현재 위치: WiKi Security Spirit » 인식제고 관리

차이

문서의 선택한 두 판 사이의 차이를 보여줍니다.

차이 보기로 링크

--- awareness [2013/07/12 02:50] – 220.71.11.86
+++ awareness [2013/07/18 02:26] – [정보보안 인식(Security awareness)] wiki1122
@@ 줄 2: / 줄 2: @@
 ===== 정보보안 인식(Security awareness) =====
+==== 정보보안 인식 개요 ====
+\\
+(techtarget.com)\\
+Security awareness training is a formal process for educating employees about computer security.\\
+A good security awareness program should educate employees about corporate policies and procedures for working with information technology (IT).  Employees should receive information about who to contact if they discover a security threat and how to handle confidential information. Regular training is particularly necessary in organizations with high turnover rates and those that rely heavily on contract or temporary staff.  Confirming how well the awareness program is working can be difficult. The most common metric looks for a downward trend in the number of incidents over time.\\
+\\
+보안인식 훈련은 컴퓨터 보안을 교육하는 정식과정이다.
+좋은 프로그램은 직원들에게 IT기술을 활용하는 업무에 대한 회사정책과 절차를 교육해야 한다.\\
+[NIST 보안인식훈련 가이드 [[http://csrc.nist.gov/publications/nistpubs/800-50/NIST-SP800-50.pdf|다운로드]]]
+----
 (출처 : wikipedia)\\
 보안 인식은 물리적이고 특별한 조직의 특별한 정보자산의 보호에 관련하여 조직 구성원의 지식과 태도를 말한다.
@@ 줄 23: / 줄 36: @@
 ----
-\\
-(techtarget.com)\\
-Security awareness training is a formal process for educating employees about computer security.
-보안인식 훈련은 컴퓨터 보안을 교육하는 정식과정이다.
-A good security awareness program should educate employees about corporate policies and procedures for working with information technology (IT).  Employees should receive information about who to contact if they discover a security threat and how to handle confidential information. Regular training is particularly necessary in organizations with high turnover rates and those that rely heavily on contract or temporary staff.  Confirming how well the awareness program is working can be difficult. The most common metric looks for a downward trend in the number of incidents over time.
-좋은 프로그램은 직원들에게 IT기술을 활용하는 업무에 대한 회사정책과 절차를 교육해야 한다.
-The National Institute of Standards and Technology (NIST) has an excellent publication with templates and guides for what should go into a security awareness training program. The 70-page document is available for free in PDF format from the institute's Web site.
-NIST는 보안인식훈련에 대한 좋은 템플릿과 가이드가 있다. 웹사이트에서 PDF문서로 다운로드 가능.

추적: