중소기업 ISMS수립 지원을 위한 정보보호지침서 및 서식 모음

1. (ISMS) 2006. 6.

2. 1. 2. 3. 4. 5. 6. 7. . . ISMS

3. 1. () 1.3.12. () 1.3.13. (3) 1.3.2 34. 1.3.15. 1.3.16. ID 1.3.17. 1.3.18. (SLA) 1.3.3 1. 1.5.12. 3. 4. 5. 1. 1.7.12. 1. / 2.2.82. / 3. 2.2.94. 2.2.11 1. / 2.2.82. / 3. 2.2.94. 2.2.11 1. 2.2.7- ( ) 1.1.2 1.4.1 1.6.1

4. : ISCS-GU-003 : 1.00

5. 1.00 2005.04.01

6. .................................................................................................................................................... 4.................................................................................................................................................................. 9........................................................................................................................................................ 9 ................................................................................................................................................ 9 ................................................................................................................................................ 9 ........................................................................................................................................... 9 .................................................................................................................................................. 9 ................................................................................................................................................ 92.1.1 ..................................................................................................................................... 92.1.2 ................................................................................................................................... 102.1.3 ................................................................................................................................... 102.1.4 3 .............................................................................................................................10 ...................................................................................................................................102.2.1 .....................................................................................................................102.2.2 .....................................................................................................................10........................................................................................................................................ 112.3.1 .................................................................................................................................112.3.2 ....................................................................................................11 .......................................................................................................112.4.1 ........................................................................................................................112.4.2 ..........................................................................................................112.4.3 ................................................................................................................................122.4.4 ................................................................................................................................13 ................................................................................................................................. 133.1 .........................................................................................................................133.2 .........................................................................................................................143.2.2 .........................................................................................................143.2.3 .............................................................................................................14................................................................................................................................................................ 154.1 ............................................................................................................................................. 154.2 .......................................................................................................................................... 154.3 ......................................................................................................................................... 15......................................................................................................................................................... 15 .......................................................................................................................................................... 1

7. ......................................................................................................................................................... 1.................................................................................................................................................. 1.................................................................................................................................................. 1.................................................................................................................................................. 1........................................................................................................................................................... 3 .................................................................................................................................. 3.......................................................................................................................................... 3 ......................................................................................................................................... 3 ............................................................................................................................................. 5 ..................................................................................................................................... 53.2 ....................................................................................................................................... 5 ..................................................................................................................................... 6 ............................................................................................................................................. 6 ...........................................................................................................................6 ...................................................................................................................................... 6.................................................................................................................................................................. 7..................................................................................................................................................... 7.................................................................................................................................................. 7 ................................................................................................................................................. 7........................................................................................................................................................... 71. .................................................................................................................................................... 531.1 ................................................................................................................................................. 531.2 .......................................................................................................................................... 531.3 .......................................................................................................................................... 531.4 .......................................................................................................................................... 532. ................................................................................................................................................. 542.1 ......................................................................................................................542.1.1 .............................................................................................................542.1.2 .............................................................................................................542.2 ......................................................................................................................542.3 .............................................................................................................................552.4 .........................................................................................................................553. ............................................................................................................................................................ 563.1 ............................................................................................................................................. 56................................................................................................................................................ 56 ............................................................................................................................................... 56

8. ......................................................................................................................................................... 561. : ..................................................................................................................................... 602. : .........................................................................................................................603. : ......................................................................................................................................... 604. : 5................................................................................................................................... 601. .................................................................................................................602. .............................................................................................................603. ....................................................................................................604. , ...............................................................................................................605. .......................................................................................606. .........................................................................607. ................................................................................................608. ........................................................................609. ..............................................................6010. .....................................................................................6011. ...........................................................................................60

9. **( ) . : , , , , : () : : 2.1.1 . .

10. 2.1.2 . . .2.1.3 ID . , ID . E-mail . ( 3 )2.1.4 3 , . 3 ID . 2.2.1 ID . ID ID . ID .2.2.2 3 .

11. 3 .2.3.1 . (SLA:Service LevelAgreement) .2.3.2 , . 2.4.1 : : : 2.4.2 2.4.2.1 ,, , ,

12. 2.4.2.2 , , , , 2.4.3 2.4.3.1 . , .2.4.3.2 1 1 ( )2 2 ( )3

13. 4 2.4.4 . , . . . 3.1 . . 3 . . . .

14. : 10 .3.2 .3.2.1 / , , , , , window TCP/IP 3.2.2 3.2.3 , , . . 1 .

15. .4.1 2005.04.01 .4.2 . , 4.3 1 . 1. () 2. () 3. (3) 4. 5. 6. ID

16. 7. 8. (SLA : Service Level Agreement)

17. 1. () () : : **( ) , .1. a. , .b. .c. .d. , .e. .f. .2. a. , .b. ( 3 ) . 3 , , , .c. . , .d. , , , , , , , , , .e. .f. .

18. .g. , , .h. .i. , (ZipDrive, USB, ) .j. .k. .l. , () .m. , , .n. ID .o. , . (, , , , ) .p. q. ( ) , .r. 3 , 3 .s. , .t. . , . .200 : ()2. () ()

19. : : **( ) , .1. (, , , ) (, , , , ) , .2. .3. ( ) . 3 .4. 3 3 .5. 1 . . (, , , ) .6. , . . . , . .200 : ()** 3. (3)(3)

20. : : : **( ) , .1. .2. , .3. , .4. , .5. 3 .6. .7. ( ) .8. . . , . .200 : ()** 4. () ()1. .

21. 2. 3 .3. .4. , .4.1 1 : 2 : 7 : PC 1 : 2 : 3 : 4 : 5 : 6 : 7 : PC

22. 1 : 2 : 3 : 4 : 5 : 6 : 7 : PC Footprinting Scanning NT Win9x, ME Web 1 : 34.2 : 1 1 : 1 1 (2) : 1 1 (1) : 1 1 : 1 1(1)

23. 4.3 . : 15 4.4 20061 20062 20063 20064 5. 1. .2.

24. 3 .3. .4. / PASS or Fail

25. 6. ID ID ( ) 200 ID 1. 4. 7.2. 5. 8.3. 7. 9.ID 1. .2. 3 . ( ) 200 ( ) 200 7.

26. ID E-Mail 8. (SLA : Service Level Agreement) (SLA)

27. 1. , .2. . .. , .3. 3 24 3 ( )30

28. 4. ()99.97% 10% 1. S/W Bug 99.93% 20% 99.9% 30% 1 : = -------------------------------------- X 100 % 5. . E-biz .1. 2. 3.

29. 6. .1. 2. 7. 1. .2. .3. . . ()- , , - - (, ) -

30. : ISCS-GU-004 : 1.00

31. 1.00 2005.04.01

32. 1. -----------------------------------------11.1 ------------------------------------------11.2 ----------------------------------------11.3 ----------------------------------------11.4 ----------------------------------------12 ---------------------------------22.1 ------------------------------------------- 22.2 -----------------------------------------22.3 ------------------------------------------22.4 -------- ------------------------32.5 --------------------------------------42.6 ---------------------------------------52.7 ----------------------------------------52.8 ----------------------------------------63. -----------------------------------63.1 ----------------------------------- 63.2 -----------------------------------------73.3 ------------------------------------113.4 -------------------------------------114. -----------------------------------------12

33. 1. 1.1 ** ( ) . , . .1.2 IT 3 .1.3 : , ( ) . .: , , , .1.4 IT : IT .IT : , .33

34. : , IT .34

35. 2. 2.1 . . . , , , 2.2 / . : www.example.co.krIP : xxx.xxx.xxx.xxx - xxx.xxx.xxx.xxx2.3 (1) : , . : IT 35

36. , .(2) : *** . , , 1 . : IT , () . .(3) IT/ : : .(4) : :2.4 (1) , , 1 .36

37. : . .(Representative) : . . : , , . . : , . . IT . .- - - / : , , . . .- - - 37

38. (2) , . : [ 1] 2.5 . , , . . .(1) : . "" , E-mail,, . , , . (DoS, Denial of Service) : , , . ( ) : 38

39. . , (, ) .( ) : . . : , . , , , . : .2.6 , , . . , , , , .(3 )2.7 39

40. . .(1) CONCERTCONCERT(CONsortium of CERTs) , . .Homepage : http://www.concert.or.kr(2) : [ 1] (3) : [ 1] 2.8 .3. 3.1 . . .40

41. . .- , , E-- mail . - - . .(1) : (xx)-x-xxx-xxxx, UTC+0900 : (xx)-x-xxx-xxxxE-mail : [email protected] : (xx)-x-xxx-xxxx, UTC+0900(2) E-mail . , . : [ 2] () . (E-mail) . 1 () .41

42. Subject. .(3) 24 . . , . . . : [ 3] : [ 4] 3.2 : " & ", (1). , . . .42

43. . .(2) ( ), () . , . . : . , , , . . , , . .- ,- - - - - , : 43

44. , CD-ROM . , , ., . . . .- , .- , - , - (3) , , , . . : , . , , . . : , , , . 44

45. . , . . : . . .- : .- : . .- ( / ) , .(4) . , . : . , , . : , . : , 45

46. . , . : IP , IP . : . , , . : . . . . . .- .- .- .- . . , , , . . , .- , 46

47. - - - .(5) . , . .3.3 , , , , . : . . . : , . , . . : . , . 47

48. , .3.4 , . , . . , . , ? ? , . ? , ? ? ? : [ 5] 4. 1. 2. 3. 4. 5. 1. 48

49. 1. (E-mail, HP, office) ... ... ...2. (E-mail, HP, office)......3. (E-mail, HP, office) URL...4. (E-mail, HP, office) URL...2. 49

50. E-mail IP ( )IP , , , , , , , () () 3. 50

51. Ex) IN-040304-3212 E-mail IP IP ( ) , () () 4. 51

52. ( ) 040304-123 2004-03-04 2004-03-05 IN-040304-3212 2004-03-06 2004-03-10 5. 52

53. 53 * : 1. 1.1 1.2 1.3 2. , . , .3. , , . , .4. , , , , .5. . , .6. .

54. : ISCS-GU-005 : 1.0054

55. 55

56. 1.00 2005.04.0156

57. ................................................................................................................................ 4.............................................................................................................................................. 9................................................................................................................................... 9 ...........................................................................................................................9 ...........................................................................................................................9 .......................................................................................................................9 ..............................................................................................................................9 ...........................................................................................................................92.1.1 ................................................................................................................92.1.2 ..............................................................................................................102.1.3 ..............................................................................................................102.1.4 3 ........................................................................................................10 ...............................................................................................................102.2.1 .................................................................................................102.2.2 .................................................................................................10...................................................................................................................112.3.1 .............................................................................................................112.3.2 ...............................................................................11 ...................................................................................112.4.1 ....................................................................................................112.4.2 ......................................................................................112.4.3 ............................................................................................................122.4.4 ............................................................................................................13 .............................................................................................................133.1 .....................................................................................................133.2 .....................................................................................................143.2.2 ....................................................................................143.2.3 .........................................................................................14............................................................................................................................................ 154.1 .........................................................................................................................154.2 .....................................................................................................................154.3 ....................................................................................................................1557

58. ..................................................................................................................................... 15 ...................................................................................................................................... 1.................................................................................................................................... 1.............................................................................................................................1.............................................................................................................................1.............................................................................................................................1....................................................................................................................................... 3 ..............................................................................................................3......................................................................................................................3 .....................................................................................................................3 .........................................................................................................................5 .................................................................................................................53.2 ...................................................................................................................5 .................................................................................................................6 .........................................................................................................................6 ......................................................................................................6 ..................................................................................................................6.............................................................................................................................................. 7................................................................................................................................. 7.............................................................................................................................7 ............................................................................................................................7....................................................................................................................................... 71. ................................................................................................................................ 531.1 .............................................................................................................................531.2 .....................................................................................................................531.3 .....................................................................................................................531.4 .....................................................................................................................532. ............................................................................................................................542.1 ..................................................................................................542.1.1 .........................................................................................542.1.2 .........................................................................................542.2 ..................................................................................................542.3 .........................................................................................................552.4 .....................................................................................................553. ........................................................................................................................................ 563.1 .........................................................................................................................5658

59. ...........................................................................................................................56 ..........................................................................................................................56..................................................................................................................................... 561. : .................................................................................................................602. : .....................................................................................................603. : ....................................................................................................................604. : 5...............................................................................................................601. ............................................................................................602. .........................................................................................603. ................................................................................604. , ..........................................................................................605. ..................................................................606. .....................................................607. ............................................................................608. ....................................................609. ..........................................6010. ................................................................6011. .......................................................................6059

60. ** ( ) , , , , , . . : , , , . : : : : : - .- .- .- , .- .1

62. , . 1. . .- - - - Version . , UPS, . . , . 2. . . .3

63. . . DNS, DHCP, DB, (Web, Mail), , Billing, EDI, (NMS), , , , , , CMTS, NAS/RAS, , , (), (VPN), (, , ), , (PKI),, (NOC), , , , , , IDC, , , , UPS, , , CCTV 4

64. , , . , , , H=3, M=2, L=1 . . H , , , , , , M , , , , , , L , , , , , , . H 8M H 5 L 4 3.2 5

65. . . M . . . , . . . 2 . . 2 . . , .6

66. 2005.4.1 . . , 1 .1. 2. 7

67. 1. 200 Ver.1.0 : , : : : 8

68. Ver. : , .9

69. 2. 10 (OS, IP, S/W) (/)(/)DNS 2 S-HW-001DNS007 DNSW2K, 192.168.1.1,DNS, O O ,DHCPDB 10

70. CMTSNAS/RASF/WIDS/IPSVPN* . ( ) UPS(/)(//)11

71. 1 , (010-0000-0000)NOCBTS . . : ( ) : [ 2] , : : : : (OS), IP

Small Business & Entrepreneurship

중소기업 ISMS수립 지원을 위한 정보보호지침서 및 서식 모음