Table of Contents

Kulo mbutho wamanani wanamhlanje, ukhuseleko logcino-lwazi luye lwaba ligumbi lemisebenzi eqinileyo yoshishino. Kwi-Irish encinci nephakathi kwemisebenzi (SMES), izibonda ziphezulu: uqhawulo olunye logcino-lwazi alunakukhupha kuphela izigwebo zemali phantsi kwe-GDPR kodwa lungagqubuthe ukuthemba okunzima kwabathengi kunye namaqabane abo. Ngokutsho kwe-[FLT:] ukhuseleko lwesizwe lweCyber Center (NCSC) Ireland, ama-SME anokukhuselwa ngokugqithisileyo yi-injini e-injini e-injini e-injini e-injini efuna ukusetyenziswa ngokungqongqo. Ngokufuthiweyo, eli nqaku lichaza izenzo ezingcono ezilungiselelwe umsebenzi osebenzayo kwi-RGenegameters, ukulungiselela ukumanyana kokhuseleko olufunekayo kuqoqo lwe-Irish, ukunceda umgangatho we-RCY

Ukuqonda Iingozi Zokhuseleko Logcino - lwazi Ezijamelene Nezithonga ZaseIreland

Ngaphambi kokuba kusetyenziswe ulawulo, kubalulekile ukuqonda indlela eziyingozi ngayo izinto. Amashishini amancinane aseIreland ajongene neengozi ezininzi, ezininzi zazo eziye zavela ngokuphawulekayo kwiminyaka yakutshanje.

Izisongelo Zentsimbi Eziqhelekileyo

  • [[NTL: 0] Iransowere:[ Abahlaseli bafikisa ugcino-lwazi lweshishini olugxekayo kunye nemfuno yemali yokukhululwa kwalo. Amashishini amancinane ngawona aphambili kuba anqabile ukuba abe nogcino-lwazi olungekho intanethi. Iziganeko zakutshanje e-Ireland ziye zachaphazela yonke into ukusuka kuqheliselo lwamazinyo ukuya kwiivenkile ezithengisa izinto.
  • [[NTL: 0] Ukuqhatha kunye nobunjineli bentlalo: ii-imeyili zobuqhetseba okanye ubiza abasebenzi abakhohlisi ukuba batyhile amagama okugqithisela, badlulisele imali, okanye bafake ii-ware. I-Pixeng (ingeniso enxulumeneyo) iqheleke kakhulu ngexesha le-screens.
  • [[UMTL: 0] Izisongelo ze-Interer: Umsinga okanye abasebenzi ababesakuba ngabasebenzi abanikezeli ngokusemthethweni bangayibhenca ngempazamo okanye ngabom idata. Oku kuquka ukwabelana ngengozi ngefayile ezinamacala angenaziteshi.
  • Iinethwekhi ezingagqibekanga kunye nokufikelela ekude: ezinomsebenzi oxutyiweyo nokwenye indawo ngoku kumgangatho, ikhaya elingafotyelwanga Wi-Firs, izixhobo zobuqu, kunye noqwalaselo olubuthathaka lwendawo yokungena yabahlaseli.
  • Izixhobo zetsheyina ezidityanisiweyo: IiMephu ezininzi zixhomekeke kubathengisi besithathu becandelo lokuhlawula, ityala, okanye i-software yeCRM. Uphulo kumthengisi lungangena kwinethwekhi yakho.

Iingozi Zomzimba Nezokusebenza

Ukhuseleko logcino-lwazi asingolwemivo kuphela. Ii-laptop ezilahlekileyo, izixhobo ezihambayo ezingakhange zikhathalelwe, kunye neerekhodi zamaphepha athambekileyo ezingafanelekanga zonke zikwaneengozi. Ii-SMEs kufuneka zicinge ukuba iintlekele zendalo (umz., ukuphuphuma okanye ukuphuma kwamandla) ezinokutshabalalisa iiseva ze-premis. Inkqubo yokhuseleko oluqinileyo zidilesi zoonovel-intanethi kunye nomlinganiselo womzimba.

Ukwakha iPassword enamandla nesiseko sokuqinisekisa

Ingxelo yogcino-lwazi lwe Breinships ibonise ukuba iisiqinisekiso ezibiweyo zibandakanyekile kubuninzi bophulo. Ukugqibezela oku kulawulo lwesiseko:

Igama lokuthela elinyanzelekileyo, Elingaqhelekanga

Kufuneka amagama ayimfihlo ubuncinane abasebenzi abali-12, ukuxuba oonobumba abaphezulu, oonobumba abancinci, amanani, kunye nemiqondiso. Udibanisi iipateni ezithenjiweyo (umz., "Dublin2024"). Umphathi wegama lokugqitha (njenge Bitraden okanye KeePass) ugcina indawo yokugcina ekhuselekileyo. Ungaze uvumele abasebenzi ukuba babelane amagama okugqithisiweyo nge-imeyili okanye nge-apps.

Ubungqina boomatshini bokwenza iinkalo ezininzi (MFA)

I-MFA yongeza umaleko wesibini woqinisekiso — ikhowudi edla ngokuthunyelwa kwisixhobo esihambayo okanye kwi-biometric scan — yenza amagama okugqithisela ebeweyo anganele ukufumaneka kwii-akhawunti. I-Deploy MFA kuzo zonke ii-imeyili, imali kunye neenkqubo zolawulo. Kwi-Irish SMEs, iinkonzo ezifana neMicrosoft 365 Business, i-Google Colporations kunye ne-Xero konke kuxhasa MFA ngaphandle kwexabiso elithe kratya.

Ujikelezo lwe-password ethe rhoqo kunye nophicotho-zincwadi

Ngeli xesha utshintsho oludla ngokusetyenziswa kwigama eligqithisiweyo lungasanconyelwa jikelele (iNCSC ne-NIST zicebisa ngokuchasene nokujikeleza okunyanzelekileyo ngaphandle kokuba kukho ubungqina bokulalanisa), amashishini kufuneka afune ukucwangcisa kwakhona igama eligqithisiweyo xa igqaba-magama omqeshi okanye ungquzulwano lukrokreleka.

Igcina i-Software kunye neenkqubo eziHlaziweyo

I-software engasetyenziswanga yenye yezona zinto zixhaphakileyo. Iziganeko eziphezulu zeprofile ezifana nohlaselo lwe-H21 lwekhompyutha eIreland zibethelela impembelelo embi yokulibala.

Yenza i Applet

Seta uhlaziyo oluzenzekelayo naphi na apho kunokwenzeka iinkqubo zokusebenza (Iifestile, ama- maCOS, Linux), izikhangeli, kunye nezisuti zemveliso. Kwilayini- yezicelo zeshishini (umz., i-software enika ingxelo, izixhobo zorhwebo lwe-imeyili, ulawulo logcino-lwazi), yenza umjikelo wokukhangela ngezandla nyanga nganye. Zibophelele kwimiboniso yokhuseleko yomthengi ukufumana izilumkiso zemathili axake.

Yandisa Uhlaziyo kuzo Zonke Izixhobo

Musa ukungazihoyi izilawuli, izicimi, abashicileli, kunye ne IoT izixhobo ezifana neekhamera zokhuseleko okanye i-smostats ezikrelekrele. Ii-SMEs ezininzi ngokungazi zishiya iisiqinisekiso ezingagqibekanga kwizilawuli, zizenza zibe lula amaxhoba. Tshintsha amagama okugqithisela angagqibekanga kwaye ugcine ixesha eliqinileyo.

Ulawulo lwezibonelelo

Zigcinele i-hardware eya kumhla kunye noluhlu lwe-software. Olu luhlu lukunceda ukuba uqonde ukuba zeziphi iimpahla ezifuna iipetshi kwaye ziziphi ezinokuthatha umhlala-phantsi ukuba azisaxhaswa (umz., i-Windows 7 okanye i- Windows endala ngaphandle kohlaziyo lomthengisi).

Inkxaso yogcino-lwazi: Inethi yokhuseleko epheleleyo

Ugcino asingomlinganiselo wobugcisa nje; zizinto ezifunekayo eziqhubekekayo zoshishino. Isicwangciso esicwangcisiweyo sogcino-khuseleko singajika isiganeko sentlawulelo ukusuka kwingxaki yengozi sibe yingxaki encinci.

Umthetho 3-2-1

Landela umgangatho wogcino-lwazi 3-2-1 indlela yogcino:

  • Gcina [[Ugcino:0] iikopi ezintathu zedata yakho (isiseko esinye, ezimbini zogcino-lwazi).
  • Zigcine [[UMTL: 0] ezimbini iintlobo ezahlukeneyo ze media (umz., ukugcina amafu kunye noqhutyo olungaphandle).
  • Qinisekisa [[UMTL: 0] ikopi enye igcinwa ingekho- mgaqweni (ngokusuka kwindawo yakho yokuqala).

Ukhuseleko Oluzenzekelayo Noluvavanyiweyo

Ugcino-lwazi loxwebhu aluthembekanga. Sebenzisa isoftware eyakhelwe ngaphakathi e- diff elungelelanisiweyo okanye izixhobo ezifana ne-Veam, Acronis, okanye i-Backblaze) ukuqhuba ugcino-lwazi imihla ngemihla okanye ngeveki kuxhomekeke kutshintsho logcino-lwazi. Ngokuyinyani, [[FLT: 0]] lukuvavanya ukubuyiselwa noko ngekota. Ugcino olungenakubuyiselwa alunamsebenzi. Khupha uhlaselo lwentlawulelo nexesha elithatha ixesha elide ukuphinda ufumane imisebenzi epheleleyo.

Amafu. Imigqa yasekuhlaleni. Hybrid

Ii-SMEs zinezinketho ezinamandla: izixhobo ze NAS zasekuhlaleni (umz., Synology okanye QNAP) zinganika ulungiso olukhawulezileyo, ngelixesha iinkonzo zamafu (Microsoft OneDrive, Google Drive, Willbox Business, okanye izinikezeli ezinikezelweyo zogcino- olusemgceni) zinikezela ngaphandle. Indlela ye-drive — yengingqi yesantya, ilifu lokufumana imposiso yentlekele — iyanconyelwa. Ukuqinisekisa ugcino lwamafu lungafihliswa kusetyenziswa kwi- THPS (AES) nakuphumlile (AES-256).

Imfundo Yam: Umgangatho Wakho Wokuqala Wokwaphulwa

Ubugcisa bodwa abukwazi ukuthintela impazamo yomntu. Iqela eliqeqeshiwe linciphisa ngokuphawulekayo amathuba okuphumelela kwe phishing okanye ukhupho lwengozi logcino-lwazi.

Uqeqesho lokhuseleko oluthe rhoqo

Yenza iintlanganiso zokhuseleko ezikhwela ebhodini kuzo zonke ii-afs, zilandelwa ziimodyuli ezihlaziyayo.

  • Ukuphinda umisele ii-imeyili ze- phishing (umz., amakhonkco akrokrelekayo, ulwimi olungxamisekileyo, iidilesi zabathumeli ezingahambelaniyo).
  • Imikhwa ye Internet ekhuselekileyo (iphepha uwonke- wonke Wi-Fi ngaphandle kwe-flip, ungakhupheli isoftware engagunyaziswanga).
  • Ukuphathwa kakuhle kwe data evakalayo (iifayile zokufihla phambi kokwabelana, ukutshixa izikrini xa ungekho kwidesika).
  • Imigaqo yokunika ingxelo (enokudibana nomntu oza kudibana naye nendlela yokuchaza ulwaphulo-mthetho olurhanelekayo).

Iphulo Lokuqhatha Elicetyiweyo

Sebenzisa izixhobo ezikhululekileyo okanye eziphantsi (njenge GoPhish okanye Know Be4) ukuthumela ii email zentlekisa zephishing kubasebenzi. Umzila onqakrazayo kwaye unike uqeqesho lonikezelo. Phinda imfaniso iphinda-phindo amaxesha amaninzi ngonyaka; unqakrazo lwamanani oluqhelekileyo lwehla ukusuka kuma-30% ukuya kutsho phantsi kwe 5% emva kwenkqubo eqhuba kakuhle.

Yenza Umgaqo-nkqubo Wokhuseleko Olucacileyo

Umatshini wokhuseleko logcino-lwazi olulula, olukhululekileyo otyikitywa ngabo bonke abasebenzi. Quka imithetho kulawulo lwegama eligqithisiweyo, kusetyenziso lwesixhobo, umsebenzi owamkelekileyo we Internet, kunye nezibophelelo zokunika ingxelo. Hlola nokuhlaziya inkqubo minyaka le okanye nanini na imimiselo itshintsha.

Ukufumana Ulawulo Nomgaqo Welungelo Lerhamncwa

Asingomqeshwa wonke ufuna ukufikelela kuyo yonke idata. Ukunciphisa unikezelo kunciphisa isangqa esidubulayo somngxungxo ngaphakathi okanye ulalaniso olunempumelelo.

Ulawulo lokufumana olusekelwe kwindima (RBAC)

Nikela iimvume ezisekelwe kwimisebenzi. Umzekelo, ummeli wentengiso akafanele abe nonikezelo kwi rekhodi yomqulu okanye iinkcukacha zokuhlawula. Sebenzisa iimpawu ezakhelwe- kwi RBAC kumaqonga akho amafu (umz., Azure AD, Google Indawo yokusebenza iindima zomlawuli).

Ingxubusho yokufikelela ezithe rhoqo

Yenza ihlolo lwekota yemvume zomsebenzisi. Susa unikezelo lwabasebenzi bangaphambili ngoko nangoko emva kokukhutshwa kwebhodi — ulawulo oluqhelekileyo olushiya iingcango zivuliwe. Ukuphumeza inkqubo esesikweni yokucela nokuvumela ukufikelela okuphezulu (umz. umphathi makavumele amalungelo omlawuli).

Uqinisekiso olukhuselekileyo lokufikelela kuMda

Kubasebenzi abasebenza kude, bafuna inkampani esebenzayo ne MFA. Kuphephe ukubhenca izicelo zangaphakathi ngqo kwi-intanethi. Sebenzisa isango le-desktop ekude okanye izisombululo zenethwekhi ezingekhoyo ezifana ne-Cloflare Access okanye i-ishire-scile scale.

Ukubhala Ngelishwa: Ukukhusela Ugcino - lwazi Xa Uphumlile Naxa Uguqulelwe

Ukukhowuda kuguqulela ulwazi olungafundekiyo kumaqela angagunyaziswanga, nokuba izixhobo zokwenyama zebiwa okanye ukusetyenziswa kwezitrato zenethwekhi kuthintelwe.

& Fihla Zonke Izixhobo

Yenza ufihlo olupheleleyo kwinkampani- i- issuep-lapy, desktop, kunye nemfonomfono- mfono- mfono- mfono — usebenzisa i BitLocker (Iifestile), FileVault (maccos), okanye LUKAS (Linux). Kwisixhobo se iPhones ne-Android, qinisekisa ukuba ufihlo lwesixhobo lukhutshwa ngemithetho yolawulo lwezixhobo.

Ugcino-lwazi olukhuselekileyo kwintshuwayelo

Sebenzisa i HTTPS kuzo zonke ii website (install SSL/ TLS izatifiketi). Kuthungelwano lwangaphakathi, khuthaza iinkonzo ze email ezifihliweyo (umz., ProtonMail) okanye ubuncinane, yenza ukhuphelo lombhalo ocacileyo SMTP. Khowuda udluliso lwefayile usebenzisa i SFTP okanye izibuko elikhuselekileyo kunokuba i Qhubeke kwi FTP okanye iziqhoboshelo ze email.

Uguqulelo lwesiseko sedata

Ukuba ishishini lakho ligcina iirekhodi zomthengi okanye ugcino-lwazi lwemali kwisiseko sedata, yenza ufihlo logcino-lwazi olukhanyayo (TDE) okanye umphakamo wombhalo ofihlakeleyo woluhlu. Isiseko sedata samafu esisuka kubanikezeli njenge AWS RDS, Google Lifu SQL, okanye Azure SQL inikeza iinketho zofihlo lwendabuko.

Ukhuseleko Logcino-lwazi Lwezinto Ezihlambulukileyo Nemeko Ekude Yokusebenza

Ukutshintshela kumsebenzi owenziwe kude kuye kwandisa uhlaselo lwama-Irish SMEs. Nazi iindlela ezikhethekileyo zokukhusela abasebenzi abasasazwayo.

Izixhobo ezidityanisiweyo zenkampani kunye ne-MDM

Naninina kunokwenzeka, nikeza abasebenzi ngezixhobo zenkampani ezilawula ikhompyutha. Sebenzisa isisombululo se-Mobile I-Intune (MDM) (Microsoft Int, Jamf, okanye ilifu le-MD) ukunyanzelisa ukuvulwa kombhalo ofihlakeleyo, ukufuna uhlaziyo, kunye nokucima kude izixhobo ezilahlekileyo. Imigaqo ye-MOOD (zise eyakho icebo), yenza inkangeleko eyahlukileyo okanye usebenzise izikhombisi ezihlula ugcino-lwazi lwenkampani.

Ukhuseleko lwe Wi-Fi kunye neziDityaniso

Abasebenzi abayalelayo ukuphepha uwonke-wonke Wi-Fi kwimisebenzi yomsebenzi. Ukunika inkampani ifloat efihlwayo zonke iitrafiki ze-Intanethi, kwaye yenza i-PDP isebenzise ubophelelo xa ifikelela nayiphi na inkqubo yangaphakathi. Qinisekisa ukuba i-PDP ixhasa iprotocoto yangoku (i-WireGuard okanye i-OpenVPN) kwaye ihlaziywe rhoqo.

Ingqungquthela yeVidiyo noKhuseleko loNxuluno

Sebenzisa amaqonga aziwayo (Longe, Amaqela, u-Google Mee) nee-password zeentlanganiso zenziwe. Khubaza ifayile ukuba yabelana kwincoko ukuba ayifuni. Hlola imimiselo yokufikelela kondwendwe ukunqanda abathabatha inxaxheba abangagunyaziswanga.

Iqela elisemthethweni nelinolawulo: GDPR

I-SMEs yase-Ireland kufuneka zivumelane noMgaqo-nkqubo woKhuselo-lwazi jikelele (GDPR), osebenza nakuluphi na ugcino-lwazi lobuqu lwabemi be-EU. Ukungahambelani nomthetho-mthetho kungakhokelela kwimali ehlawulwayo efikelela kwizigidi ezingama-20 okanye 4% yojiko lwehlabathi lonke, elona naliphi na eliphezulu.

Iimfuno ezingundoqo ze-GDPR

  • [[FLT: 0] Uxwebhu loqhubekeko-phambili: Gcina ingxelo yogcino-lwazi lobuqu oluqokelelayo, kutheni, apho lugcinwa khona, oyabelana naye, nexesha oligcinayo.
  • Isiseko esingamkelekiyo solungelelaniso: Umsebenzi wonke wokwenziwa kogcino-lwazi kufuneka ube nesiseko esicacileyo esisemthethweni (ugunyaziso, isivumelwano, imbopheleleko esemthethweni, njl.njl.).
  • [[UMTL: 0] Amalungelo omxholo: Zilungiselele ukuphatha izicelo zonikezelo, ukwenziwa kwakhona, uvuselelo (ekunene lulibaleke), ukufumaneka kogcino-lwazi, kunye nothintelo lokuqhubekekisa ngexesha logcino-lwazi (ngokuqhelekileyo iintsuku ezingama-30).
  • Isaziso sokwaphuka komjelo: Ukwazisa iKhomishini yoKhuselo logcino-lwazi (DPC) kwisithuba seyure ezingama-72 zokwazi uqhawulo-qhawuko olubeka abantu engozini. Abantu abachaphazelekayo nabo kufuneka baziswe ngaphandle kokulibazisa okungeyomfuneko.

Igosa lokhuselo logcino-lwazi (DPO)

Ngeli xesha i-DPO inyanzelekile kuphela kumagunya karhulumente okanye kumashishini abandakanyeke kwisikali esilungiselelweyo okanye kugcino-lwazi olukhethekileyo, ii-SMEs ezininzi zase-Ireland zimisela umntu ozahluleleyo onoxanduva lokuthobela nakuba kunjalo. Le ndima ingakhutshwa ukuba oovimba bangaphakathi balinganiselwe.

Izivumelwano zogcino-lwazi ezilungiselelayo (DPAs)

Xa usebenzisa iinkonzo zesithathu (iicandelo elinamafu, abasebenzi bomqeshwa, abarhwebi be-CRM) abaphatha ugcino-lwazi lobuqu ngenxa yakho, kufuneka ube ne-DPA etyikitywe endaweni yakho. Qinisekisa ukuba umthengisi yi-GDPR-compliant kwaye unika uqhubekeko-lwazi kwi-EEA okanye ulawulo ngesigqibo sokungafundi.

Ukwakha Isithethe Sokhuseleko Logcino - lwazi

Ukhuseleko asilophulo lwexesha elinye kodwa luzibophelelo oluqhubekayo oludityaniswe kwinkampani.

Ukhokelo Luthenge

Abanini-mali kunye noomaneja kufuneka baxhase imisebenzi yokhuseleko. Ukuba abalawuli abawuhoyi imithetho elandelwayo, abaqeshwa baza kulandela ignowle. Basebenzise uqingqo-mali olufanelekileyo lwezixhobo zokhuseleko kunye noqeqesho — kwane---RG1 500-10,000-10,000 ngonyaka bangagquma abaphathi-gama eligqithisiweyo, iimfaniso ze-pishing, kunye nokunyuswa kwendlela.

Uphicotho-zincwadi oluthe rhoqo nolunomngcipheko

Qwalasela uphicotho-zincwadi logcino-lwazi lwaminyaka le. Hlola ukuthembeka kogcino-lwazi lwakho, ulawulo lwakho, kunye nemeko yokufaka isiziba. Khokela umcebisi wokhuseleko lwangaphandle ukuze uhlolo lobungozi ukuba uqingqo-mali luvumela. I-NCSC inika ukhokelo lwasimahla kunye noludwe lokuhlola olulungiselelwe ii-Irish SMEs.

Icebo Lokusabela

bhala icebo elilula le siganeko elichaza:

  • Ngubani ofanele aqhagamshelane (isikhokelo / umphathi) nangaphandle (MSP, icebo lomthetho, DPC).
  • Amanyathelo okuqulatha ulwaphuko (ukungangeni kwinkqubo ezichaphazelekileyo, ukutshintsha ii-credits).
  • Indlela yokunxibelelana nabathengi nababheki.
  • Uhlolo nophuhliso lwasemva

Zama icebo ngokuzilolonga kanye ngonyaka.

Isiphelo

Ukhuseleko logcino-lwazi lwe-GDPR kumashishini amancinane ase-Ireland angokhetho — luyimfuneko engundoqo ekhusela igama lakho, imali, kunye nokuthemba kwakho. Ngokusebenzisa iinkqubo zegama eligqithisiweyo, ukugcina iinkqubo zihlaziyiwe, ukuxhasa ugcino-lwazi ngenkuthalo, ukuqeqesha abasebenzi, ukulinganisela ukufikelela, nokuhlala uhambisana ne-GDPR, wenza ukhuseleko olunciphisa kakhulu ubungozi. Qala ngemilinganiselo ephezulu (MFA, inkxaso yemali, kunye noqeqesho lomqeshwa) kunye nolwandisa inkqubo yakho ngexesha elifanelekileyo. Khumbula ukhokelo olungakumbi, jongana neKhomishini yokukhusela [[FLD:] [DC] [FLT] kunye ne-[FLT] icebiso loshishino-[FFFFFF:N] C [F3]