DKICT MATRADE Pindaan November 2018

Recommendations

Info

DASAR KESELAMATAN ICT <strong>MATRADE</strong> KANDUNGAN PENGENALAN ................................................................................................................ 1 OBJEKTIF ............................................................................................................. 1 SKOP .............................................................................................................. 1 PRINSIP-PRINSIP ............................................................................................................. 2 PERKARA 01 PEMBANGUNAN DAN PENYELENGGARAAN DASAR ......................... 4 010101 Pelaksanaan Dasar ............................................................................... 4 010102 Penyebaran Dasar ................................................................................ 4 010103 Penyelenggaraan Dasar ...................................................................... 4 010104 Pengecualian Dasar ............................................................................. 4 PERKARA 02 ORGANISASI KESELAMATAN ............................................................... 5 0201 Infrastruktur Organisasi Keselamatan ................................................. 5 020101 Ketua Eksekutif ....................................................................................... 5 020102 Ketua Pegawai Maklumat (CIO)......................................................... 5 020103 Pengarah ICT .......................................................................................... 6 020104 Pegawai Keselamatan ICT (ICTSO)..................................................... 6 020105 Pentadbir Sistem ICT .............................................................................. 7 020106 Pengguna ............................................................................................... 8 0202 Pihak Ketiga ........................................................................................... 9 020201 Keperluan Keselamatan Kontrak dengan Pihak Ketiga.................9 PERKARA 03 KAWALAN DAN PENGELASAN ASET ................................................... 10 0301 Akauntabiliti Aset ................................................................................. 10 030101 Inventori Aset ........................................................................................ 10 0302 Pengelasan dan Pengendalian Maklumat................................... 10 030201 Pengelasan Maklumat..................................................................... 10 030202 Pengendalian Maklumat................................................................. 10 PERKARA 04 KESELAMATAN SUMBER MANUSIA ...................................................... 12 0401 Keselamatan ICT Dalam Tugas Harian ............................................. 12 040101 Tanggungjawab Keselamatan.......................................................... 12 040102 Terma dan Syarat Perkhidmatan ...................................................... 12 040103 Perakuan Akta Rahsia Rasmi ............................................................. 12 0402 Menangani Insiden Keselamatan ICT .............................................. 12 040201 Pelaporan Insiden ................................................................................ 12 0403 Pendidikan ............................................................................................ 13 040301 Program Kesedaran Keselamatan ICT ............................................. 13 PERKARA 05 KESELAMATAN FIZIKAL ......................................................................... 14 0501 Keselamatan Kawasan ....................................................................... 14 050101 Perimeter Keselamatan Fizikal ........................................................... 14 050102 Kawalan Masuk Fizikal ......................................................................... 14 050103 Kawasan Larangan ............................................................................. 15 ii
iii DASAR KESELAMATAN ICT <strong>MATRADE</strong> 050104 Kawasan Larangan Lokasi ICT......................................................... 15 0502 Keselamatan Peralatan ...................................................................... 16 050201 Perkakasan ........................................................................................... 16 050202 Sistem Dokumentasi dan Dokumen .................................................. 17 050203 Media Storan ........................................................................................ 18 050204 Public Cloud Storage....................................................................... 19 050205 Kabel ...................................................................................................... 19 050206 Penyelenggaraan ............................................................................... 20 050207 Peminjaman Perkakasan Untuk Kegunaan Di Luar Pejabat ........ 20 050208 Peralatan di Luar Premis ..................................................................... 20 050209 Pelupusan ............................................................................................. 20 050210 Clear Desk dan Clear Screen ............................................................ 21 0503 Keselamatan Persekitaran ................................................................. 21 050301 Kawalan Persekitaran ......................................................................... 22 050302 Bekalan Kuasa ...................................................................................... 22 050303 Prosedur Kecemasan .......................................................................... 23 PERKARA 06 PENGURUSAN OPERASI DAN KOMUNIKASI ....................................... 24 0601 Pengurusan Prosedur Operasi ........................................................... 24 060101 Pengendalian Prosedur ...................................................................... 24 060102 Kawalan Perubahan ........................................................................... 24 060103 Prosedur Pengurusan Insiden Keselamatan ICT .............................. 24 0602 Perancangan dan Penerimaan Sistem ........................................... 25 060201 Perancangan Kapasiti ........................................................................ 25 060202 Penerimaan Sistem .............................................................................. 26 0603 Perisian Berbahaya .............................................................................. 26 060301 Perlindungan dari Perisian Berbahaya ............................................. 26 0604 Pengurusan Backup dan Log ............................................................ 27 060401 Backup .................................................................................................. 27 060402 Sistem Log ............................................................................................. 27 0605 Pengurusan Rangkaian ...................................................................... 27 060501 Kawalan Infrastruktur Rangkaian ...................................................... 28 060502 Wireless .................................................................................................. 28 0606 Keselamatan Komunikasi ................................................................... 29 060601 Internet .................................................................................................. 29 060602 Mel Elektronik ........................................................................................ 30 060603 Media Sosial...................................................................................... 32 PERKARA 07 KAWALAN CAPAIAN ............................................................................ 34 0701 Dasar Kawalan Capaian .................................................................... 34 070101 Keperluan Kawalan ............................................................................. 34 0702 Pengurusan Capaian Pengguna ...................................................... 34 070201 Akaun Pengguna................................................................................. 34 070202 Jejak Audit ............................................................................................ 36 0703 Kawalan Capaian Sistem dan Aplikasi ............................................ 36 070301 Sistem Maklumat dan Aplikasi ........................................................... 36 0704 Bring Your Own Device (BYOD)...................................................... 37
Page 1: Pindaan November 2018
Page 6 and 7: DASAR KESELAMATAN ICT MATRADE 07040
Page 8 and 9: DASAR KESELAMATAN ICT MATRADE PRINS
Page 10 and 11: DASAR KESELAMATAN ICT MATRADE PERKA
Page 22 and 23: (a) sumber data atau server, perala
Page 24 and 25: (b) menggunakan tanda atau label ke
Page 32 and 33: gangguan pada perkhidmatan dan keru
Page 36 and 37: ii. Memuat naik, memuat turun, meny
Page 38 and 39: maklumat kepada pihak-pihak yang te
Page 44 and 45: (d) Pengguna bertanggungjawab sepen
Page 52 and 53: DASAR KESELAMATAN ICT MATRADE DAFTA
Page 54 and 55:
DASAR KESELAMATAN ICT MATRADE Lampi
Page 56 and 57:
DASAR KESELAMATAN ICT MATRADE C. PE
Page 58 and 59:
DASAR KESELAMATAN ICT MATRADE Perso
Page 60:
DASAR KESELAMATAN ICT MATRADE Lampi
show all

DKICT MATRADE Pindaan November 2018

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?