现代资讯系统安控的挑战与因应之道.pptVIP

現代資訊系統安控的挑戰與因應之道 呂欣 專案技術部經理 大型企業業務暨經銷事業處 台灣微軟 資訊系統安控的問題點 大多已購買資安設備 大多已作過系統安全修補購買防火牆 大多已購買入侵偵測 大多已購買防毒程式 IT Service Management Security BS7799 / ISO17799 IT Infrastructure Library (ITIL) Microsoft Operations Framework (MOF) ITIL Models MOF ITIL and BS7799 Working Together ITIL is descriptive ITIL leverage BS7799 for Security Management MOF leverages and extends ITIL ITIL + MOF = IT Service Management MOF leveraging ITIL retains common terminology MOF extends ITIL showing how to implement IT Service Management MOF provides context for Microsoft technologies ITIL MOF Process Model Communication Communication Goals (metrics) Tools Processes ITSM Organization Technology Leadership Activities People Technical Infrastructure Knowledge RR Skills Source: the Art of Service ITIL Microsoft MOF BS7799 Service Delivery Service Support Incident Management Problem Management Configuration Management Change Management Release Management Continuity Management Availability Management Capacity Management Financial Management Service Level Management Service Desk Security Management BS7799 BS7799