Ziziphi iiNkqubo zoLawulo loMngcipheko kwaye kutheni uzifuna?

Ukuthatha okuphambili

Isakhelo soLawulo loMngcipheko sinceda umbutho wakho ukuba ulungiselele iingxaki ezinokubakho

Isakhelo soLawulo loMngcipheko we-NIST yinkqubo karhulumente wase-US yokudala imigaqo-nkqubo yeziko ukunciphisa umngcipheko

Isakhelo soLawulo loMngcipheko sibhetyebhetye kwaye simanyene, kwaye sisixhobo esiluncedo kwimibutho yazo zonke iindidi kunye nobukhulu.

Njengoko ilizwe lisiya lisiba nzima ngakumbi, ngokunjalo nemingcipheko enokuthi umbutho ujongane nayo. Amashishini anamhlanje axhomekeke kakhulu kwihlabathi lehlabathi kunye nedijithali, kwaye ajongene nemingcipheko enxulumene neziseko ze-IT, amakhonkco okubonelela ngehlabathi kunye nemingeni eqhelekileyo yemeko yezoqoqosho ehlala iguquka. Ngapha koko, okukhona intsonkothile le nkqubo, kokukhona kuba lula ngayo ukuba ihlehliswe. Ngelixa singenako ukuphelisa yonke imingcipheko, izoyikiso, kunye nokutshabalalisa, kufuneka sithathe ulawulo lwemeko kangangoko sinakho. Ukubeka iinkqubo zokunciphisa iintlobo ezahlukeneyo zomngcipheko kubalulekile kumashishini awo nawuphi na ubungakanani, apho isicwangciso solawulo lomngcipheko siza luncedo.

Kule nqaku, siza kuphula i-5 Risk Management Components, eyimigangatho eqhelekileyo yokudala isakhelo sokulawula umngcipheko esinokuthi sisetyenziswe kwiingozi ezahlukeneyo kwimibutho eyahlukeneyo. Emva kokuchaza isakhelo esiqhelekileyo, siya kuxubusha i-NIST ye-Risk Management Framework ngokunzulu kwaye siyisebenzise kwizicelo ezithile kunye nemizekelo.

Ngawaphi amacandelo ama-5 oLawulo loMngcipheko?

1. Uchonga
2. Umlinganiselo novavanyo
3. Ukunciphisa
4. Ingxelo kunye nokuBeka iliso
5. Lawulo

Ukuchongwa komngcipheko

Okokuqala, kufuneka uchaze iingozi zangoku kunye nezinokwenzeka ezijongene nombutho wakho. Kweli candelo, uqhwithela lwengqondo:

• Zeziphi izoyikiso ezinokwenzakalisa umbutho wakho?
• Bubuphi ubuthathaka obunokusetyenziswa kukhuseleko lwemibutho yakho, iinkqubo okanye iinkqubo zeIT?
• Yintoni enokwenzeka ukuba isoyikiso ngasinye senzeke?
• Ezi zoyikiso zaziya kuba nayiphi imiphumo?

Icebiso: Uhlalutyo lwe-SWOT inokunceda ukuchonga ubuthathaka bangaphakathi kunye nezisongelo zangaphandle.

Umlinganiselo womngcipheko kunye novavanyo

Kwicandelo lesibini lesakhelo solawulo lomngcipheko, uya kwenza iprofayile yengozi nganye oyichongileyo. Unokulinganisa le mingcipheko ngeendlela ezininzi, kuxhomekeke kumbutho wakho kunye neshishini. Umzekelo, ubukrelekrele bokukhuphisana inokukunceda uvavanye imingcipheko enxulumene nabaqhubi abakhuphisanayo. Kungenjalo, isakhelo solawulo lomngcipheko womntu wesithathu sinokulinganisa ukuba yimalini enokuthi ilahleke, ngelixa isakhelo sengozi ye-cybersecurity inokulinganisa iindleko zethuba lokutshintsha inkqubo yokhuseleko yangoku xa kuthelekiswa nokuphucula.

Nje ukuba uzigqibile iiprofayili zomngcipheko, zibeke kwindawo encinci ukuya kwezona zoyikiso zinkulu. Gcina ukhumbula ukuba umngcipheko uyaguquka njengoko umbutho kunye nendawo yokusebenza kwayo iguquka, ngoko kuya kufuneka uliphindaphinde eli nyathelo ngamaxesha athile.

Ukunciphisa umngcipheko

Ngoluhlu olumiselweyo lweeprofayili zomngcipheko, umbutho wakho unokuqwalasela indlela yokunciphisa imingcipheko emikhulu, kwaye ufunde ukunyamezela abo bakumgangatho ophantsi. Umzekelo, umbutho odala isikhokelo solawulo lomngcipheko wonikezelo unokujolisa ekunciphiseni naziphi na iingozi ezinokubakho nomniki-nkonzo wawo omkhulu, nokuba ufuna ukuchitha ixesha elincinane kwabanye ababoneleli bawo.

Ingxelo yomngcipheko kunye nokubeka iliso

Icandelo lesine le-RMF lifuna ingxelo rhoqo malunga namanyathelo omngcipheko. Eli candelo livumela umbutho wakho ukuba ugcine umgangatho ophezulu womngcipheko kwaye uqinisekise ukuba izicwangciso zokunciphisa eziqwalaselwa kwicandelo lesithathu zisabalulekile kwaye zisebenza.

Ulawulo lomngcipheko

Icandelo lokugqibela kwisikhokelo solawulo lomngcipheko yinkqubo yolawulo. Ngamanye amazwi, imibutho kufuneka yenze inkqubo esesikweni esetyenziswa ngabasebenzi rhoqo ukuqinisekisa ukuba imingcipheko ilawulwa ngokufanelekileyo.

Yintoni iSakhelo soLawulo loMngcipheko we-NIST?

The Isakhelo soLawulo loMngcipheko (RMF) yaqala yadalwa ngumkhosi waseMelika ukuqinisekisa ukuba iinkqubo zolwazi olubuthathaka kurhulumente wobumbano zikhuselekile kwaye zigcinwe ngokukhuselekileyo. Okwangoku, iZiko leSizwe leMigangatho kunye neTekhnoloji (NIST) uphethe iSakhelo soLawulo loMngcipheko. I-NIST ihlaziya isakhelo ukuze ihambisane nenkqubela phambili yetekhnoloji kunye nobunzima obandayo behlabathi lanamhlanje.

Ngelixa i-RMF ekuqaleni yayidalelwe urhulumente wobumbano ukuba ajongane neenkqubo zobuchwepheshe bolwazi, sisixhobo esiluncedo esinokusetyenziswa kwiintlobo ezahlukeneyo zomngcipheko kwimibutho ekwicandelo labucala. Ke, isebenza njani iRMF?

Isakhelo solawulo lomngcipheko lwe-NIST senziwe ngamanyathelo asixhenxe. La manyathelo enza inkqubo esebenzayo, yeziko enokunciphisa ngokufanelekileyo imingcipheko yombutho. Makhe sijonge nganye kuzo.

Ngawaphi amanyathelo asixhenxe eNkqubo-sikhokelo yoLawulo loMngcipheko?

1. Lungiselela
2. Yahlula ngokweendidi
3. khetha
4. Phunyezwa
5. Vavanya
6. Mvume
7. Monitor

Lungiselela

Ukulungiselela ingundoqo wothungelwano oludityanisiweyo olwenza isakhelo solawulo lomngcipheko. Eli nyathelo lenza ukuba umbutho wakho ulungele ukwamkela isicwangciso esisemthethweni ngokuchonga imingcipheko, ukuseka ukunyamezela umngcipheko kunye nokwabela iindima kubasebenzi.

Ngelixa ukulungiswa ilinyathelo lokuqala, unokuphinda kwinqanaba ngalinye lenkqubo. Ukuba kukho into etshintshileyo, okanye uyaqonda ukuba ucingelo lwakho belungachanekanga, unokukufumanisa kuluncedo ukubuyela ekucingeni.

Ungasebenzisa icandelo lokuchonga ukubeka imingcipheko enokwenzeka, izoyikiso kunye nobuthathaka kwaye uqale ukwenza ezi ngcamango zibe zisicwangciso solawulo lomngcipheko.

Yahlula ngokweendidi

Udidi iyafana nokulinganisa kunye nokubeka iliso kunye namacandelo okunciphisa, kodwa isesikweni kakhulu kunokudwelisa nje imingcipheko eyahlukeneyo. Kweli nyathelo, uya kumisa ngokusesikweni imingcipheko ukusuka komncinane ukuya kwenkulu kwaye ukusuka kowona mncinci ukuya kowona ubalulekileyo. Esi sakhiwo sisetyenziselwa ukudala imigaqo-nkqubo yokunciphisa umngcipheko wombutho.

khetha

Kweli nyathelo lenkqubo, wena khetha izisombululo okanye imigaqo-nkqubo efunekayo ukunqanda okanye ukunciphisa imingcipheko echongiweyo ngaphambili. Ezi zisombululo ziya kubonakala zihluke ukusuka kwelinye iqumrhu ukuya kwelinye. Isakhelo solawulo lomngcipheko weshishini sinokubeka izisombululo zokuthintela ukubiwa kwepropathi enomgangatho ophezulu wokuqonda, ngelixa isakhelo solawulo lomngcipheko wokhuseleko lwe-cybersecurity siya kubonelela ngemilinganiselo yokuqinisa i-firewall yothungelwano.

Phunyezwa

Inyathelo elilandelayo kuku phumeza izisombululo ozikhethileyo. Le yinxalenye yesakhelo solawulo lomngcipheko apho ujika iingcinga zakho zibe zizenzo. Qinisekisa ukubhala inkqubo kunye neenkqubo ukuze izisombululo ezikhethiweyo zibe yimigaqo-nkqubo esesikweni yombutho.

Vavanya

Kweli nqanaba lesicwangciso solawulo lomngcipheko, wena vavanyo ukuphunyezwa kwezisombululo zakho zolawulo lomngcipheko. Injongo yeli nyathelo kukuqinisekisa ukuba izisombululo zenziwe ngokuchanekileyo, kwaye, okona kubaluleke kakhulu, ukuba zenze iziphumo ezifunwayo. Ukuba akunjalo, kuya kufuneka ujongane naluphi na ubuthathaka kulawulo lomngcipheko.

Mvume

Kwi ugunyaziso inyathelo, uya kunika isigqeba okanye ilungu eliphezulu lombutho isishwankathelo sesicwangciso kunye novavanyo lokufumana imvume yabo esemthethweni yokuba inkqubo isebenza njengoko bekucetyiwe. Ukongeza, amalungu aphezulu kufuneka aqinisekise ukuba inkqubo yolawulo lomngcipheko iyahambelana nemithetho kunye nemigaqo-nkqubo yesebe.

Monitor

Isinyathelo sokugqibela sesicwangciso solawulo lomngcipheko sinokuthi, njengesinyathelo sokuLungiselela, senzeke nangaliphi na ixesha. Umbutho wakho kufuneka ngokuqhubekayo Iliso Iisistim ezisekiweyo ukuqinisekisa ukuba zisabalulekile, ziyasebenza kwaye zisebenza njengoko kucetyiwe. Ukuba kukho amathandabuzo okanye ukuqwalaselwa okutsha kuvela, abo bajongene nokugcina isakhelo solawulo lomngcipheko kufuneka babuyele kwisinyathelo sokulungiselela.

Singayisebenzisa njani i-NIST RMF kuLawulo loMngcipheko woShishino?

INkqubo-sikhokelo yoLawulo loMngcipheko ye-NIST sisixhobo esikhulu solawulo lomngcipheko weshishini (ERM), njengoko i-ERM ijongene nokunciphisa umngcipheko kwinqanaba lombutho. I-ERM inokuba linyathelo elibalulekileyo cwangciso so buchule njengoko naziphi na izigqibo ezenziweyo kufuneka zithathele ingqalelo iimfuno zefemu iphela hayi nje amacandelo ombutho. I-NIST RMF iqinisekisa ukuba umbutho uphela uqwalaselwe, kwaye ubonelela ngomzekelo wokudala imigaqo-nkqubo nemigaqo yenqanaba leziko.

Ukusebenzisa icandelo lokuchonga ngexesha lokuLungisa inyathelo livumela umbutho wakho ukuba ugxininise kwimingcipheko yangaphakathi nangaphandle. Umngcipheko wangaphakathi unokuba yinkqubo yolwazi ephelelwe lixesha echaphazela isebe elinye kuphela. Umngcipheko wangaphandle yingxaki eqhelekileyo enokuthi ichaphazele umbutho uphela, kunye namaqumrhu ahlukeneyo angaphakathi kumasebe.

Ngaphezu koko, kwinqanaba langaphandle, imingcipheko inokusebenza kumacandelo amashishini ahlukeneyo ngeendlela ezahlukeneyo. Umzekelo, utshintsho kwidemographics ludala imingcipheko eyahlukeneyo kwisebe lokuthengisa kunye nentengiso kunesebe lezemali. Ngokufanayo, ukongeza Icandelo loPhando ukuya kwicandelo lokuchonga lesakhelo somngcipheko we-NIST yenza i Uhlalutyo lomngcipheko esebenzayo ngakumbi. Okukhona unolwazi oluninzi, kokukhona unokwenza izigqibo ezingcono. Ukuba iimeko zedemografi okanye zoqoqosho ziyatshintsha, ukusebenzisa uphando olunzulu lweshishini kuya kunceda ukudibanisa iinyani zangoku kunye nentsingiselo yeshishini ngokubanzi.

Ingasetyenziswa njani i-RMF kuLawulo loMngcipheko weQela leSithathu?

Ulawulo loMngcipheko weQela lesithathu (TPRM) lufuna ukunciphisa umngcipheko onxulumene namaqela angaphandle njengabathengisi, ababoneleli kunye neekontraka. Uluhlu olupheleleyo lwe-NIST RMF lunokunceda ukunciphisa olu hlobo lomngcipheko. Izinto ezininzi azikho kulawulo lombutho wakho xa usebenza namaqela esithathu, ngoko ke ukulawula abo unako kubalulekile. Apha kulapho inkqubo-sikhokelo yolawulo lwengozi ebanzi yomntu wesithathu ingundoqo.

Ukuba umbutho wakho uxhomekeke ngokunzulu kumthengisi, ujongene nemingcipheko enkulu ukuba abakwazi ukulandela. Ukuwaphaphela amacandelo okunciphisa kunye nokunika ingxelo kunye nokubeka iliso kubalulekile, njengoko umbutho wakho kufuneka ulungele naluphi na utshintsho olungalindelekanga ukunciphisa umngcipheko womntu wesithathu.

Isakhelo solawulo lomngcipheko se-NIST siluncedo ekudaleni nasekugcineni imigaqo-nkqubo yombutho wolawulo lomngcipheko. Iinkqubo zentlangano ezenziwe ngokusemthethweni kwaye zenziwe ngokwesiqhelo zinciphisa ukungaqiniseki, okunceda kakhulu kwi-TPRM.

Isebenza njani i-RMF kuLawulo loMngcipheko woKhuseleko lweCyber?

Njengoko amaziko amaninzi ethatha imisebenzi kwindawo yedijithali, imibutho inesidingo esonyukayo sokhuseleko lwe-cyber. Imibutho yazo zonke iisayizi, ukusuka kwikona yevenkile ye-bodega ukuya kwinkampani ye-Fortune 500, ifuna isakhelo esinamandla solawulo lokhuseleko lwe-cyber.

Iindidi ezininzi zomngcipheko wokhuseleko lwe-cyber zikhona kwaye zinokwahluka ukusuka kumbutho ukuya komnye. Ukungaphumeleli kwenkqubo ngumngcipheko omkhulu, kwaye enye isebenza kuzo zonke iintlobo zemibutho. Ukuhlala uphaphile kwaye uqhuba iitshekhi ezingaguqukiyo kunciphisa ukubakho kokusilela kwenkqubo. I-NIST RMF sisixhobo esikhulu sokunciphisa umngcipheko wokungaphumeleli kwenkqubo ngokubanzi kuthungelwano lolwazi.

Iingcamango zokugqibela

Awungekhe wenze imisebenzi yakho ibe simahla, kodwa kukho iindaba ezimnandi: umbutho wakho unokwenza okuninzi ukunciphisa umngcipheko. Isakhelo solawulo lwengozi eyomeleleyo, efana ne-NIST RMF, iguquguquka kwaye ibambene, kwaye sisixhobo esiluncedo kwimibutho yazo zonke iintlobo kunye nobukhulu.

Umthombo ovela IBISWorld

Inkcazo: Ulwazi olubekwe ngasentla lunikezelwa yi-IBISWorld ngaphandle kwe-Chovm.com. I-Chovm.com ayenzi lumelo kunye neziqinisekiso malunga nomgangatho kunye nokuthembeka komthengisi kunye neemveliso.