????????????(ISO 27001)??

1
?????????????????????????2006/ 3/ 6
2
???????????

• ???????????
• ????????????(ISO 27001)??
• ???????????
• ????????????????????????????
• ???????????????
• ??????(Business Contingency Planning)????
• ?????????????
• ???????????
• ???????????????
• ??????????
• ??????????
• ?????????????
• ??????????
• ????????????
• ??????(System Harden)????
• ????????
• ERP??????????
• ????(CA)/??????(PKI)????

3
?????????????????

• ?????????????
• ?????????
• ????????????????????
• ?????????????????
• ???????????????
• ?????????????
• ???????????????????
• ????????????
• ????????????
• ??????????????
• ???????????

4
??????????????????

• ???????
• ?? / ???????2 ?
• ????28 ?
• ????32 ?
• ???????
• ??????????27 ?
• ??????????38 ?
• ???????18 ?

• ????
• ???????????(CISA) 25 ?
• ??????????(CISSP) 3 ?
• ??BS7799 ISMS??????? 10?
• ???????????(CISM) 6?
• ??????????? (CBCP) 1 ?
• ISO 9001 ????? 1 ?
• ??????? (PMP) 1 ?
• ?????????(CIA) 8 ?
• ???????? (CEH) 2?
• ????????/????????? 3 ?
• ???????(CPA) 7 ?
• CISCO??????????(CCNA/CCNE) 2?
• ??????? (MCSE) 3 ?
• SUN-Java SCJP?? 3?

5
???????????????
2
4
4
1
3
1.??????
2.??????
3.??????
5
4.??????
5.??????
6
????????????
7
?????????? Information Security Framework SM

• ????????????,????????????????,?????????

?????? ???
?????
????
??Know-How??????????/??
?????????
????
???????????????????
????
?????? ????????????
?????
????(?Windows 2000?UNIX?)
????
?????????????????????
????
???????????????????????
????
8
??????????????????
??
??
??
9
??ISO27001?????????
????
????
?????
?????
?????
????
???
????
???
????
?????
????
?????
????
?????
????
????
????
?????
????
??
????
????
????
????
??/eMail
???
????
??
??
????
???
????
??
??????
?????
????
????
????
??
???
????
????
??
????
?????????
??
????
??/??
??
??
??
????
??
?????
????
????
????
????
???
?????
??
??
??
??
10
Deloitte???????????
11
???????????????????
12
???????????????(Sample)
13
????ISO?????????? - ????????????
???? ??
???? ??
???? ??
???? ??
14
?????????
???? -???? -??? -???? -???? -????
??????? -???? -???? -????
-???? -???? -???? -Email?? -e-Room
-???? -???? -????
15
Deloitte Enterprise Risk Services ?????
Deloitte ?????????????????????????????????????
????????????
????????????
?????????
????????????
??????????CISSP??
????????????
????????????????
16
Deloitte?ISO27001????BSi?????????
17
ERS ???????? - ???
ING???? BS7799???????????
???? BS7799???????????
???? ????????????
?????? BS7799??????????? ISO?BS7799???? VISA CARD
AIS Review
???? BS7799???????????
??????/??? BS7799???????????
?????? ????????????? BS7799??????????
???? ?????????????
???? BS7799???????????
18
ERS ???????? - ???(?)
19
ERS ???????? - ???(?)
20
ERS ???????? - ??????
???? ???????? ?????????? ????????
???? BS7799?????????? ISO?BS7799????
???? BS7799??????????? IT???????? ?????????
?????? - ???? BS7799??????????
???????? ??????????? ISMS??????????
???? ?????????????
???? BS7799??????????
???? BS7799???????????
21
ERS ???????? ???????
22
http//www.deloitte.com.tw