Dasar Keselamatan ICT MATRADE

DASAR KESELAMATAN ICT MATRADE iv 0702 Pengurusan Capaian Pengguna ................................................... 34 070201 Akaun Pengguna ............................................................................. 34 070202 Jejak Audit ........................................................................................ 36 0703 Kawalan Capaian Sistem dan Aplikasi .......................................... 36 070301 Sistem Maklumat dan Aplikasi......................................................... 36 0704 Bring Your Own Device (BYOD)...................................................... 37 070401 Keperluan dan Kawalan Penggunaan BYOD.............................. 37 PERKARA 08 PEMBANGUNAN DAN PENYELENGGARAAN SISTEM ....................... 39 0801 Keselamatan Dalam Membangunkan Sistem dan Aplikasi ........ 39 080101 Keperluan Keselamatan .................................................................. 39 0802 Kriptografi .......................................................................................... 39 080201 Penyulitan ( Encryption ) .................................................................... 39 080202 Tandatangan Digital ........................................................................ 39 080203 Pengurusan Kunci Kriptografi .......................................................... 40 0803 Fail Sistem .......................................................................................... 40 080301 Kawalan Fail Sistem.......................................................................... 40 0804 Pembangunan dan Proses Sokongan ........................................... 40 080401 Kawalan Perubahan ........................................................................ 40 080402 Pembangunan Perisian Secara Outsource ................................... 41 0805 Kawalan Teknikal Keterdedahan ( Vulnerability )........................... 41 080501 Kawalan Dari Ancaman Teknikal.................................................... 41 PERKARA 09 PENGURUSAN KESINAMBUNGAN PERKHIDMATAN ......................... 42 0901 Dasar Kesinambungan Perkhidmatan ........................................... 42 090101 Pelan Kesinambungan Perkhidmatan ( Business Continuity Plan )42 090102 Salinan Pelan Kesinambungan Perkhidmatan ( Business Continuity Plan )................................................................................. 42 090103 Pengujian Pelan Kesinambungan Perkhidmatan ( Business Continuity Plan )................................................................................. 43 PERKARA 10 PEMATUHAN ...................................................................................... 44 1001 Pematuhan dan Keperluan Perundangan.................................... 44 100101 Pematuhan Dasar ............................................................................ 44 100102 Kelangsungan Pematuhan Dasar.................................................. 44 100103 Keperluan Perundangan ................................................................. 44 100104 Pelanggaran Dasar.......................................................................... 45 DAFTAR ISTILAH ....................................................................................................... 46 Lampiran 1…………………………………………………………………………………48 Lampiran 2…………………………………………………………………………………49 Lampiran 3…………………………………………………………………………………52 Lampiran 4…………………………………………………………………………………54