Kule mihla, ukulahlwa okukhuselekileyo kogcino-lwazi kuyinxalenye ebalulekileyo yokhuseleko lolwazi kunye nenkqubo yokuthobela inkqubo yombutho. Kwishishini elisebenza e-Ireland, imbopheleleko yokutshabalalisa ugcino-lwazi lobuqu nolwemfihlo idlulela ngaphaya komsebenzi olungileyo – yimfuneko esemthethweni phantsi kwe-General Data Protection Regation (GDPR) kunye nomthetho onxulumene nayo wase-Ireland. Ukungaphumeleli ukusebenzisa iinkqubo zokulahla ulwazi oluqinileyo kungabhenca imbutho ebalulekileyo, ityala elingokwasemthethweni, kunye nomonakalo ongenakuguqulwa. Eli nqaku lichaza isakhiwo solawulo esibanzi eIreland kwaye linika ubuchule obucacileyo bokulahlwa kwedata, uphuhlisomthetho, uphuhliso-nkqubo yokufihla imfutho, ukonakalisa okungqinelayo, ugcino-ncwadi, uqeqesho, iinkqubo zokusebenza, iinkqubo zokudityaniza-omatshini eziqhubekayo.

Ukuqonda Imithetho Engafunwayo Yogcino - lwazi EIreland

Ukhuseleko logcino-lwazi lwe-Ireland lulawulwa ngokuyintloko yi-GDPR, eyasebenza ngo-Meyi 2018, kunye noMthetho woKhuselo logcino-lwazi 2018, odlulisela iGDPR kumthetho wase-Ireland. I-GDPR ifuna ukuba i-data yobuqu igcinwe ikwimo evumela ukuchazwa kwee-data ezikhoyo kungabikho mfuneko kwinjongo apho ugcino-lwazi luchanekileyo (i-Artle 5(e)). Xa ixesha lokubuyiselwa kolwazi liphela okanye ingasafuneki, kufuneka icinywe ngokukhuselekileyo okanye i-ofihlwaye. Umgaqo wokuphendula ityala (i-5cle(2) uthetha ukuba imibutho imele ikwazi ukubonakalisa ukuthobela iimfuno zokulahlwa.

IKhomishini yoKhuselo logcino-lwazi (DPC) yaseIreland ligunya lesizwe elijongene nokunyanzelisa iGDPR. I-DPC inamandla okukhupha iimali zolawulo ezizizigidi ezingama-20 okanye 4% zojiko-mali lwaminyaka le lwehlabathi lonke – nayiphi na engaphezulu – ukuchasa okunzulu, kuquka ukungaphumeleli ukuvala ulwazi lobuqu. Ukongeza kwimimiselo yeGDPR, imimiselo yecandelo enokuthi imisele iimfuno ezongezelelekileyo zokulahlwa. Umzekelo, iinkonzo zemali ziphantsi kweBhanki yaseMbini yengxelo yengxelo nentshabalazempilo ekhuselweyo, ngoxa ulwazi lwempilo luphantsi kwemigaqo yokhuseleko ye-data. I-Cremon (Unicella iReflassstionsmentsments) I-Ad wincel 20171717 i-mthetho yolwaphulo-mthetho lwezolwaphulo-mthetho lwezolwaphulo-mthetho okanye ukulawulwa kwemithetho elawula ukulawulwa kwemithetho yezomthetho yezomthetho yezo.

Imibutho kufuneka iqaphele ukusetyenziswa kwezixhobo zokhuselo logcino-lwazi kunye nomthetho wokusingqongileyo. UMthetho woLawulo lweWaste kunye noMthetho we-WeEEdice waseYurophu ulawula ukulahlwa kwezixhobo ze-elektroniki, kuquka izixhobo zokugcina. Ukulahla inqwelo-mafutha eqinileyo okanye abancedisi ekulahlwayo jikelele akuvumelekanga kwaye kungakhokelela kwisohlwayo. Endaweni yoko, izixhobo ezigunyazisiweyo zombane kunye nezombane (WEE) kufuneka zisetyenziswe, ezijikayo ziqinisekise ukonakala kogcino-lwazi ngaphambi kokuba luphinde lusetyenziswe.

Ikhomishini yoKhuselo logcino-lwazi yeKhomishini yeKhomishini yoKhuselo inikela ukhokelo kugcino-lwazi lokuzinza nokucima, kuquka iisikhokelo zocwangciso logcino-lwazi kunye neefomu zokwazisa zokwaphula. Ukongezelela, iEuropean Data Protection Board (EDPB) ipapasha izikhokelo phakathi kwezixhobo ezikulungelo lokuqinisekisa ukuqinisekisa kunye nezinye izibophelelo ezisemthethweni. Ukuqonda ezi maleko zolawulo linyathelo lokuqala ekwakheni inkqubo yokulahlwa kogcino-lwazi olupheleleyo.

Izenzo ezingcono zokungakhuselwa kogcino-lwazi

1. Ukuphuhlisa umgaqo-nkqubo ongooData oBanzi

Inkqubo yokulahla ugcino-lwazi olusemthethweni yisiseko sayo nayiphina inkqubo yokulahla ekhuselekileyo. Inkqubo kufuneka ichaze iindima neembopheleleko ezicacileyo, ngokwabela umphathi woKhuselo logcino-lwazi (DPO) okanye uMphathi woKhuseleko loLwazi, nemisebenzi esebenzayo enikezelwe i-IAI, izibonelelo, kunye nerekhodi zamaqela olawulo logcino-lwazi oluphathekayo, kuquka iingxelo zephepha, iidrayithi eziqinileyo (SSD), iikhasethi zezixhobo zokuxhasa iselula, kunye nogcino-data olunogcino-lwazi olunogcino-lwazi olunogcino-lwazi olunolwazi olunoludwe lwamafu.

ezingundoqo zomgaqo-nkqubo wokulahla osebenzayo ziquka:

  • Uhlelo lwe-DAT – ugcino-lwazi oludityanisiweyo ngolwazi (umz., uwonke-wonke, ngaphakathi, ekufihlakeleyo, oluthintelweyo) ukuze iindlela zokulahla zihambelane namanqanaba omngcipheko.
  • [[NKQUBO:0] Imisebenzi yenjongo – ichaza amaxesha asemthethweni nangokwentengiselwano ohlobo ngalunye logcino-lwazi, i-oyile yokuqulunqa imiyalelo yemithetho efana noMthetho weCompanies 2014 (olufuna iminyaka esixhenxe yebhathiso yengxelo yemali).
  • Imigaqo yokukhupha [[FLT: 0] – ifuna umphathi okanye uphawu lokuphuma olusemthethweni phambi kokuba umonakalo ongalungisekiyo wenziwe.
  • [[UMTL:0] Iimodys kunye nemigangatho – ibhekisa kwimiqathango yentshabalalo ekhethekileyo (umz., iNST SP 800-8 ISiGUBO 1, ISO/IEC 27001, okanye NAID AAA Crective) ukuqinisekisa ukungaguquguquki.
  • I-Chain yelungelo lokugcina – ukubhaliweyo intshukumo yempahla yogcino-lwazi ukusuka kwindawo yokugcina esebenzayo ukuya kwintshabalalo ukuthintela ukufikelela okungagunyaziswanga.

Inkqubo kufuneka ihlolwe ubuncinane ngonyaka, okanye nanini na kuvela utshintsho olubalulekileyo kumthetho okanye kubugcisa. Bonke abasebenzi abafikelela kugcino-lwazi kufuneka bavume inkqubo njengenxalenye yoqeqesho lwabo olukwibhodi kunye nolonyaka.

Sebenzisa iindlela zoloyiso logcino-lwazi eziqinisekisiweyo

Asizizo zonke iindlela zotshabalaliso logcino-lwazi ezidalwe ngokulinganayo. Indlela ekhethwayo ixhomekeke kuhlobo lwe media, ubuchule bolwazi, kunye nomgangatho ofunekayo wesiqinisekiso. Kwizixhobo zokugcina amanani, ezi ndlela zilandelayo ziqwalaselwa ngokubanzi njengesebenzayo:

  • [[UMTL: 0] Umonakalo onzulu – ukrwada, ukutyumza, okanye ukucola, okanye okunye ukukhupha iidrayivi kunye nezinye izixhobo zokugcina izinto ezisebenzisa izixhobo zoshishino. Le ndlela ayiguquki kwaye ilungele ugcino-lwazi oluphezulu. Umzekelo, umqhubi onzima anganciphisa idiski kwiceba elincinane lentsimbi, ukuqinisekisa ukuba akukho data enokuthi ifumaneke ngokungaqhelekanga kwizixhobo zekhompyutha.
  • Ukukhupha - ukubhenca ugcino-lwazi olunemazibuthe (njengee-HDDs zesithethe kunye neekhasethi zikazibuthe) kumhlaba onamandla, otshintshanayo ocima ugcino-lwazi. Ukukhupha iredisi kuguqula i-media ingasebenzi, ngoko ke kufuneka ilandelwe ngokutshabalalisa ngokoqobo okanye ngokubuyisela izinto. Ukukhupha akuncedi kwi-SSD okanye izixhobo ezisekelwe kwiflash.
  • Ukucima amanani okucima - usebenzisa isoftware ukubhala iipateni (umz., onke ama-zero, zonke, okanye ugcino-lwazi olungacwangciswanga) kuyo yonke indawo yokugcina, ngokufuthi zidlula ezininzi. Imigangatho efana ne-U.S. Isebe lokhuselo 5220.22-M 3-iposi ezibhaliweyo) okanye i-NIST SP 800 88 (iindawo ezidlula izithuba ezininzi). Noko ke, i-SSD yexesha langoku ayinakuphendula ngokuthembeka ukuthatha ngaphezulu komgangatho kunye neendawo ezigciniweyo; i-SSD, i-compsety requence okanye umonakalo okhoyo iyanconywa.
  • [[FLT: 0] Isiqinisekiso sokhuphelo lwendlela ye xpotographic com - qinisekisacima isitshixo sokukhowuda esikhusela idata, ukwenza ugcino-lwazi lungafumaneki nokuba umbhalo ofihlakeleyo uhlala ukhona. Le yindlela ekhawulezayo nesebenzayo yezixhobo usebenzisa ufihlo olupheleleyo lwe disk (umz., BitLocker, Filevault, LUKA). Emva kwe xhulust, idromaise, ingasetyenziswa okanye ibuyiselwe kwakhona ukuba ufihlo lusetyenziswe ngokufanelekileyo.

Iziko kufuneka zenze abanikezeli abanconyelweyo benkonzo yokonakaliswa kogcino-lwazi. Khangela abanikezeli abaliqela ababambe ANAID AAAITCENT, eyinkqubo yokuzibonelela engqinelana nokhuseleko olungqongqo, imisebenzi, kunye nemigangatho yenkonzo yabasebenzi yokuvavanya. E-Ireland, kukho iinkampani ezininzi ze-NAID ezinika iinkonzo zokutshabalalisa nokucima. Xa ukhetha umnikezi, isicelo sesiqinisekiso somonakalo (Oo-CoD) ochaza iinkcukacha zesixhobo sokwenza, imodeli, inombolo, unxibelelwano, umhla, kunye nokungqina. Ukugawula kwezi CoD kuyimfuneko kwimisebenzi yokuhlola kunye nobungqina bokubuyisela umva.

3. Gcina Ubungqina Nombhalo Opheleleyo

Phantsi komgaqo we-GDPR wokuphendula, imibutho kufuneka ikwazi ukubonisa ukuba iyazithobela iimfanelo zokulahlwa kogcino-lwazi. Uxwebhu lwe-Comprehensive lusebenza njengobungqina benkuthalo kwisiganeko sophando lwe-DPC okanye imbambano engokwasemthethweni.

  • Uludwe lwezixhobo ezigcina ugcino-lwazi, kuquka indawo yazo, abagcini, kunye nolwahlulo lwe-data.
  • Ingxelo yazo zonke izinto ezinokutshatyalaliswa, kuquka imihla, iindlela ezisetyenzisiweyo, abasebenzi ababandakanyekileyo naziphi na iziqinisekiso zomonakalo.
  • Ubungqina bokuqeqeshwa kwabasebenzi kwiinkqubo zokulahlwa kwenkunkuma.
  • Ingxelo yophicotho-zincwadi, lwangaphakathi nolwangaphandle, olulahliweyo.

Uxwebhu lungagcinwa kwinkqubo yolawulo lwempahla zamanani okanye kwiprograma elula, ukuba iquka ulawulo olufanelekileyo lokufikelela kunye nembali yoguqulelo. Ixesha lokuzigcina iingxelo zokulahlwa kufuneka landise ngaphaya kobomi be-data ngokwayo – ubuncinane iminyaka emithathu emva komhla womonakalo, nangona eminye ishishini lifuna ixesha elide (umz., iminyaka emithandathu ukwenzela iinkonzo zemali phantsi kolawulo lweBhanki eliPhakathi-mbini kunye nolawulo lobuGcisa).

4. Isiqinisekiso sokuKhuselwa kweSikhuseli sogcino-lwazi olusemzimbeni

Iifayile ze media media- media- transmitted, ii-scripts ze-USB, ii-optic discs, kunye neekhasethi ezinomtsalane – ziveza ubungozi obubodwa ngenxa yokuba zinokubekwa ngaphandle lula okanye zebiwe. Iintlanganiso kufuneka zisebenzise ezi migaqo ilandelayo:

  • Lungisa ukuqokelelwa kwezitshixo zebini – iinguqu ezibonakala ngokucacileyo zezikhongozeli zokugcina isixhobo sokugcina ulwazi lulindele utshaba olukwindawo ezilawulwayo.
  • IChenin yefomu zokugcina umntwana – ukulandelela umbutho wezixhobo zekhompyutha ukusuka kwinqaku lembutho ukuya kwisibonelelo sentshabalalo, nentsayino kwisandla ngasinye.
  • [[UMTL:0] Kumonakalo osusiweyo. ongaphandle komonakalo – kumonakalo ozizinzileyo (usebenzisa iilori ezishukumayo ezikrweliweyo) unikezela ngowona mgangatho uphakamileyo wokhuseleko, njengoko ugcino-lwazi lungaze lushiye indawo. Ukutshatyalaliswa okungekhoyo ngomnikezeli oqinisekisiweyo kwamkelekile ukuba ulawulo olungqongqo lusendaweni.
  • Ukulondolozwa kogcino-lwazi kunye nokuthobela okusingqongileyo - - kuqinisekisa ukuba inkqubo yokutshabalalisa ilandelwa kukuphinda isetyenziswe kwakhona okunembopheleleko ngokungqinelana neWeEEDive Direction. Fumana isiqinisekiso esibhaliweyo sokuba umlondolozi wezinto zokuphinda zisetyenziswe azizukuzama ukufumana ugcino-lwazi kumajelo atshabalalisayo.

Kwingxelo zephepha, ucangciso olunqamlezileyo (kwincindi ye 4×40 mm okanye encinane) luyanconyelwa, njengokuba amachaphaza omchako ephinda ahlanganiswe ngesandla. Iinkonzo ezininzi zokwaleka komsebenzi zinika ii-consoles ezikhuselekileyo ezifaka iphepha ngokuzenzekelayo kwisikhongozeli esitshixiweyo.

Amacebiso awongezelelekileyo okungasetyenziswa kogcino-lwazi olunempumelelo

Uqeqesho lwezithuthi

Impazamo yomntu ingunobangela ophambili wokwaphuka kogcino-lwazi, kwaye ukulahlwa okungafanelekanga akuyonto ingaqhelekanga. onke amalungu abasebenzi aphatha i-data kufuneka aqeqeshwe kwiinkqubo ezifanelekileyo zokulahla ulwazi lokwenyama nolokusebenza kwamanani. Uqeqesho kufuneka lugqume:

  • Indlela yokubona inkcazelo efikelele ekupheleni kwexesha lokuzinza kwayo.
  • Ukusetyenziswa kakuhle kwemigqomo eqhekeziweyo kunye nezixhobo zokucima zamanani.
  • Ukubaluleka kokungaze ulahle idata kwinkunkuma eqhelekileyo okanye ngokuthengisa izixhobo ezindala ngaphandle kwe-exasure.
  • Iziphumo zokungahambelani, kuquka ityala lobuqu lobungakhathali obugqithisileyo.

Kufuneka kulungiselelwe uqeqesho oluhlaziyayo minyaka le, kwaye iingxelo zababekho zigcinwe. Uqeqesho olucacileyo lungafuneka kubasebenzi abasebenzisa amanani okucima, abaphathi bezakhiwo abajonge ukutshatyalaliswa komzimba, namaqela abalawuli beerekhodi.

Isalathisi somsebenzi wePhondo

Uphicotho-zincwadi lwamaxa athile luqinisekisa ukuba imigaqo-nkqubo yokulahlwa iyalandelwa kwaye ibonise iindawo ekuza kuphuculwa kuzo. Iqela langaphakathi lophicotho-zincwadi okanye umntu wesithathu kufuneka ahlole:

  • Ukunamathela kwinkqubo yokulahlwa kumaziko.
  • Uxwebhu olupheleleyo nocoselelo lotshabalaliso.
  • Ukhuseleko lweendawo zokugcina apho ugcino-lwazi lulindele utshaba lugcinwa khona.
  • Ukwenziwa korhwebo (ukuba usebenzisa iinkonzo zotshabalaliso zesithathu).

Iziphumo zophicotho-zincwadi kufuneka zibhalwe kwaye zixelwe abalawuli abaphezulu. Naziphi na iingcebiso ezingezizo ezifanelekileyo kufuneka zichazwe ngokwezicwangciso zesenzo sokulungisa, ezinemigca yexesha lokulungisa. Ukongeza, imibutho kufuneka iqhube uhlolo lobungozi oluthe rhoqo ukuvavanya ukuba ingafunyanwa kusini na kusini na i-data edityanisiweyo – umzekelo, ngokuzama ukufunda i-data kwidrive esuliweyo phambi kokuba itshatyalazwe ngokoqobo.

Ukusebenzisa Isiqinisekiso Ukunciphisa Iingozi

Ukukhowuda lulawulo olunamandla olukhuselayo oluqinisekisa ukulahlwa okukhuselekileyo. Xa idata ifihliwe ekuphumleni (usebenzisa imithetho eqinileyo enjenge AES-256), utshabalo lwesitshixo sokukhowuda lubangela ugcino-lwazi lungabinako ukufumaneka, nokuba isigcina--ndaba asitshatyalaliswanga ngokoqobo. Le ndlela, eyaziwa ngokuba yi-chrofish resource resoursure, ibaluleke kakhulu kwii-SSD kunye nogcino lwamafu, apho ukucinywa kwesithethe kungayisebenziseki okanye kungaphelelanga.

Ngoko, ukuvulwa kombhalo ofihlakeleyo kukodwa akusisisithakazeleli senkqubo yokulahla efanelekileyo. Iintlangano kufuneka zisenazo izicwangciso zokutshabalalisa ngokoqobo okanye eziqulathe ugcino-lwazi olunovakalelo, kuba amaqhosha okuguqulela anokufunyanwa kwindawo elahlwa inkumbulo okanye ukuba uzalisekiso lokukhowuda lunezinto ezingaqhelekanga. ISIKHINIS SSA 800 8. imigaqo enika uphakamiso oluneenkcukacha ekudityani ufihlo oluno olukhoyo nomonakalo okhoyo.

Phatha iingozi zecandelo lesithathu kunye noMphathi-majoni

Imibutho emininzi yase-Ireland ikhupha utshaba logcino-lwazi olunexabiso elikhethekileyo kubathengisi abakhethekileyo. Ngeli xesha oku kunokuzisa indleko eninzi, ichaza umngcipheko owongezelelekileyo. I-GDPR ifuna ukuba abaququzeli bogcino-lwazi (kuquka abanikezeli bomnqamlezo) banike isiqinisekiso esaneleyo sokuzalisekisa imilinganiselo yobugcisa neyombutho. Iintlangano maziqhube inzondelelo efanelekileyo kubarhwebi, kuquka:

  • Ukuhlola iziqinisekiso zabo (umz., NAID AAA, ISO 27001).
  • Ukuqinisekisa imvelaphi yabaqeshwa babo kunye nezivumelwano ezingakhange zihlawulwe.
  • Ukufumana iikopi zemigaqo-nkqubo ye-inshorensi (ityala le-inshorensi elingokwasemthethweni netyala lekhompyutha).
  • Ukuvavanya rhoqo iindawo kunye neenkqubo zazo.

Isivumelwano nomthengisi kufuneka siquke isivumelwano solungelelwaniso logcino-lwazi esichaza iindlela zokonakaliswa, iimfuno zoxwebhu, kunye nezibophelelo zokwazisa kwisiganeko sesiganeko. Igalelo elisekunene ukuya kutsho kwi-audit kufuneka liqukiwe, ukuvumela umbutho ukuba uqhube uhlolo olungalindelekanga.

Khawucinge Ngebhayisekile Yogcino - lwazi Engenakutshitshiswa

Ulawulo olukhuselekileyo linqanaba lokugqibela logcino-lwazi lobomi bebhayisekile, kodwa kufuneka kucetywe ukusuka kwixesha elimiswa ngalo idata. Xa kuyila iinkqubo ezintsha, qwalasela indlela idata ezakucinywa ngayo ngokukhuselekileyo ekupheleni kobomi bayo obuluncedo. Umzekelo, iinkonzo zamafu zinika udweliso oluzenzekelayo lwemimiselo yokususa idata emva kwexesha elicwangcisiweyo. Noko ke, abanikezeli bamafu bangagcina inkxaso okanye iziqobo ezifuna ukucinywa. Iintlanganiso kufuneka zihlolisise kwakhona ugcino-data oluhambisa amafu olususa amandla olwazi nokufumana isiqinisekiso sokuba idata isuswa ngokungenakususwa kuyo yonke indawo yokugcina ii-media, kuquka iintlobo zolungiso lwentlekele.

Ngokufanayo, xa ufaka i-hardware entsha (i-laptop, iiseva, iselula yocingo), iquka imfuneko yokuba isixhobo sixhase imisebenzi yokucima eqinisekisiweyo (umz., ATA Isibonelelo esikhuselekileyo ngenqwelo-moya, ukumiselwa kweFektri kucwangciswe ngefowuni). Oku kuqinisekisa ukuba ukulahlwa kwenqanawa kunokuphunyezwa lula nangokungqinelana ngabasebenzi be-IT ngaphakathi.

Ukuhlala Sikulungele Ukunyamezela Nokukholosa

Ukulahlwa kogcino-lwazi olukhuselekileyo asilophulo elinye kodwa yinkqubo eqhubekayo efuna ukuzinikela kuwo onke amanqanaba ombutho. Ngokwamkela imisebenzi edweliswe ngasentla – kwiinkqubo ezichaza intsingiselo kunye neendlela zokutshabalalisa eziqinisekisiweyo zokuqinisekisa uxwebhu kunye noqeqesho lwabasebenzi – imibutho eIreland ingahlangabezana neemfuno zabo ezisemthethweni phantsi kwe-GDPR kunye nemithetho enxulumene nayo. Okubaluleke ngakumbi, babonakalisa impucuko yobuphathi bogcino-lwazi eyakha ukuthemba abathengi, amaqabane, kunye nabalawuli.

Hlola rhoqo ugcino-lwazi lwakho lokulahlwa ngokujikelezayo kukhawuleze ukuqwalasela izisongelo kunye nobugcisa. Unyuko lwezikhokelo zelizwe eziqinileyo, ifu elikwindawo efihlakeleyo, kunye neIOT ziyenze ukonakalisa ugcino-lwazi lwaba ntsokothile kakhulu kunangaphambili. Hlala usazisiwe malunga nokuhlaziywa kwemigaqo yolawulo kunye nemigangatho yoshishino, enjenge ye-Eupanon Techology Proteid Board yokhuseleko lwendawo yokwazisa ukuchasa ulwazi [, okungachaphazela ngendlela engabonakaliyo iinkqubo zokulahla inkqubo. Ulawulo logcino-data olunexabiso logcino-lwazi lunciphisa umgangatho wokwahlulo logcino-lwazi olubiza imali kwaye luqinisa udumo lomlawuli wezogcino-lwazi olunenkathalo.