzi (KP Is) ukulinganisa ukusebenza kweenkqubo zawo zekhompyutha. IiMetrics ziquka ixesha lokufumana (MTTD), elithetha ixesha lokuphendula (MTTR), ixesha lokuthotywa kwezixhobo, ipesenti yabasebenzi abagqibe uqeqesho, kunye nenani leziganeko. Ezi nkcukacha zixelwa kwiphondo, iikomiti zemithetho, yaye ngamanye amaxesha uluntu. Ukuxela ngokucace gca kwakha ukuthemba nokuxhasa izicelo zohlahlolo. Noko ke, amasebe kufuneka alumke ukupapasha iinkcukacha ezichuliweyo ezinokubonelela izintlungela.

Isalathisi somsebenzi

Uphicotho-zincwadi oluthe rhoqo ngoovimba bakarhulumente okanye iifemu zangaphandle zinika uvavanyo lwenjongo lokuma kwe-khompyutha. Imiphicotho yokuhlola ukuhambelana nemigaqo-nkqubo, imiyalelo, kunye nemigangatho yoshishino. Ukufumana nokufumana kunye namasebe afunekayo ukunikezela iiplani zokulungisa. Iimvavanyo zokungena ngaphaya kunye nemisebenzi ebomvu yeqela elibomvu ityhila ubuthathaka obunokungahoywa. Iziphumo zophicotho-zincwadi zidla ngokushwa kwiingxelo zikawonke wonke ukubonisa ukuphendula.

Umjikelo wenkqubela-phambili oqhubekayo

I-Cybereralisecurity asingomzamo wexesha elinye. Amasebe karhulumente amkela iimodeli zokuphucula eziqhubekayo njengePlan-Do-CCHEL-Act (PDCA). Emva kwesiganeko ngasinye, ukujija kwetafile, okanye uphicotho-zincwadi, amasebe achaza izifundo ezifundiweyo nezihlaziywayo, iinkqubo, kunye nezixhobo ngokunjalo. Aphinda ahlolisise iingozi rhoqo kwaye alungise izinto eziphambili. Abagcini-mathiriyeli bemingxuma enqamlezene namasebe kwaye bafune uncedo oluzinzileyo lokuqinisekisa ukuba inkqubela-phambili iyanceda kwaye iyaxhaswa.

Ulawulo loMthetho nolawulo olunolawulo oluphezulu

Abamisi-mthetho kunye nabalawuli bephondo badlala indima ekunyamekeleni iinkqubo zekhompyutha. Basenokubamba ukuva, ukucela ukushukuma, okanye ukufundiswa kogunyaziso. Amasebe karhulumente anikela ushwankathelo oluchanekileyo, olungelulo ubugcisa lwemeko-bume nenkqubo esongelayo. Inkxaso enamandla yemithetho ingenza ukuba kunikezelwe ijelo lwemali, amagunya asemthethweni ukwenzela ukuthotyelwa kwezehlo, kunye nemiyalelo yokuba iziko lenze.

Isiphelo: Ukuxhasa inkqubela kumhlaba ojikelezayo

Amaziko karhulumente akakwazi kubuyiselwa kumsebenzi wokuzalisekisa iinkqubo ezibanzi ze-inthanethi. Aguqula ukubona kube ngumsebenzi, ukulungelelanisa umngcipheko, indleko, kunye nemfuneko yokusebenza. Imigudu yawo yokusebenza ngokuhambelana nemigaqo-nkqubo nokusebenzisa izikhuselo zokuqeqesha abasebenzi nokuncedisana nabo--ugcina izibonelelo ezichuliweyo, ukukhusela ugcino-lwazi lwabemi, nokugcina uluntu luthembekile kurhulumente. Njengoko izisongelo zekhompyutha ziqhubeka zisebenza kwaye oovimba borhulumente kufuneka baqhubeke benyanzeleka, amasebe kufuneka aqhubeke ehlaziya, esebenzisana, kwaye exhasa ukuxhasa ushishino. Ukhuseleko lwemeko oluneemeko olunenkathalo luxhomekeke kwiinkqubo zolawulo oluneendlebe kunye nokunikezelwa kwamaqumrhulu.