Table of Contents
I-Indeprises (SMEs) ephakathi e-Ireland ijongene nocelomngeni olukhulayo ekukhuseleni ugcino-lwazi olunochuku kwiingozi zekhompyutha. Njengoko ukuguqulwa kwamanani kukhawulezisa, umthamo wogcino-lwazi ovelisweyo nogcinwe zezi nkampani ukhula ngokulandelelana, uzenze zibe nomtsalane kumaxhoba ogcino-lwazi olunempumelelo, hayi nje kuphela ukukhusela ulwazi lwabathengi kodwa nokuthobela imimiselo yemityabetho, ukugcina umgcini-zi, nokuqinisekisa ukuqhubekeka kweshishini. Eli nqaku lihlola iindlela ezisebenzayo zokuqinisa ukuma kogcino-data, ubugcisa, iinkqubo zobugcisa, izinto zoluntu, izicwangciso zoluntu, kunye nezibophelelo ezisemthethweni.
Ukuqonda Ukubaluleka Kokhuseleko Logcino - lwazi Lwezithonga ZaseIreland
Ukhuseleko logcino-lwazi lubalulekile kuba uhlaselo olunye lwekhompyutha alusekho kwimibutho emikhulu. Ngokwe- i-National Cyber Security Center (NCSC) Ireland, i-SMEs lujoliswe kwiziphumo ezithe tyekelele ukunqanda. Uphazamiso olunye lwezikhuseli-ziphene lungakhokelela ekulahlekelweni kwemali okuninzi, ngokunjalo kumashumi amawaka amawaka ee-yurobhu (i-i-europutel) umonakalo ogxotha abathengi, kunye nesohlwayo esisemthethweni phantsi kwe-General Data Protection Reglate (GPR). Ngaphezu koko, uninzi lwe-Smetrans lusebenza njengeevicedmist; uk-ophulo lweenkqubo zazo lungabangela ukurhoxiswa kweminxeka nokukhomba okuhlala ixesha elide. Ngoko ubuchule bokugcina iziphumo zemali, kunye nokufumaneka kwe-data, kunye nokufumaneka.
Isisongelo se-Irish SMEs siquka i-elfare, i-phishing, ulalanisa kwe-imeyili yeshishini (BEC), izisongelo, kunye nokusetyenziswa kwe-software engasetyenziswanga. Xa umsebenzi owenziweyo usiba yinto eqhelekileyo, uhlaselo luye lwanda ukuquka ii-panemeter zeWipangoFi kunye nezixhobo zobuqu. Ukuqonda le meko kunceda abanini-mali baqonde ukuba ukhuseleko logcino-lwazi asiloprojekthi enye yexesha le-69 kodwa luyinto ephambili esebenzayo.
Imisebenzi yokukhusela ugcino-lwazi oluqhubela phambili
Ezi ndlela zilandelayo zenza isiseko somgaqo-siseko we-Irish SME okhangelela ukuphucula imiqathango yokhuseleko logcino-lwazi. Ummandla ngamnye unokuyilwa ngokusekelwe kubukhulu, kwicandelo, nakubungozi bomzi.
I-Password Prices kunye nobungqina obuninzi
Amagama agqithisiweyo abuthathaka ahlala engomnye weyona ndawo iqhelekileyo yabahlaseli. Ama-SMEs kufuneka anyanzelise iinkqubo ezifuna amagama agqithisiweyo anzima . Abasebenzi abalishumi elinesibini, abaphezulu, amanani, neempawu zomqondiso.
Ukongeza, iSMEs kufuneka ziqwalasele ukusebenzisa umphathi wegama lokugqithisela kugcino olukhuselekileyo noluvelisa iziqinisekiso. Oku kuphelisa isilingo sokuphinda usebenzise amagama ayimfihlo kwiinkonzo ezininzi kwaye kwenza kube lula ukunyanzelisa iimfuno ezintsonkothileyo ngaphandle komthwalo wenkumbulo yabasebenzi.
2. Uhlaziyo lwe-Software oluthe rhoqo kunye nolawulo lwesibhaxu
Ii-skeni ezisetyenziswayo zovavanyo olwaziwayo lwemijelo esetyenziswayo, iinkqubo, kunye nezingenisi-nkqubo. Xa abathengisi be-software bekhupha uhlaziyo okanye iipesenti, basoloko belungisa iimpazamo zokhuseleko. Ii-SMEs kufuneka zibe nendlela elungeleleneyo yokugcina zonke iinkqubo zihleli kude kube ngoku. Oku kuquka:
- Uhlaziyo oluzenzekelayo apho kunokwenzeka (umz., ukwenza umhla ozenzekelayo we Windows, amaosos, kunye nezicelo ezinkulu).
- Ukugcina uluhlu lwezinto kuzo zonke ii-hardware kunye nee-software, kuquka iinkqubo ezindala ezingasayi kufumana uhlaziyo kubathengisi.
- Ukucwangcisa imijikelo yebala eliqhelekileyo (ngenyanga okanye ngeveki) kunye nokuvavanya uhlaziyo olunengqwalasela kwimekobume engeyo 2016 kuqala ukuba ugcino luyavuma.
- inika ingqalelo kwimveliso eziphelayo ezikhoyo (EOL)[[FL:1]; umzekelo, iWindows 10 ziza kufikelela kwisixhobo esijikelezayo ngo-Oktobha 2025, emva koko kungekho zipaki zokhuseleko eziza kukhululwa. IiMenu kufuneka zicebe ukufuduka kusengaphambili.
Ukungahoyi ukudityaniswa kweyona ngxaki ixhaphakileyo ekuxhatshazweni kwezixhobo zokuhlangula, njengokuba kubonakala kwiziganeko ezijolise ekucoceni impilo yomntu nokuvelisa iiSMEs eIreland.
3. Ukuguqulela kogcino-lwazi: Ukukhusela Ulwazi xa luphumle
Ufihlo lwe data ye kuhlobo olungafundekiyo olunokuguqulelwa ngesitshixo esichanekileyo. Kwi SMEs zesi- Irish, ufihlo luzakusetyenziswa kwi projekti ezimbini ezingundoqo:
- DAT kuphumlo – igcinwe kwii-laptop, iiseva, iidrive zangaphandle, kunye nogcino lwamafu. Icebo le projek ekhowudi (umz., iBitLocker kwi Windows, i FileVault kwi COS) kufuneka yenziwe ukuba isebenze kuzo zonke izixhobo. Kuzo zonke izixhobo ezinamafu kunye nogcino lwefayile, qinisekisa umnikezeli unikezela noko kufihlo olunofihlwayo lwe AES.
- DATA kuthutho- xa ugcino-lwazi luhamba lunqamleze iinethwekhi (umz., phakathi kwee-ofisi, kumaqonga amnyama, okanye phezu kwe-Internet). Zonke iitrafiki kufuneka zibhalwe ngokufihlakeleyo usebenzisa i TLS (Ukhuseleko Logcino Lomaleko Wendawo) okanye ii-condss kwinginya zonxulumano olukude. Kuphephe ukusebenzisa uwonke-wonke Wiprotfi ngaphandle kwe-'ay, njengoko ingxinano onovakalelo oluchuku.
Ukukhowuda asiyombumbulu yesilivere/intambo kufuneka idityaniswe nolawulo lwezitshixo ezifanelekileyo. IiMemo kufuneka zigcine amaqhosha okukhowuda ngokwahlukileyo kugcino-lwazi olufihliweyo kwaye zithintele unikezelo kubasebenzi abagunyazisiweyo kuphela.
4. Uqeqesho lomsebenzi olunempembelelo kunye nolwazi
Imposiso yomntu ihlala ingunobangela ophambili wokwaphuka kogcino-lwazi. Abasebenzi baxhaphaza abaqeshwa ngee-imeyili ze-ashing, ukuthunga (ilayishing), ukuthunga (SMSphing), kunye nobuchule bobunjineli bentlalo. Ii-Irish SME kufuneka zifake ingeniso kuqeqesho oluqhubekayo olungaphaya kwesehlo esinye. Iinkqubo ezisebenzayo ziquka:
- [[UMTL: 0] imithambo yokufaka uphikisi ukuvavanya amandla abasebenzi okubona imiyalezo ekrokrelekayo.
- Uqeqesho olucacileyo lwamaqela emali aphatha ii-invoice kunye nezicelo zokuhlawula (ejoliswe kakhulu zii-BEC umpharms).
- [[UMTL:0] Iinkqubo zokunika ingxelo ngeziganeko zokhuseleko ezirhanelekayo (umz. idilesi ye-imeyili enikezelweyo okanye iqhosha ukuchaza iphishing).
- [[Umthetho: 0] Uxwebhu lwePolitiki olulula ukuqondwa, ukugquma ukusetyenziswa okwamkelekileyo kwezixhobo, imisebenzi ekude, kunye nezikhokelo zogcino-lwazi.
Ngaphandle kokuqeqeshwa okuqhelekileyo, ukukhuthaza inkqubo yokhuseleko (izithethe) ezingakhathaliyo kuthetha ukuba zikhokelwa kakuhle — ukusebenzisa iMFA, ukungaxeleli abanye amagama ayimfihlo, nokubonakala unqabiseko olubonakalayo kwizigqibo zoshishino.
5. Ukhuseleko oluphangaleleyo namalungiselelo okuchacha
Iintlaselo ze-fansour zisoloko zijolise ekuyingeni ugcino-lwazi lombutho kunye nemfuno yentlawulo yokukhululwa kwawo. Ngaphandle kogcino-lwazi olusebenzisekayo, i-SMEs zingajongana nokulahleka kogcino-lwazi olusisigxina. Ubuchule bokhuselo lwesandi bulandela umthetho 3 211 womthetho : ukugcina iikopi ezintathu zogcino-lwazi, kwiintlobo ezimbini zezixhobo zekhompyutha ezahlukeneyo, ngekopi enye egcinwe ngaphandle kwe-injini (ngokunokwenzeka i-intanethi okanye ngokungenakusetyenziswa ekwilifu). Iingqwalasela ezingundoqo ze-Irish SMEs:
- [[UMTL:0] Ugcino oluzenzekelayo ukuqinisekisa ukungaguquguquki; kuxhomekeka kucwangciso oluthe rhoqo kuneenkqubo zezandla.
- [[UMTL: 0] Uvavanyo lokubuyisela ngamaxesha athile – ugcino olungenakubuyiselwa luyinto engento yanto. Iingqeqesho zokubuyisa.
- [[FLT: 0] Izixhobo ezifakelweyo zogcino (zidibanisiwe kuthungelwano) zikhusela kwi-etherture enokuthi izame ukukhowuda ugcino oludityaniswe kuthungelwano olufanayo.
- Inkonzo zokhuselo ezivuliweyo ezinemigaqo-nkqubo ende yexesha elide egcinwayo ingakhusela ekucimeni okanye ekumonakaleni ngengozi.
Izicwangciso zokuphucula intlekele zifanele zibhale amanyathelo acacileyo okubuyisela inkqubo, ukuchaza abasebenzi abanoxanduva, nokuquka isikhokelo sonxibelelwano sokuzisa abathengi nabalawuli ukuba uqhawulo lukho.
6. Izixhobo zokufumana iingcambu kunye nomgaqo welungelo lerhamncwa
Asiyo yonke intsebenziswano efuna unikezelo kuyo yonke idata. Ukunikezela lilolebreebsion ulawulo lokufikelela (RBAC) iqinisekisa abasebenzisi kuphela ukuba baneemvume ezifunekayo ukuphumeza imisebenzi yabo. Umzekelo, ummeli wentengiso angafuna unikezelo kulwazi oludibeneyo lwabathengi kodwa hayi kwiingxelo zemali okanye iifayile ze HR. Iindlela ezongezelelekileyo ziquka:
- [[UMTL: 0] Ukwahlula ii-akhawunti zolawulo kwii akhawunti zomsebenzisi eziqhelekileyo. Ii-admin kufuneka zisebenzise ii-akhawunti ezinikezelweyo kwimisebenzi enzima, kwaye ezo akhawunti kufuneka zikhuselwe nge-MFA.
- [[UMTL: 0] Ngokuphindaphinda ukuqwalasela amalungelo okufikelela – ingakumbi xa abaqeshwa betshintsha iindima okanye beshiya inkampani. I-Automate delisation ezininzi kangangoko kunokwenzeka.
- [[UMTL:0] Isebenzisa unikezelo lokwexeshana okanye lonyaka kwindlu okanye amaqabane angaphandle.
Ulawulo lokufikelela alubhekisi ebantwini; lukwasebenza kwiinkqubo kunye nezicelo. Sebenzisa imibhobho yomlilo kunye necandelo lenethwekhi ukulinganisela intshukumo yasemva ukuba umhlaseli ufumana indawo ebambekayo.
7. Izixhobo zoKhuseleko ezikhutshwayo nezisombululo
Ngeli xesha ii-SMEs ezininzi zisebenza kuqingqo-mali olulinganiselweyo lwe-IF, kukho izixhobo zokhuseleko ezinokufikeleleka ezinika ukhuseleko olubalulekileyo. Oku kulandelayo kufuneka kuqwalaselwe njengovezi-mali olungundoqo:
- Ezilandelayo isizukulwana esilandelayo iiflarellays (NGFW)-- ezi zidlula ngaphaya kwepakethe engundoqo yokuhluza ukuhlola iipakethi zezithuthi zobubi.
- Ukufunyaniswa kwesiphelo sesiphelo kunye nempendulo (EDR) – ithatha indawo yesithethe echasene ne-virus ngohlalutyo oluphambili lokuziphatha kunye namandla okuziphendulela. Izisombululo ezizizizo eziziiCloudcaged EDR ngoku zifumaneka kumaqela amancinane.
- Ubhaqo/inkqubo zokukhupha imo-moya (IDS/IPS) – i-modeli yetrafiki yenethwekhi yomsebenzi okrokrelekayo kwaye iyakwazi ukuvala iipakethi ezinobundlobongela.
- [[FLT: 0]] Izango zokhuseleko lwe-email - icebo lokucoca ulwelo kunye nenzame zokuzifinisa phambi kokuba zifikelele iibhokisi zabasebenzi ezingaphakathi.
Ngaphaya kwesixhobo sokusebenza, i-SMES kufuneka imisele ukugawulwa nokujongwa , ngokufanelekileyo usebenzisa ulwazi lokhuseleko kunye nolawulo lwesiganeko (SIEM) isisombululo. Abaninzi abalawulayo abanikezeli bokhuseleko (MSSP) banika iinkonzo ze-SIEM ezinokufikeleleka eziphaphapheleyo kwii-anomalie, ukunceda i-SMEs ukuchonga iziganeko kwangoko.
Ukungqinelana Nokuqwalaselwa Okusemthethweni
Imimiselo yokhuselo logcino-lwazi eIreland iphakathi kweyona yomeleleyo ehlabathini, ngenxa ye GDPR kunye noMthetho woKhuselo logcino-lwazi lwe-Irish 2018. IKhomishini yoKhuselo loKhuselo (DPC) ligunya lesizwe eliphethe kwaye linamandla okubeka intlawulo entle ukuya kwi-MFURC20-am okanye 4% yojikelezo lwehlabathi lwaminyaka le, engaphezulu nayiphi nayiphi na. i-Irish SMEs kufuneka iqinisekise imimiselo yokhuseleko logcino-lwazi olululo luhambelana neemfuno ze-GDPR:
- Ukhuseleko lweData ngoyilo nangokungagqibeki – imilinganiselo yokhuseleko kufuneka idityaniswe kwiinkqubo kunye neenkqubo ukusuka ekuqaleni, ingeniswa njengengcinga yasemva.
- Ugcino lwe-Recordremation – ukugcina ubhaliso lwemisebenzi yokuqhubekekisa, kuquka ukusasazeka kogcino-lwazi, amaxesha okugcinwa kwento, kunye neenkqubo zesithathu +party.
- izivumelwano zomsebenzi wogcino-lwazi – izivumelwano nakweliphi na iqela lesithathu eliphatha ugcino-lwazi lobuqu (umz., abanikezeli bamafu, iinkonzo zomqeshwa) kufuneka zicace ngokucacileyo iimfanelo zokhuseleko kunye neemfanelo.
- [[FLT: 0] Brech isaziso [[FLT: 1] - beka i-DPC kwiyure ezingama- 72 ukuqaphela ulwahlulo logcino-lwazi lobuqu ngaphandle kokuba umngcipheko kubantu ngabanye awuqhelekanga. Abantu abachaphazelekayo kufuneka baziswe ukuba uphazamiso lubangela ubungozi obukhulu kumalungelo nenkululeko yabo.
- [[NTL:0] Ukukhusela iziphumo ze-Assesment (DPIAS) – kufuneka ukwenzela uqhubekeko olubonakala lubangela ubungozi obukhulu kubantu ngabanye (umz., inkulu ye-scale filter, ukusetyenziswa kobugcisa obutsha).
Ngeli xesha ukuthobela kusenokubonakala kudimaza, i-DPC inika ubuchule kunye nesikhokelo se-SMEs. Amashishini amaninzi ase-Ireland nawo ayangenelwa ngokumisela igosa loKhuselo logcino-lwazi (DPO), nangona oku kunyanzelekile kuphela kwiintlobo ezithile zoqhubekeko. Noko ke, ngaphandle komthetho we-DPO, ukuba nomntu ozahluleleyo onoxanduva lokukhuselwa ngogcino-lwazi kungumkhwa olungileyo.
Ukwakha Isithethe Sokhuseleko LobuHolgons Nokukwazi Ukusabela Ngokulula
Ubugcisa bodwa abwanele. Ii-SMEs zase-Ireland kufuneka zikhulise impucuko apho bonke abaqeshwa bayayiqonda indima yabo ekukhuseleni i-data. Oku kuthetha ukuba:
- Uthungelwano lwangaphakathi – iincam zokhuseleko ezabelwe ngokugqitha kwi email, i-intranet, okanye iintlanganiso zeqela.
- [[UMTL: 0] Ingxelo evulekileyo echaza iimpazamo (umz., ukunqakraza uqhagamshelwano oludibanisayo) ngaphandle koloyiko lomohlwayo, ngoko iziganeko zingaqulathwa ngokukhawuleza.
- [[Ukhuseleko: 0] Ukhuseleko luzithethelela [ – ukwabela abasebenzi abaqhutywayo kwisebe ngalinye ukuba basebenze njengonxibelelwano kwaye bakhuthaze ezona ndlela zilungileyo zoqheliselo.
Okubalulekileyo kukuba necebo lesiganeko esilungelelanisiweyo. Oluxwebhu kufuneka luchaze:
- Indima kunye neembopheleleko (okhokela impendulo, onxibelelana nabalawuli basekuhlaleni).
- Inyathelo elithatha inyathelo lokuqulatha, lokuphelisa nokubuyisela.
- Isikhokelo sonxibelelwano sabathengi, amaqabane kunye neDPC.
- Iinkqubo zohlolo lwasemva konyaka ukuze zifunde kwisiganeko kwaye ziphucule ukhuselo.
Ukuqhuba imithambo ephezulu ngezantsi kwento eyenzekayo ngohlaselo lwekhompyutha qha qha qha qha qha qha, kunceda wonke umntu akwazi ukwenza ingqeqesho yakhe phambi kokuba kufike isiganeko sokwenene.
I-inshorensi Yesinyithi: Inethi Yokhuseleko, Asiyonto ingena endaweni
Ii-SMEs ezininzi zase-Ireland ngoku zithenga i-inshorensi ye-Irish ye-Inshorensi yogcino-lwazi ukuze zinciphise iziphumo zemali ezaphukileyo. Ngoxa oku kusenokuba luncedo, izikhuseli zifuna ubungqina obuthe chatha bokulawula ukhuseleko oluqinileyo (njenge-MFA, ugcino-khuseleko oluthe rhoqo, kunye noqeqesho lwabasebenzi) ngaphambi kokunikezela isigqubuthelo. Ngaphezu koko, i-inshorensi ye-ISCM ayikuthinteli ukulahleka kogcino-lwazi okanye ukonakaliswa okudumileyo; kufuneka ijongwe njengomaleko onenkxaso-mali, hayi njengomtshintshi wokhuseleko olunempembelelo. I-SMET kufuneka iphinde ihlolisise ngenyameko imigaqo yokhuseleko (umz.
Izisongelo Ezidityanisiweyo Nexesha Elizayo
Umgangatho wemeko-bume ye-intanethi uvela ngokukhawuleza. Ii-SMEs zase-Ireland kufuneka zihlale zisazi ngokuvela kwezisongelo zize zitshintshe iindlela zazo. Utyekelo lokubukela luquka:
- Ransware hias̆aService (Raas) – amaqela olwaphulo-mthetho ngoku athengisa izixhebo zentlawulelo kubahlaseli abangaphantsi kwe-936 ababulawayo, ukwandisa uhlaselo kumashishini amancinci.
- intlaselo yamatyathanga edityanisiweyo ye- – abahlaseli bajolise abarhwebi be-software okanye abanikezeli benkonzo ukulalanisa abathengi abaninzi abasezantsi. I-SMET kufuneka ivete imisebenzi yabo yesithathu yokhuseleko.
- AUMAII amandla okuhlasela – i-AI efumaneka ngejini ingenza ulweyiseko olungakumbi lwe-email e-ashing okanye unxulumano lwelizwi olunzulu. Uqeqesho kufuneka luguqulele ukuphendula la maqhinga antsonkothileyo.
- [[Utshintsho:0] lomthetho – ulungiso kunye nohlaziyo kukhuseleko lwe Nethwekhi nolweNkcubeko (IS) lungamisela iimfuno ezongezelelweyo kwezinye iiMenyu.
Kwikamva elinokusikhusela, iSMEs kufuneka zisebenzise indlela esekelwe kumngcipheko [1]: uvavanyo olusoloko luvavanywa, ukuchithwa kwezisombululo zokhuseleko ezinokunyuka, kwaye ugcine ukuphaphela kwezibonelelo ezinikezelwe yimizimba enjenge u-NCSC Ireland[ kunye [FLT] ne- Europol’s Cybercrime Centre[]].
Isiphelo
Ngokwamkela ezi migaqo-nkqubo zobuchule zegama eligqithisiweyo , i-MFA, ukuvala rhoqo, ukukhowuda, uqeqesho lomqeshwa, ugcino-lwazi olomeleleyo, ulawulo, kunye nezixhobo zokhuseleko olufanelekileyo `Irish SMEs zingawandisa ngokuphawulekayo amanyathelo okhuseleko ogcino-lwazi. Ukukhusela i-data kungekuphela nje kukhusela ishishini kwingozi yemali nedume kodwa kwakha noqinisekiso lokusebenzisana nokhuseleko lwe-GDPR kunye neminye imigangatho esemthethweni. Ukhuseleko logcino-data asiyo indawo ekhoyo kodwa luhambo oluqhubekayo; ukuvavanywa, kunye nonyuselo lwemicimbiso yemicimbiso ehlala ikhona. Ngokuzinikela kunye nobuncwane obulungileyo, kwaneevents ezincinci ziyakwazi ukwakha ukuma kokhuseleko oluqinileyo oluxhasa ukukhula.