Ukwazisa

Ukwaphuka kogcino-lwazi kumela enye yezona ngxaki zinzima nezisemthethweni kumashishini ase-Ireland namhlanje. Njengoko imibutho enqumla iRiphabliki yase-Ireland ikhawulezisa ukuguqulwa kwamanani ayo ngokukhawulezileyo kwemisebenzi yamafu, amaqonga aphezulu okusebenza, kunye nokudityaniswa komphezulu wohlaselo ngezantsi. Iziphumo zolwaphulo-mthetho zinzima: ukulahlekelwa ngemali ekulungiseni, ukuhlawuliswa kwemali phantsi kwe-mali e-mali e-ninzi yogcino-lwazi lwezokhuseleko lwe-Jibratem-Reg, umonakalo owenziwe ngengozi etsha, umonakalo owenzakalisa ukunyaniseka komthengileyo, kwaye kwezinye iimeko, ukuvaleka kolwazi. Ikhombiso yokhuseleko lokhuseleko loMkhosi wogcino-lwazi lwe-lwazi (DPC) ingqina ukuvuma kwayo okufanelekileyo, nokufumana intlawulo olufanelekileyo lwe-euroscioks. Ukutshona kwemeko-lwazi oluneyeleleneyo, ukusetyenziswa kwendlela elungileyo, ukuphumelela kakhulu kwendlela yokulawula i-irrish.

Ukuqonda Ugcino - lwazi Oluza Kubangela Ukuba Abantu Baphendule

Isicwangciso sokuphendula solwaphuko logcino-lwazi sisesona sisesikweni, sibhalwe phantsi esichaza iinkqubo zombutho zokufumana, ukuhlola, ukuqulatha, nokufumana kwisiganeko sokhuseleko logcino-lwazi. Isicwangciso sabela iindima, imisela imigaqo emiselweyo yonxibelelwano, kwaye simisela ixesha elicacileyo lokuxela ii-gurectorator kunye nabantu abachaphazelekayo. Amashishini ase-Ireland, iplani kufuneka ihambelane nomgaqo wokuphendula we-GDPR, ukuqinisekisa ukuba umgaqo wokuphendula, okufuna ukuququzelela, okufuna ukubonakalisa ukuba bathathe ubuchule kunye nemilinganiselo yequmrhu ukuze balawule iingozi. Isicwangciso sokuphendula okufanelekileyo, ukuphendula okungokwasemthethweni, uthungelwano lwabantu, izibonelelo kunye nokwenza izigqibo eziphetheyo. Iqinisekisa ukuba xa ulwaphulo-mthetho, umbutho ungenza ngendlela elungeleneyo, kunokunciphisa imponzaka.

Isizathu Sokuba Wonke Amashishini AseIreland Amele Athabathe Isinyathelo Ngoku

I-Ireland iye yaba liko leenkampani zobugcisa behlabathi lonke, kodwa ikwalixhoba lee-intelliginenti zekhompyutha. Ukunyanzeliswa komthetho we-DPC nokusetyenziswa kwe-data enqamlezileyo eIreland kuthetha ukuba amashishini angoobungakanani kufuneka akhusele idata ngaphambi kokuba i-. Ngokwesicwangciso se- iDPC yoNyaka [, ugcino-lwazi luye lwaphula ngokuthe ngcembe, ngenani elikhulu elibandakanya ukuhlasela kwe-active, i-fastware, kunye nempazamo ezingaphakathi. Isicwangciso esivuthayo sinceda amashishini angahambisani nje kuphela nemfuneko yokwazisa kodwa aqhubekeko norhwebo kunye nokholo.

Iimfuno ezingokwasemthethweni eIreland: GDPR neKhomishini yoKhuselo logcino-lwazi

I-GDPR, esebenzayo ukususela ngoMeyi 2018, imisela umgangatho ophezulu wesaziso sokwaphuka kogcino-lwazi kwi-European Union. E-Ireland, uMthetho we-DSPR ka-2018 unika isiphumo esipheleleyo kwi-GDPR kwaye uchaza i-DPC njengegunya lesizwe. Iimfuno ezingundoqo ezingokwasemthethweni ziquka:

  • Isaziso esingu 72-72--i-Our: Ukuba uphulo logcino-lwazi lobuqu lungaphumela kwingozi kumalungelo nenkululeko yabantu bendalo, umlawuli makazise i-DPC ngaphandle kokulibazisa okungeyomfuneko kwaye, apho kunokwenzeka, ngethuba eliphakathi kweeyure ezingama-72 zokuqonda uphazamiso. Izilumkiso kufuneka zibhalwe kwaye zigwetyelwe.
  • Ukwazisa kwiZihlo zeData: Xa ungqubano lungaphumela kwingozi enkulu kubantu ngabanye (umz., ubusela, ucalulo, ukulahlekelwa yimali), umphathi makakwanxibelelane nolwaphulo kwimibandela yogcino-lwazi ngaphandle kokulibazisa okungeyomfuneko, echaza uhlobo loqhawulo kunye namanyathelo okuthethelela.
  • [[FLT: 0] Uxanduva loxwebhu: Kwanezophulo ezingafuni saziso kwi DPC kufuneka zibhalwe ngaphakathi, kuquka izibakala, iziphumo, kunye nezenzo zolungiso ezithatyathweyo. I DPC ingacela ezi ngxelo ngexesha lophendlo.
  • [[UMTL:0] Ukufumaneka neNtloko: Ukungahambelani-ngangeni kungaphumela kwimali yolawulo ukuya kwi-CRC20-zigidi okanye 4% yojiko lwehlabathi lonke lwaminyaka le, nayiphi na engaphezulu. Abalawuli nabaphathi nabo basenokujamelana netyala lobuqu phantsi koMthetho woKhuselo logcino-lwazi 2018.

Ukhokelo olubanzi, amashishini ase-Ireland kufuneka ajonge i- ugcino-lwazi olusemthethweni lwe-DPC lokwaphula isikhokelo sokwazisa.

Amanyathelo Okuvelisa isicwangciso sogcino-lwazi esinempumelelo sokufumana intsabelo

Ukwenza isicwangciso sokuphendula kufuna umgudu ocwangcisiweyo, wombutho jikelele. La manyathelo alandelayo enza indlela elungileyo yokusebenzisa ibhayisekile, elungele amashishini ase-Ireland.

1. Umngcipheko wokuvavanywa nokufakwa kwemaphu yogcino-lwazi

Phambi kokuba uphendule kulwaphuko, kufuneka wazi ukuba bubuphi ugcino-lwazi olubambayo, apho luhlala khona, nendlela oluhamba ngayo. Khokela ukuvavanya ngokucokisekileyo ugcino-lwazi lokusebenza kwemephu yokuzilolonga ukuze udwelise yonke idata yobuqu, kuquka umthengi, umqeshwa, kunye nenxalenye yesithathu yedata ye-data. Le nyathelo libandakanya ulwamkelo lolwazi olubalulekileyo (umz., iindidi ezikhethekileyo phantsi kweGatya 9 GDPR), kwaye uqwalasele iziphumo ezinokwenzeka zokulala. Uvavanyo lumele luchaze yonke imisebenzi yokulungisa. //internal, iinkonzo zamafu, iinkqubo zecandelo, iinkqubo zecandelo, iinkqubo zexesha lesithathu, kunye noxwebhu lokugcina ixesha.

Ukulungiselela: Ukwakha Iqela Eliphendulayo Nezibonelelo

Qelisa iqela lempendulo elinikezelweyo (IRT) ngeendima ezicacileyo kunye nogcino lwendawo nganye. Iindawo ezingundoqo ziquka:

  • Umphathi wengingqi: udibanisa impendulo yonke, ibhekisa phambili kubaphathi abakhulu.
  • Isikhokelo sobuxhakaxhaka (IT/Ukukhuselwa): IZiphathi eziqulathe, uhlalutyo lwe-onesi, kunye nokuchaphazeleka kwenkqubo.
  • [[UMTL:0] Igosa lokhuselo lokhuseleko lweDPO (DPO):[[FT:1] Izakhono kwiimbopheleleko ezisemthethweni, iququzelela isaziso se-DPC, kunye nokuqinisekisa ukuthobela.
  • Isikhokelo soluvo lwentengiso: Ilawula ngaphakathi nangaphandle uthungelwano, kuquka iingxelo zokucofa kunye nezaziso zabathengi.
  • [[Umthetho:0] Icebo lomthetho: Ihlola umngcipheko osemthethweni, ilawula izivumelwano zenxenye yesithathu, kwaye isingatha izicelo ze-inshorensi.
  • Isikhokelo se-HR sibhekisa kwidilesi zomqeshwa ezinxulumene nokwaphuka kunye nezenzo zoluleko ukuba usongelo lwangaphakathi lurhanelwa.

Lungisa izibonelelo ezifana nesiqhagamshelanisi sonxibelelwano esikhuselekileyo (umz., ikhowudi efihliweyo yesiKhawu okanye amaqela, iSiphawulo sokuhlaziya okubalulekileyo), inkqubo yolawulo lwengxelo enobungqina obugciniweyo, kunye nokufikelela kwiincwadi zokuphendula zeziganeko. Ulwalamano lwe-Prepararrangend nonxulumano lwangaphandle namafeme e-oventic, iziphathi-mikhosi esemthethweni, kunye neengcali zonxibelelwano noluntu ezikhetheke kwiindawo zokwaphula ulwazi.

3. Ukufunyaniswa nohlalutyo

Ukufumana okunempumelelo kuxhomekeke kwizixhobo zokuhlola (SIEM, EDR, ukuphaphanyiswa kwenethwekhi) kunye neempawu ezicacileyo zolalanisa (IOC). Ukumisela iinkqubo zokuba abasebenzi baxele umsebenzi abakrokrelayo ngaphandle kokoyika ukukhalipha. Xa ulwahlulo olunokwenzeka lufunyenwe, i-IRT kufuneka ikhawuleze ibone ukuba lululwano lokwenene kusini na, ivavanya ububanzi bayo /awding, iingxelo ezininzi, kwaye zeziphi iinkqubo ezichaphazelekayo kumngcipheko kubantu ngabanye.

4. Iqumrhu kunye nokuLunga

Izicwangciso ezifutshane eziqulathe iinjongo zokumisa ulwahlulo ekusasazeni: iinkqubo zokukhetha ezichaphazelekayo, ukuphelisa ii-creaders ezichaphazelekayo, ukuvala iidilesi ze-IP ezingalunganga, okanye ukwenza iinkonzo okwexeshana. Ukuqulatha ixesha elide kubandakanya ukusetyenziswa kwamabala, ukulungisa izigcawu zomlilo, okanye ukutshintsha iimvume zokufikelela. Ukucima ukususa unobangela: ukucima i-mareare, ukuvala ii-vrebrarities, nokuqinisekisa ukuba akukho zingcango zishiyekileyo. Kwiziganeko zentlawulelo, ukuvavanya ngononophelo lwentlawulelo (ngamaxesha onke kudityaniswa ngumthetho) kunye nokubuyisela ugcino lwezikhuselo olucocekileyo kuyagxeka. Qinisekisa ukuba nayiphi nayiphi nayiphina yemiqatha efunekayo kuphengululo i-data efunekayo kugcinwe phambi kokuphengulula.

5. Ukuqaphelisa noNxibelelwano

Isaziso yimbopheleleko esemthethweni nengokokuziphatha. I-DPC kufuneka yaziswe kwisithuba seeyure ezingama-72 “ezingenayo okanye ezicetyiweyo” zolwaphuko---"Ukwaziswa kwenzeka xa umphathi eneqondo elifanelekileyo lokuqiniseka ukuba isiganeko esibandakanya ugcino-lwazi lobuqu senzekile. Isaziso kufuneka siquke uhlobo lolwaphuko, iindidi zogcino-lwazi kunye nabantu ngabanye, iziphumo ezinokubakho, kunye namanyathelo athathiweyo okanye acetyiweyo. Sebenzisa i-DPC ye-intanethi yolwazi oluqhekeziweyo. Ngokungako, hlela unxibelelwano nogcino-lwazi ukuba kumiselwe ingozi ephezulu: lucace gcatha ngoko kunokwenzeka, oko bafanele bakuthathe (umz., inguqulelo yenkcazelo ephathe ii-akhawunti), kwaye ixhasa oko kukuhlolwa kwetyala.

6. Ukuchacha nokubuyiselwa

Ukuchaphazeleka kubandakanya ukubuyiselwa kwenkqubo echaphazelekayo ukusuka kwinkxaso ecocekileyo, ukuqinisekisa ingqibelelo yayo, kwaye ngokuthe ngcembe ukuzibuyisela nge-intanethi ngolawulo oluphuculiweyo. Izifundo ezifundwe ngokukhawuleza: ulawulo lokuhlaziya, ukunyanzelisa ukuqinisekisa ngezandi ezininzi, ii-internat, kunye nokuphucula ukujongwa. Ukuqeqesha okungakumbi kubasebenzi ukukhusela ukubuya kwakhona. i-elementi ikwaquka nokuqhubeka koshishino `````umzekelo,', ukwenza umsebenzi wezandla ukujikeleza xa iinkqubo zihlala zingekho intanethi.

Hlola Uphuculo

Emva kwesiganeko ngasinye, khokela uhlalutyo lwasemva kwesiganeko nabo bonke abafaki tyala. Hlaziya isicwangciso sempendulo yesiganeko, iincwadi zokudlala, kunye nohlolo lomngcipheko. Yabelana ngezifundo ezingaziwayo ngaphaya kombutho ukuqinisa ukuma kokhuseleko jikelele. I-DPC ilindele uphuhliso oluqhubekayo; isicwangciso esithe gqolo esingakhange sivavanywe okanye silungiswe siya kujongwe njengesinganelanga ngexesha lophendlo.

Amalungu angundoqo esicwangciso sempendulo engqinelanayo

Ngaphaya kwamanyathelo okulungisa, uxwebhu olucwangcisileyo maluqulathe izinto eziliqela ezibalulekileyo ukuze luphumelele ngexesha lesiganeko soxinzelelo oluphezulu.

Iindima Neembopheleleko Ezicacileyo

Umntu ngamnye onendima kule ngxoxo kufuneka abe nenkcazelo ebhaliweyo yomsebenzi equka imisebenzi yakhe ekhethekileyo, igunya lokwenza izigqibo, kunye nomendo wokunyusela. Quka 24/7 ulwazi lonxibelelwano kunye nabasebenzi bokhuselo. Isicwangciso kufuneka sichaze nomnyango wokunyanzelisa umthetho (umz., Gardaí National Cyber Crime Bureau) kunye nesiluleko sangaphandle somthetho.

Ubuchule Bonxibelelwano

Ulwaphuko luvelisa uphando olunzulu. Isicwangciso kufuneka siquke iisikhokelo ezivunyiweyo zemisebenzi yangaphakathi, ii-imeyili zabathengi, izaziso zomthengisi, ushicilelo, kunye nemiyalezo yezentlalo-mbini. Yazi ummeli omnye ukuqinisekisa ukudlulisela umyalezo ongaguquguqukiyo. Unxibelelwano oluthetha nabalawuli (ngokuqhelekileyo iDPO okanye icebo lomthetho) kwaye naluphi ulwazi olunokuhluzwa ngaphandle kokuphengulula uphando. Njengoko kubalaselelwa yi- ukhuseleko lwesizwe lwe-Cyber Security Ireland (NCCC), unxibelelwano olucacileyo nababheki bomngcano olucacileyo kunye ne-'umgano olubalulekileyo ekulondolozeni ukuthemba nokukhusela uphazamo lwengozi.

Iincwadi Zomdlalo Wobuchule

Iinkqubo zobuchule zohlobo olwahlukileyo lolwaphuko-_lambo, i-phish, ngaphakathi, isisongelo, ungqubano oluphathekayo, ukuncamathisela kwesithathu `inyathelo-izenzo eziqulathiweyo, ubungqina bokugcinwa koludwe lokugcina ityala, kunye nokubuyiselwa. Iqinisekisa ukuba ezi ncwadi zokudlala ziyafumaneka nokuba unikezelo lwenethwekhi luyekele phantsi (umz., zishicilelwe iikopi eziqinileyo okanye ngaphandle kwe-SBS drives).

Ukhuphiswano olungokwasemthethweni nesikhokelo sokunika ingxelo

Ulawulo lwe-inshorensi, njengoko imigaqo-nkqubo ye-inshorensi ye-ISC ifuna ukukhutshwa ngokukhawuleza. Icebiso lomthetho lifanele lihlolisise zonke iingxoxo zangaphandle ngaphambi kokukhululwa.

Ulwalamano lukawonke-wonke kunye noLawulo

Umonakalo wokophula udla ngokuba yeyona nto ibiza imali eninzi yokwaphula. Isicwangciso kufuneka siquke icebo lonxibelelwano lobunzima eligxininisa ukubonakala, ulwazelelelo, nokuphendula. Iingcali zePR ezinamava olwazi olungenayo kwimiyalezo engundoqo kunye nokulawula intsebenziswano yezentlalo-ntle kunye nemijelo yemijelo yeendaba ukwenzela ukuxoka nokuphendula ngokukhawuleza.

Ukuqeqesha Nokuvavanya

Isicwangciso silungile kuphela xa abantu besenza. Uqeqesho oluthe rhoqo luqinisekisa ukuba abasebenzi bayayiqonda imisebenzi yabo kwaye banokusebenza ngokuzithemba phantsi kwengcinezelo. Uqeqesho kufuneka lulungiselelwe abaphulaphuli abahlukahlukeneyo:

  • [[UMTL:0] Ngokuqhelekileyo iStatus: Ukuqaphela okusisiseko kokusetyenziswa kwe phishing, ucoceko lwegama eligqithisiweyo, kunye neenkqubo zokuxela. Quka umnqongo wonyaka onyanzelekileyo kwi GDPR kunye nokwazisa kogcino-lwazi.
  • IT kunye noKhuseleko Amaqela:[ Izandla eziqeshwayo kwingqokelela yobungqina obungeyomfuneko, uhlaziyo lolog, kunye nobuchule bokuqulatha. Ukukhuthaza iziqinisekiso ezinjenge-GIAC okanye i-CISP.
  • [[NTL: 0] Amalungu eqela le-Responne: Imithambo yethebhile efana nemeko yolwaphuko (umz., intlawulelo yokufihla isiseko sogcino-lwazi sabathengi). Sebenzisa ii-invocts/emails, iDPC, shicilela imibuzo yesigqibo `ukuqhelisa isigqibo/ukusenza phantsi kwexesha elibekiweyo.
  • Isalathisi esisebenzayo: Iingxibo ezishwankathelwe kwityala lomthetho, iziphumo zemali, kunye nonxibelelwano lwebhodi. Ibandakanya iCEO kunye nebhodi kwimiba yetafile ephezulu yonyaka ukukhusela ukuthengwa kwazo.

Uvavanyo kufuneka lubekho ubuncinane kabini ngonyaka. Emva kovavanyo ngalunye, izithuba zoxwebhu kunye nokuhlaziya isicwangciso. Cinga ngokusebenzisa iziphakamisi zangaphandle ukunikezela ngento ethile. Umzekelo, yenza i-injini epheleleyo ye-inthaneti eqinileyo eqinileyo ukuze uqhube iphulo lokuzifica elilandelwa yimpiliso yempiliso yesiganeko esipheleleyo. Oku kufunyanisiweyo kufuneka kufakwe ngqo kwibhanki yomngcipheko yombutho kunye nemaphu yokuphucula indlela.

Izifundo Ezivela Kulo Mbutho Wehlabathi

Amashishini ase-Ireland angafunda kwiziganeko eziphezulu eziye zenzeka kwindawo ethile. Izigqibo ze-DPC kunye nezihlawulelo zinika uluvo olubalulekileyo ngoko kulindelwe ngabalawuli. Umzekelo, ukusilela ukufumanisa uqhawuko ngokukhawuleza okanye uxwebhu ngokufanelekileyo lukhokelele kwisohlwayo esibalulekileyo. Ngokufunda ezi meko, imibutho iyakwazi ukomeleza izicwangciso zayo. Umgangatho wogcino-lwazi lwe-data we-epropenian Protection Board (EPB) imigaqo yolwazi oluchasene nolwazi lukwanguvimba obalulekileyo wokudibanisa i-panPU.

Isiphelo

Ukulawula isicwangciso sokusabela solwaphuko logcino-lwazi asiyoprojekthi enye yamawaka anamashumi amathandathu anesithandathu eprojekthi yokulungisa, kukulungiselela, ukulinganisela, nokulungisa. Kumashishini ase-Ireland, iimathiriyeli, azizange zinyuke. Unyanzelo olungqongqo lwe-GDPR, kunye nokusetyenziswa kobuntlola obukhulayo bezisongelo, kufuna ukuba imibutho ifake ingeniso kwintshukumo ezinamandla. Isicwangciso esikhulisiweyo sinciphisa umngcipheko osemthethweni, sikhusela udumo lwebala, kwaye siqinisekisa ukuba xa uqhawulo lwe-D, kwaye ngokunokwenzeka ishishini liya kusabela ngokukhawuleza, ngokucace mhlophe, kwaye ivumelane ngokupheleleyo nomthetho wase-Ireland. Ukulungiselela okuqhubekayo, uvavanyo oluqhubekayo, kunye nempucuko yokhuseleko luzinziso lwendlela yokwaphulwano olusebenzayo. Thandela inyathelo lokuqala: ukuhlola kwakho, D, kwaye ukulungele ukumelana kwemeko lwakho, kwaye ukwenze ukwakhiwa kwento enzima.