̲ͲÑÒÅÐÑÒÂÎ ÅÍÅÐÃÅÒÈÊÈ ÓÊÐÀ¯ÍÈ
ÍÀÊÀÇ
Çàðåºñòðîâàíî â ̳í³ñòåðñòâ³ þñòèö³¿ Óêðà¿íè 21 ñåðïíÿ 2024 ð. çà N 1278/42623
Ïðî çàòâåðäæåííÿ Ìåòîäèêè îö³íþâàííÿ ñòàíó ê³áåðáåçïåêè åëåêòðè÷íèõ ìåðåæ òà ïðàêòèê ê³áåðáåçïåêè åëåêòðè÷íèõ ìåðåæ²ç çì³íàìè ³ äîïîâíåííÿìè, âíåñåíèìè íàêàçîì ̳í³ñòåðñòâà åíåðãåòèêè Óêðà¿íè â³ä 26 ñåðïíÿ 2024 ðîêó N 317 ³äïîâ³äíî äî ïóíêòó 8 Ïîëîæåííÿ ïðî ̳í³ñòåðñòâî åíåðãåòèêè Óêðà¿íè, çàòâåðäæåíîãî ïîñòàíîâîþ Êàá³íåòó ̳í³ñòð³â Óêðà¿íè â³ä 17 ÷åðâíÿ 2020 ðîêó N 507, ïóíêòó 2 Ïëàíó çàõîä³â ùîäî ðåàë³çàö³¿ Êîíöåïö³¿ âïðîâàäæåííÿ "ðîçóìíèõ ìåðåæ" â Óêðà¿í³ äî 2035 ðîêó, çàòâåðäæåíîãî ðîçïîðÿäæåííÿì Êàá³íåòó ̳í³ñòð³â Óêðà¿íè â³ä 14 æîâòíÿ 2022 ðîêó N 908-ð, ÍÀÊÀÇÓÞ: 1. Çàòâåðäèòè òàê³, ùî äîäàþòüñÿ: 1) Ìåòîäèêó îö³íþâàííÿ ñòàíó ê³áåðáåçïåêè åëåêòðè÷íèõ ìåðåæ; 2) Ïðàêòèêè ê³áåðáåçïåêè åëåêòðè÷íèõ ìåðåæ. 2. Óïðàâë³ííþ ê³áåðáåçïåêè òà öèôðîâîãî ðîçâèòêó çàáåçïå÷èòè ïîäàííÿ öüîãî íàêàçó íà äåðæàâíó ðåºñòðàö³þ äî ̳í³ñòåðñòâà þñòèö³¿ Óêðà¿íè â óñòàíîâëåíîìó ïîðÿäêó. 3. Öåé íàêàç íàáèðຠ÷èííîñò³ ç äíÿ éîãî îô³ö³éíîãî îïóáë³êóâàííÿ. 4. Êîíòðîëü çà âèêîíàííÿì öüîãî íàêàçó ïîêëàñòè íà çàñòóïíèêà ̳í³ñòðà ç ïèòàíü öèôðîâîãî ðîçâèòêó, öèôðîâèõ òðàíñôîðìàö³é ³ öèôðîâ³çàö³¿ ÀÍÄÀÐÀÊÀ Ðîìàíà. ̳í³ñòð | Ãåðìàí ÃÀËÓÙÅÍÊÎ | ÏÎÃÎÄÆÅÍÎ: | | Ïåðøèé çàñòóïíèê ̳í³ñòðà öèôðîâî¿ òðàíñôîðìàö³¿ Óêðà¿íè | Îëåêñ³é ÂÈÑÊÓÁ | Ò. â. î. ̳í³ñòðà îñâ³òè ³ íàóêè Óêðà¿íè | Ìèõàéëî ÂÈÍÍÈÖÜÊÈÉ | Ãîëîâà Äåðæàâíî¿ ñëóæáè ñïåö³àëüíîãî çâ'ÿçêó òà çàõèñòó ³íôîðìàö³¿ Óêðà¿íè | Þð³é ÌÈÐÎÍÅÍÊÎ | Çàñòóïíèê Ãîëîâè Ñëóæáè áåçïåêè Óêðà¿íè | Ñåðã³é ÍÀÓÌÞÊ | Ãîëîâà Äåðæàâíî¿ ðåãóëÿòîðíî¿ ñëóæáè Óêðà¿íè | Îëåêñ³é ÊÓ×ÅÐ | Ãîëîâà ÍÊÐÅÊÏ | Âàëåð³é ÒÀÐÀÑÞÊ |
ÇÀÒÂÅÐÄÆÅÍÎ Íàêàç ̳í³ñòåðñòâà åíåðãåòèêè Óêðà¿íè 05 ñåðïíÿ 2024 ðîêó N 285 (ãðèô çàòâåðäæåííÿ ó ðåäàêö³¿ íàêàçó ̳í³ñòåðñòâà åíåðãåòèêè Óêðà¿íè â³ä 26.08.2024 ð. N 317)
Ìåòîäèêà îö³íþâàííÿ ñòàíó ê³áåðáåçïåêè åëåêòðè÷íèõ ìåðåæ1. Öÿ Ìåòîäèêà âèçíà÷ຠìîäåëü çð³ëîñò³ ñïðîìîæíîñòåé ê³áåðáåçïåêè åëåêòðè÷íèõ ìåðåæ (äàë³ - ìîäåëü çð³ëîñò³), ÿê îá'ºêò³â êðèòè÷íî¿ ³íôðàñòðóêòóðè ïàëèâíî-åíåðãåòè÷íîãî ñåêòîðó êðèòè÷íî¿ ³íôðàñòðóêòóðè òà/àáî ¿õ ñèñòåì, ¿õ ÷àñòèí òà ¿õ ñóêóïíîñòåé (äàë³ - åëåêòðè÷í³ ìåðåæ³). 2. ijÿ ö³º¿ Ìåòîäèêè ïîøèðþºòüñÿ íà îïåðàòîð³â êðèòè÷íî¿ ³íôðàñòðóêòóðè (äàë³ - îïåðàòîðè), ùî íà ïðàâàõ âëàñíîñò³, îðåíäè àáî íà ³íøèõ çàêîííèõ ï³äñòàâàõ çä³éñíþþòü óïðàâë³ííÿ åëåêòðè÷íèìè ìåðåæàìè. 3. Ó ö³é Ìåòîäèö³ òåðì³íè âæèâàþòüñÿ ó òàêèõ çíà÷åííÿõ: 1) àêòèâè ³íôîðìàö³éíèõ òåõíîëîã³é (äàë³ - IT-àêòèâè) - îêðåìèé íàá³ð åëåêòðîííèõ ³íôîðìàö³éíèõ ðåñóðñ³â, îðãàí³çîâàíèõ äëÿ çáîðó, îáðîáêè, ï³äòðèìêè, âèêîðèñòàííÿ, ñï³ëüíîãî âèêîðèñòàííÿ, ðîçïîâñþäæåííÿ àáî ðîçì³ùåííÿ ³íôîðìàö³¿. Öå âèçíà÷åííÿ âêëþ÷ຠâçàºìîïîâ'ÿçàí³ àáî âçàºìîçàëåæí³ ñèñòåìè òà ñåðåäîâèùå, â ÿêîìó âîíè ïðàöþþòü. Äî IT-àêòèâ³â íàëåæàòü ðîáî÷³ ñòàíö³¿, êîìóòàòîðè, ìàðøðóòèçàòîðè, ì³æìåðåæåâ³ åêðàíè, ñåðâåðè, â³ðòóàëüí³ ìàøèíè, ïðîãðàìíå çàáåçïå÷åííÿ, ìîá³ëüí³ êîìï'þòåðí³ ïðèñòðî¿, õìàðí³ àêòèâè; 2) àêòèâè îïåðàö³éíèõ òåõíîëîã³é (äàë³ - OT-àêòèâè) - àêòèâè, ÿê³ çíàõîäÿòüñÿ ó ñåãìåíò³ îïåðàö³éíèõ òåõíîëîã³é åëåêòðè÷íèõ ìåðåæ òà íåîáõ³äí³ äëÿ íàäàííÿ ïîñëóã àáî âèðîáíè÷î¿ ä³ÿëüíîñò³. Á³ëüø³ñòü ñèñòåì êåðóâàííÿ åëåêòðè÷íèìè ìåðåæàìè âêëþ÷àþòü IT-àêòèâè. Äî ÎÒ-àêòèâ³â íàëåæàòü ðîáî÷³ ñòàíö³¿, êîìóòàòîðè, ìàðøðóòèçàòîðè, ì³æìåðåæåâ³ åêðàíè, ñåðâåðè, â³ðòóàëüí³ ìàøèíè, ïðîãðàìíå çàáåçïå÷åííÿ, ìîá³ëüí³ êîìï'þòåðí³ ïðèñòðî¿, õìàðí³ àêòèâè, ïðîãðàìîâàí³ ëîã³÷í³ êîíòðîëåðè, â³ääàëåí³ òåðì³íàëè, ïðîìèñëîâ³ ñèñòåìè óïðàâë³ííÿ (ICS), ñèñòåìè áåçïåêè, ïðèñòðî¿ êîíòðîëþ ô³çè÷íîãî äîñòóïó; 3) çð³ë³ñòü - âèì³ðþâàíà çäàòí³ñòü îïåðàòîðà ïîñò³éíî âäîñêîíàëþâàòèñÿ â ìåæàõ ê³áåðáåçïåêè åëåêòðè÷íèõ ìåðåæ; 4) ³íäåêñ ê³áåðáåçïåêè åëåêòðè÷íèõ ìåðåæ (äàë³ - ³íäåêñ MIL) - ïåð³îäè÷í³ ³íôîðìàö³éí³ ìàòåð³àëè, ÿê³ ì³ñòÿòü åêñïåðòí³, àíàë³òè÷í³, ñòàòèñòè÷í³ â³äîìîñò³ ïðî ñòàí ê³áåðáåçïåêè åëåêòðè÷íèõ ìåðåæ, à òàêîæ ïðî îêðåì³ ïîêàçíèêè øê³äëèâîãî âïëèâó ðåàë³çîâàíèõ ê³áåðçàãðîç, ñêëàäåí³ ç ìåòîþ îö³íêè ñòàíó ê³áåðáåçïåêè åëåêòðè÷íèõ ìåðåæ; 5) ³íäèêàòîð çð³ëîñò³ ê³áåðáåçïåêè (äàë³ - ³íäèêàòîð çð³ëîñò³) - çíà÷åííÿ ïîêàçíèêà çð³ëîñò³ ê³áåðáåçïåêè åëåêòðè÷íèõ ìåðåæ; 6) ³íôîðìàö³éí³ àêòèâè - áóäü-ÿêå ïîâ³äîìëåííÿ àáî ïðåäñòàâëåííÿ çíàíü, òàêèõ ÿê ôàêòè, äàí³, ÿê³ º ö³ííèìè äëÿ åëåêòðè÷íèõ ìåðåæ. ²íôîðìàö³éí³ àêòèâè ìîæóòü áóòè â áóäü-ÿêîìó íîñ³¿ ÷è ôîðì³, âêëþ÷àþ÷è öèôðîâ³ ÷è íåöèôðîâ³. Äî ³íôîðìàö³éíèõ àêòèâ³â íàëåæàòü á³çíåñ-äàí³, ³íòåëåêòóàëüíà âëàñí³ñòü, ³íôîðìàö³ÿ ïðî ê볺íò³â, êîíòðàêòè, äîãîâîðè, æóðíàëè áåçïåêè, ìåòàäàí³, îïåðàòèâí³ äàí³, ô³íàíñîâ³ äàí³, ³íôîðìàö³ÿ ïðî áåçïåêó òà æóðíàëè êåðóâàííÿ ïîä³ÿìè, ôàéëè êîíô³ãóðàö³¿. ²íø³ òåðì³íè âæèâàþòüñÿ ó çíà÷åííÿõ, íàâåäåíèõ ó Çàêîíàõ Óêðà¿íè "Ïðî êðèòè÷íó ³íôðàñòðóêòóðó", "Ïðî îñíîâí³ çàñàäè çàáåçïå÷åííÿ ê³áåðáåçïåêè Óêðà¿íè", "Ïðî çàõèñò ³íôîðìàö³¿ â ³íôîðìàö³éíî-êîìóí³êàö³éíèõ ñèñòåìàõ", "Ïðî ðèíîê åëåêòðè÷íî¿ åíåð㳿"; 7) ìîäåëü çð³ëîñò³ - ñòðóêòóðîâàíèé íàá³ð ïðàêòèê, ³íñòðóêö³é, ïëàí³â ä³é äëÿ ñòâîðåííÿ åôåêòèâíèõ ïðîãðàì ç ê³áåðáåçïåêè åëåêòðè÷íèõ ìåðåæ òà ïðîâåäåííÿ çàõîä³â ç ê³áåðçàõèñòó åëåêòðè÷íèõ ìåðåæ; 8) ìîäåëü C2M2 - ìîäåëü çð³ëîñò³ ñïðîìîæíîñòåé ê³áåðáåçïåêè åëåêòðè÷íèõ ìåðåæ äëÿ îö³íêè òà âäîñêîíàëåííÿ ïðîãðàì ç ê³áåðáåçïåêè åëåêòðè÷íèõ ìåðåæ òà çì³öíåííÿ ¿õ åêñïëóàòàö³éíî¿ ñò³éêîñò³; 9) îáëàñòü - öå ëîã³÷íå ãðóïóâàííÿ ïðàêòèê. Êîæåí òàêèé íàá³ð ïðàêòèê ïðåäñòàâëÿº ä³ÿëüí³ñòü, ÿêó îïåðàòîðè âèêîíóþòü äëÿ âñòàíîâëåííÿ òà ðîçâèòêó ñïðîìîæíîñòåé ó ñôåð³ ê³áåðáåçïåêè åëåêòðè÷íèõ ìåðåæ;îö³íêà ñòàíó ê³áåðáåçïåêè åëåêòðè÷íèõ ìåðåæ - âèçíà÷åííÿ àáî âèì³ðþâàííÿ ïîêàçíèê³â çð³ëîñò³ ê³áåðáåçïåêè åëåêòðè÷íèõ ìåðåæ; 10) îö³íêà ñòàíó ê³áåðáåçïåêè åëåêòðè÷íèõ ìåðåæ - âèçíà÷åííÿ àáî âèì³ðþâàííÿ ïîêàçíèê³â çð³ëîñò³ ê³áåðáåçïåêè åëåêòðè÷íèõ ìåðåæ; 11) ïîêàçíèê çð³ëîñò³ ê³áåðáåçïåêè åëåêòðè÷íèõ ìåðåæ - ïàðàìåòð ñòàíó ê³áåðáåçïåêè åëåêòðè÷íèõ ìåðåæ; 12) ïðàêòèêà - öå ìåòîä, ïîâ'ÿçàíèé ç ä³ÿìè, ÿê³ áàãàòîðàçîâî âèêîíóþòüñÿ â ìåæàõ ê³áåðáåçïåêè åëåêòðè÷íèõ ìåðåæ, ùî ³ âèçíà÷àþòü ì³ðó ð³âíÿ çð³ëîñò³ ñïðîìîæíîñòåé ê³áåðáåçïåêè åëåêòðè÷íèõ ìåðåæ; 13) ð³âåíü ê³áåðáåçïåêè åëåêòðè÷íèõ ìåðåæ (äàë³ - ð³âåíü MIL) - ð³âåíü ³íäèêàòîðà çð³ëîñò³ ìîäåë³ C2M2, ÿêèé âèçíà÷àºòüñÿ ñóêóïí³ñòþ ïðàêòèê ê³áåðáåçïåêè åëåêòðè÷íèõ ìåðåæ (äàë³ - ïðàêòèêà) ç îáëàñò³ ê³áåðáåçïåêè åëåêòðè÷íèõ ìåðåæ (äàë³ - îáëàñòü), ùî âïðîâàäæåí³ òà âèêîíóþòüñÿ â åëåêòðè÷íèõ ìåðåæàõ. (ïóíêò 3 ³ç çì³íàìè, âíåñåíèìè çã³äíî ç íàêàçîì ̳í³ñòåðñòâà åíåðãåòèêè Óêðà¿íè â³ä 26.08.2024 ð. N 317) 4. Ìåòîþ ö³º¿ Ìåòîäèêè º âèçíà÷åííÿ àëãîðèòìó îö³íêè òà âäîñêîíàëåííÿ ïðîãðàì ç ê³áåðáåçïåêè åëåêòðè÷íèõ ìåðåæ. 5. Ìîäåëü C2M2: 1) ôîðìóëþº ìîäåëü çð³ëîñò³ ÿê ñóêóïí³ñòü õàðàêòåðèñòèê, àòðèáóò³â, ïîêàçíèê³â àáî çðàçê³â, ùî ïîêàçóþòü ñïðîìîæíîñò³ òà ïðîãðåñ ðåàë³çàö³¿ çàõîä³â ç ê³áåðçàõèñòó åëåêòðè÷íèõ ìåðåæ; 2) âèçíà÷ຠóïðàâë³ííÿ ïðàêòèêîþ ðåàë³çàö³¿ ê³áåðáåçïåêè åëåêòðè÷íèõ ìåðåæ òà àäàïòîâàíà äëÿ âèêîðèñòàííÿ îïåðàòîðàìè; 3) ïðèçíà÷åíà äëÿ âèêîðèñòàííÿ îïåðàòîðàìè ç ìåòîþ çä³éñíåííÿ ñàìîîö³íêè ñòàíó ê³áåðáåçïåêè òà âèêîíàííÿ çàõîä³â ç ê³áåðçàõèñòó åëåêòðè÷íèõ ìåðåæ. Äëÿ åôåêòèâíî¿ ðåàë³çàö³¿ ìîäåë³ C2M2 íàéêðàùå âèêîðèñòîâóâàòè ¿¿ ÿê ÷àñòèíó áåçïåðåðâíîãî ïðîöåñó óïðàâë³ííÿ ðèçèêàìè åëåêòðè÷íèõ ìåðåæ. 6. Ôîðìîþ çàñòîñóâàííÿ ìîäåë³ C2M2 º ñàìîîö³íêà îïåðàòîðîì åëåêòðè÷íèõ ìåðåæ, ùî çä³éñíþºòüñÿ â ì³ðó ¿õ íåîáõ³äíîñò³, àëå íå ð³äøå 1 ðàçó íà ð³ê. 7. Çà ðåçóëüòàòàìè çàñòîñóâàííÿ ìîäåë³ C2M2 îïåðàòîð ãîòóº çâ³ò, ùî íàäñèëàºòüñÿ ̳íåíåðãî ïðîòÿãîì 10 äí³â, àëå íå ï³çí³øå 01 ãðóäíÿ ïîòî÷íîãî ðîêó. Ó çâ³ò³ çàçíà÷àþòüñÿ: äàí³ ïðî ïîòî÷íèé ñòàí ê³áåðáåçïåêè åëåêòðè÷íèõ ìåðåæ; äàí³ ïðî ðåàë³çàö³þ îïåðàòîðîì çàõîä³â ç ê³áåðçàõèñòó åëåêòðè÷íèõ ìåðåæ çà ðåçóëüòàòàìè çàñòîñóâàííÿ ìîäåë³ C2M2; äàí³ ïðî âäîñêîíàëåííÿ ïðîãðàì îïåðàòîðà ç ê³áåðáåçïåêè åëåêòðè÷íèõ ìåðåæ çà ðåçóëüòàòàìè çàñòîñóâàííÿ ìîäåë³ C2M2. 8. Ó ìîäåë³ C2M2 òåðì³í "ôóíêö³ÿ" íàëåæèòü äî åëåêòðè÷íèõ ìåðåæ. 9. Ìîäåëü C2M2 øèðîêî âèçíà÷ຠïîíÿòòÿ "ôóíêö³ÿ", ùîá íàäàòè îïåðàòîðàì íàéá³ëüøèé ñòóï³íü ãíó÷êîñò³ ó âèçíà÷åíí³ îáñÿãó ñàìîîö³íêè, ÿêà ï³äõîäèòü äëÿ íèõ. 10. Âèá³ð ôóíêö³¿ âèçíà÷àº, ÿê³ îá'ºêòè êðèòè÷íî¿ ³íôîðìàö³éíî¿ ³íôðàñòðóêòóðè (äàë³ - îá'ºêòè), ³íôîðìàö³éí³ (àâòîìàòèçîâàí³), åëåêòðîíí³ êîìóí³êàö³éí³, ³íôîðìàö³éíî-êîìóí³êàö³éí³ ñèñòåìè, àâòîìàòèçîâàí³ ñèñòåìè óïðàâë³ííÿ òåõíîëîã³÷íèìè ïðîöåñàìè åëåêòðè÷íèõ ìåðåæ ï³äëÿãàòèìóòü îö³íö³, âêëþ÷àþ÷è âçàºìîïîâ'ÿçàí³ àáî âçàºìîçàëåæí³ ñèñòåìè òà ñåðåäîâèùå, â ÿêîìó âîíè ïðàöþþòü. 11. Äëÿ ö³ëåé ìîäåë³ C2M2 òåðì³í "àêòèâè" âêëþ÷ຠâñ³ îá'ºêòè, ³íôîðìàö³éí³ (àâòîìàòèçîâàí³), åëåêòðîíí³ êîìóí³êàö³éí³, ³íôîðìàö³éíî-êîìóí³êàö³éí³ ñèñòåìè, àâòîìàòèçîâàí³ ñèñòåìè óïðàâë³ííÿ òåõíîëîã³÷íèìè ïðîöåñàìè åëåêòðè÷íèõ ìåðåæ â ðàìêàõ âèáðàíî¿ ôóíêö³¿, âêëþ÷àþ÷è âçàºìîïîâ'ÿçàí³ àáî âçàºìîçàëåæí³ ñèñòåìè òà ñåðåäîâèùå, â ÿêîìó âîíè ïðàöþþòü. 12. Ìîäåëü C2M2 âêëþ÷ຠ356 ïðàêòèê, ÿê³ êëàñèô³êîâàí³ â 10 îáëàñòåé. 13. Êîæíà îáëàñòü àñîö³þºòüñÿ ç óí³êàëüíîþ ö³ëëþ óïðàâë³ííÿ òà ê³ëüêîìà ö³ëÿìè ï³äõîäó. Ó ðàìêàõ ö³ëåé ÿê ï³äõîäó, òàê ³ ö³ëåé óïðàâë³ííÿ äåòàë³çîâàí³ ïðàêòèêè äëÿ îïèñó ä³ÿëüíîñò³ ç ê³áåðáåçïåêè åëåêòðè÷íèõ ìåðåæ. Ó ìåæàõ êîæíî¿ ö³ë³ ïðàêòèêè âïîðÿäêîâàí³ çà ð³âíÿìè MIL. 14. Äëÿ âèì³ðþâàííÿ ïðîãðåñó ìîäåë³ C2M2 âèêîðèñòîâóþòü øêàëó ³íäèêàòîð³â òà ³íäåêñ³â ñòàíó ê³áåðáåçïåêè åëåêòðè÷íèõ ìåðåæ, ùî âèçíà÷ຠð³âí³ â³ä MIL0 äî MIL3 çã³äíî ç äîäàòêîì äî ö³º¿ Ìåòîäèêè. Íàá³ð ïðàêòèê âèçíà÷ຠêîæåí ð³âåíü MIL. ßêùî îïåðàòîð âïðîâàäèâ òà âèêîðèñòîâóº òàêèé íàá³ð ïðàêòèê, òî â³í äîñÿã ÿê öüîãî ð³âíÿ MIL, òàê ³ ìîæëèâîñòåé, ÿê³ öåé ð³âåíü MIL ïðåäñòàâëÿº. 15. Íàÿâí³ñòü âèì³ðíèõ ïåðåõ³äíèõ ñòàí³â ì³æ ð³âíÿìè MIL äîçâîëÿº âèêîðèñòîâóâàòè øêàëó äëÿ: 1) âèçíà÷åííÿ ïîòî÷íîãî ñòàíó åëåêòðè÷íèõ ìåðåæ ùîäî ê³áåðáåçïåêè; 2) âèçíà÷åííÿ ìàéáóòíüîãî, á³ëüø çð³ëîãî ñòàíó ê³áåðáåçïåêè åëåêòðè÷íèõ ìåðåæ; 3) âèçíà÷åííÿ ìîæëèâîñòåé, ÿê³ îïåðàòîð ïîâèíåí çàáåçïå÷èòè, ùîá äîñÿãòè ìàéáóòíüîãî ïîêàçíèêà çð³ëîñò³ ñòàíó ê³áåðáåçïåêè åëåêòðè÷íèõ ìåðåæ. 16. Îáëàñò³ ìîäåë³ C2M2: 1) ASSET - óïðàâë³ííÿ àêòèâàìè, çì³íàìè òà êîíô³ãóðàö³ºþ. Óïðàâë³ííÿ ²Ò-àêòèâàìè òà ÎÒ-àêòèâàìè åëåêòðè÷íèõ ìåðåæ, âêëþ÷àþ÷è àïàðàòíå òà ïðîãðàìíå çàáåçïå÷åííÿ, à òàêîæ ³íôîðìàö³éí³ àêòèâè â³äïîâ³äíî äî ðèçèêó ê³áåðáåçïåêè äëÿ åëåêòðè÷íèõ ìåðåæ; 2) THREAT - óïðàâë³ííÿ çàãðîçàìè òà âðàçëèâ³ñòþ. Ñòâîðåííÿ òà ï³äòðèìêà ïëàí³â, ïðîöåäóð òà òåõíîëîã³é äëÿ âèÿâëåííÿ, ³äåíòèô³êàö³¿, àíàë³çó, êåðóâàííÿ òà ðåàãóâàííÿ íà çàãðîçè òà âðàçëèâîñò³ ê³áåðáåçïåêè åëåêòðè÷íèõ ìåðåæ â³äïîâ³äíî äî ðèçèêó ê³áåðáåçïåêè äëÿ íèõ; 3) RISK - óïðàâë³ííÿ ðèçèêàìè. Óïðàâë³ííÿ ²Ò-àêòèâàìè òà ÎÒ-àêòèâàìè åëåêòðè÷íèõ ìåðåæ, âêëþ÷àþ÷è àïàðàòíå òà ïðîãðàìíå çàáåçïå÷åííÿ, à òàêîæ ³íôîðìàö³éí³ àêòèâè â³äïîâ³äíî äî ðèçèêó ê³áåðáåçïåêè äëÿ åëåêòðè÷íèõ ìåðåæ; 4) ACCESS - óïðàâë³ííÿ ³äåíòèô³êàö³ºþ òà äîñòóïîì. Ñòâîðåííÿ ³äåíòèô³êàö³éíèõ äàíèõ äëÿ àêòèâ³â, ÿêèì ìîæå áóòè íàäàíî ëîã³÷íèé àáî ô³çè÷íèé äîñòóï äî àêòèâ³â åëåêòðè÷íèõ ìåðåæ, êåðóâàííÿ íèìè. Êîíòðîëü äîñòóïó äî àêòèâ³â åëåêòðè÷íèõ ìåðåæ â³äïîâ³äíî äî ðèçèêó ê³áåðáåçïåêè äëÿ íèõ; 5) SITUATION - ñèòóàö³éíà îá³çíàí³ñòü. Âïðîâàäæåííÿ òà ï³äòðèìêà çàõîä³â ³ òåõíîëîã³é äëÿ çáîðó, ìîí³òîðèíãó, àíàë³çó, ïîïåðåäæåííÿ, çâ³òóâàííÿ òà âèêîðèñòàííÿ îïåðàö³éíî¿ ³íôîðìàö³¿, ³íôîðìàö³¿ ïðî áåçïåêó òà çàãðîçè, âêëþ÷àþ÷è ³íôîðìàö³þ ïðî ñòàòóñ ³ çâåäåíó ³íôîðìàö³þ ç ³íøèõ îáëàñòåé ìîäåë³ C2M2, ùîá îòðèìàòè ñèòóàö³éíó îá³çíàí³ñòü ùîäî ðîáî÷îãî ñòàíó ê³áåðáåçïåêè åëåêòðè÷íèõ ìåðåæ; 6) RESPONSE - ðåàãóâàííÿ íà ïî䳿 òà ³íöèäåíòè. Ñòâîðåííÿ òà ï³äòðèìêà ïëàí³â, ïðîöåäóð òà òåõíîëîã³é äëÿ âèÿâëåííÿ, àíàë³çó, ðåàãóâàííÿ íà ïî䳿 òà ³íöèäåíòè ê³áåðáåçïåêè åëåêòðè÷íèõ ìåðåæ òà â³äíîâëåííÿ ï³ñëÿ íèõ, à òàêîæ ï³äòðèìêà ðîáîòè ï³ä ÷àñ ³íöèäåíò³â ê³áåðáåçïåêè åëåêòðè÷íèõ ìåðåæ â³äïîâ³äíî äî ðèçèêó ê³áåðáåçïåêè äëÿ íèõ; 7) THIRD-PARTIES - óïðàâë³ííÿ ëàíöþãàìè ïîñòà÷àííÿ òà çîâí³øí³ìè âçàºìîçàëåæíîñòÿìè. Âñòàíîâëåííÿ òà ï³äòðèìêà çàñîá³â êîíòðîëþ äëÿ óïðàâë³ííÿ ê³áåððèçèêàìè, ùî âèíèêàþòü ïðè âçàºìî䳿 ç ïîñòà÷àëüíèêàìè ïîñëóã åëåêòðè÷íèõ ìåðåæ, â³äïîâ³äíî äî ðèçèêó ê³áåðáåçïåêè äëÿ åëåêòðè÷íèõ ìåðåæ òà ö³ëåé îïåðàòîðà; 8) WORKFORCE - óïðàâë³ííÿ ïåðñîíàëîì. Ñòâîðåííÿ òà ï³äòðèìêà ïëàí³â, ïðîöåäóð, òåõíîëîã³é ³ çàñîá³â êîíòðîëþ ê³áåðáåçïåêè åëåêòðè÷íèõ ìåðåæ òà çàáåçïå÷åííÿ ñòàëî¿ êîìïåòåíòíîñò³ ïåðñîíàëó ç ê³áåðáåçïåêè â³äïîâ³äíî äî ðèçèêó ê³áåðáåçïåêè äëÿ åëåêòðè÷íèõ ìåðåæ òà ö³ëåé îïåðàòîðà; 9) ARCHITECTURE - àðõ³òåêòóðà ê³áåðáåçïåêè. Ñòâîðåííÿ òà ï³äòðèìêà àðõ³òåêòóðè ê³áåðáåçïåêè åëåêòðè÷íèõ ìåðåæ, âêëþ÷àþ÷è çàñîáè êîíòðîëþ, ïðîöåñè, òåõíîëî㳿 òà ³íø³ åëåìåíòè; 10) PROGRAM - óïðàâë³ííÿ ïðîãðàìîþ ê³áåðáåçïåêè åëåêòðè÷íèõ ìåðåæ. Ñòâîðåííÿ ³ ï³äòðèìêà ïðîãðàìè ê³áåðáåçïåêè åëåêòðè÷íèõ ìåðåæ, ÿêà çàáåçïå÷óº óïðàâë³ííÿ, ñòðàòåã³÷íå ïëàíóâàííÿ òà ô³íàíñîâó ï³äòðèìêó ä³ÿëüíîñò³ åëåêòðè÷íèõ ìåðåæ ç ê³áåðáåçïåêè òàêèì ÷èíîì, ùîá ö³ë³ ç ê³áåðáåçïåêè áóëè óçãîäæåí³ ³ç ñòðàòåã³÷íèìè ö³ëÿìè òà ðèçèêàìè äëÿ îá'ºêòó êðèòè÷íî¿ ³íôðàñòðóêòóðè â ö³ëîìó. 17. Ìîäåëü C2M2 ïðèçíà÷åíà äëÿ âèêîðèñòàííÿ ìåòîäîëî㳿 ñàìîîö³íêè îïåðàòîðîì ç ìåòîþ âèì³ðþâàííÿ òà âäîñêîíàëåííÿ âëàñíî¿ ïðîãðàìè ç ê³áåðáåçïåêè åëåêòðè÷íèõ ìåðåæ. 18. Çàñòîñóâàííÿ ìîäåë³ C2M2 çä³éñíþºòüñÿ øëÿõîì âèáîðó ð³âíÿ ïðîâàäæåííÿ êîæíî¿ ïðàêòèêè ç âèêîðèñòàííÿì ÷îòèðèáàëüíî¿ øêàëè: íå âèêîíàíî (NI) - ïðàêòèêà íå ïðîâîäèòüñÿ; ÷àñòêîâî âèêîíàíî (PI) - âèêîíàííÿ íå çàâåðøåíî, º áàãàòî ìîæëèâîñòåé äëÿ âäîñêîíàëåííÿ; ïåðåâàæíî âèêîíàíî (LI) - çäåá³ëüøîãî âèêîíàíî, àëå º ìîæëèâ³ñòü âäîñêîíàëåííÿ; ïîâí³ñòþ âèêîíàíî (FI) - ðåàë³çîâàíî ó ïîâí³é ì³ð³. 19. Âèçíà÷åííÿ ð³âíÿ MIL äëÿ êîæíî¿ îáëàñò³ º åôåêòèâíîþ ñòðàòå㳺þ âèêîðèñòàííÿ ìîäåë³ C2M2 äëÿ âäîñêîíàëåííÿ ïðîãðàìè ê³áåðáåçïåêè åëåêòðè÷íèõ ìåðåæ. Îïåðàòîðàì íåîáõ³äíî îçíàéîìèòèñÿ ç ïðàêòèêàìè â ìîäåë³ C2M2 äî âèçíà÷åííÿ ð³âí³â MIL. 20. Ïðàêòè÷íà åôåêòèâí³ñòü ³ äîñÿãíåííÿ ð³âí³â MIL ïîâèíí³ óçãîäæóâàòèñÿ ç³ ñòðàòå㳺þ ïðîãðàìè ê³áåðáåçïåêè åëåêòðè÷íèõ ìåðåæ. Ïðàãíåííÿ äîñÿãòè íàéâèùîãî ð³âíÿ MIL ó âñ³õ îáëàñòÿõ ìîæå áóòè íå îïòèìàëüíèì. Íåîáõ³äíî îö³íèòè âèòðàòè íà äîñÿãíåííÿ êîíêðåòíîãî ð³âíÿ MIL ïîð³âíÿíî ç éîãî ïîòåíö³éíèìè ïåðåâàãàìè. Íà÷àëüíèê Óïðàâë³ííÿ ê³áåðáåçïåêè òà öèôðîâîãî ðîçâèòêó | Âàëåð³é ÑÒвÃÀÍΠ|
Äîäàòîê äî Ìåòîäèêè îö³íþâàííÿ ñòàíó ê³áåðáåçïåêè åëåêòðè÷íèõ ìåðåæ (ïóíêò 14) Øêàëà ³íäèêàòîð³â òà ³íäåêñ³â ñòàíó ê³áåðáåçïåêè åëåêòðè÷íèõ ìåðåæ, ùî âèçíà÷ຠð³âí³ â³ä MIL0 äî MIL3(çàãîëîâîê äîäàòêó ó ðåäàêö³¿ íàêàçó ̳í³ñòåðñòâà åíåðãåòèêè Óêðà¿íè â³ä 26.08.2024 ð. N 317) 1. Ìîäåëü C2M2 âèêîðèñòîâóº 4 ð³âí³ MIL äëÿ âèçíà÷åííÿ ïîäâ³éíîãî ïðîãðåñó çð³ëîñò³ (ïðîãðåñó ï³äõîäó òà ïðîãðåñó óïðàâë³ííÿ). 2. Çíà÷åííÿ MIL ìàþòü ä³àïàçîí â³ä MIL0 äî MIL3 ³ ïðèçíà÷åí³ äëÿ íåçàëåæíîãî çàñòîñóâàííÿ äî êîæíî¿ îáëàñò³: 1) MIL0 - ïðàêòèêè íå âèêîíóþòüñÿ; 2) MIL1 - ïî÷àòêîâ³ ïðàêòèêè âèêîíóþòüñÿ, àëå ìîæóòü áóòè ñèòóàòèâíèìè; 3) MIL2 - 䳿 äîêóìåíòóþòüñÿ. ij¿ òà ³í³ö³àòèâè çàáåçïå÷åí³ íàëåæíèìè ðåñóðñàìè ³ ïðè âïðîâàäæåíí³ êåðóþòüñÿ ñòàíäàðòàìè òà êåð³âíèìè ïðèíöèïàìè; 4) MIL3 - óïðàâë³ííÿ òà ïîë³òèêè ê³áåðáåçïåêè ñïðÿìîâóþòü 䳿, âèçíà÷åíî âèìîãè â³äïîâ³äíîñò³, âèêîíóþòüñÿ ïåðåâ³ðêè äëÿ çàáåçïå÷åííÿ â³äïîâ³äíîñò³ âèìîãàì, âèçíà÷åí³, ï³äçâ³òí³ñòü òà ïîâíîâàæåííÿ ïåðñîíàëó îïåðàòîðà, ó ÿêîãî òàêîæ º íàëåæí³ íàâè÷êè òà çíàííÿ ó ñôåð³ ê³áåðáåçïåêè. (ï³äïóíêò 4 ïóíêòó 2 ³ç çì³íàìè, âíåñåíèìè çã³äíî ç íàêàçîì ̳í³ñòåðñòâà åíåðãåòèêè Óêðà¿íè â³ä 26.08.2024 ð. N 317) 3. Êîæíà ç ïðàêòèê ìຠîäèí ð³âåíü MIL ç íàÿâíèõ ÷îòèðüîõ (â³ä MIL0 äî MIL3). 4. Àñïåêòè ð³âí³â MIL, ùî º âàæëèâèìè äëÿ ðîçóì³ííÿ òà çàñòîñóâàííÿ ìîäåë³ C2M2: 1) ð³âí³ MIL çàñòîñîâóþòüñÿ íåçàëåæíî äî êîæíî¿ îáëàñò³. Ó ðåçóëüòàò³ îïåðàòîð, ÿêèé âèêîðèñòîâóº ìîäåëü C2M2, ìîæå ïðàöþâàòè ç ð³çíèìè ðåéòèíãàìè MIL ó ð³çíèõ îáëàñòÿõ; 2) ³íäåêñè MIL (â³ä MIL0 äî MIL3) íàêîïè÷óþòüñÿ â êîæí³é îáëàñò³. Ùîá îòðèìàòè MIL ó ïåâí³é îáëàñò³, îïåðàòîð ïîâèíåí âèêîíàòè âñ³ ïðàêòèêè íà ïîòî÷íîìó ð³âí³ MIL òà íà ïîïåðåäíüîìó ð³âí³ MIL; 3) â ³íñòðóìåíòàõ ñàìîîö³íêè ìîäåë³ C2M2 ïðàêòèêà ââàæàºòüñÿ âèêîíàíîþ, ÿêùî âèáðàíî â³äïîâ³äü LI àáî FI. 5. Âèçíà÷åííÿ ð³âíÿ MIL â îáëàñò³ ASSET: 1) äëÿ äîñÿãíåííÿ ³íäèêàòîðà çð³ëîñò³ MIL1 ìîäåë³ C2M2 â îáëàñò³ ASSET ð³âåíü âïðîâàäæåííÿ êîæíî¿ ç ïðàêòèê ASSET-1a, ASSET-2a, ASSET-3a, ASSET-4a, ASSET-4b îáëàñò³ ASSET çà ÷îòèðèáàëüíîþ øêàëîþ ìຠáóòè LI àáî FI; 2) äëÿ äîñÿãíåííÿ ³íäèêàòîðà çð³ëîñò³ MIL2 ìîäåë³ C2M2 â îáëàñò³ ASSET ð³âåíü âïðîâàäæåííÿ êîæíî¿ ïðàêòèê ASSET-1a, ASSET-2a, ASSET-3a, ASSET-4a, ASSET-4b, ASSET-1b, ASSET-1c, ASSET-1d, ASSET-1e, ASSET-2b, ASSET-2c, ASSET-2d, ASSET-2e, ASSET-3b, ASSET-3c, ASSET-3d, ASSET-4c, ASSET-4d, ASSET-4e, ASSET-4f, ASSET-4g, ASSET-5a, ASSET-5b îáëàñò³ ASSET çà ÷îòèðèáàëüíîþ øêàëîþ ìຠáóòè LI àáî FI; 3) äëÿ äîñÿãíåííÿ ³íäèêàòîðà çð³ëîñò³ MIL3 ìîäåë³ C2M2 â îáëàñò³ ASSET ð³âåíü âïðîâàäæåííÿ êîæíî¿ ç ïðàêòèê ASSET-1a, ASSET-2a, ASSET-3a, ASSET-4a, ASSET-4b, ASSET-1b, ASSET-1c, ASSET-1d, ASSET-1e, ASSET-2b, ASSET-2c, ASSET-2d, ASSET-2e, ASSET-3b, ASSET-3c, ASSET-3d, ASSET-4c, ASSET-4d, ASSET-4e, ASSET-4f, ASSET-4g, ASSET-5a, ASSET-5b, ASSET-1f, ASSET-1g, ASSET-1h, ASSET-2f, ASSET-2g, ASSET-2h, ASSET-3e, ASSET-4h, ASSET-4i, ASSET-5c, ASSET-5d, ASSET-5e, ASSET-5f îáëàñò³ ASSET çà ÷îòèðèáàëüíîþ øêàëîþ ìຠáóòè LI àáî FI; 6. Âèçíà÷åííÿ ð³âíÿ MIL â îáëàñò³ THREAT: 1) äëÿ äîñÿãíåííÿ ³íäèêàòîðà çð³ëîñò³ MIL1 ìîäåë³ C2M2 â îáëàñò³ THREAT ð³âåíü âïðîâàäæåííÿ êîæíî¿ ç ïðàêòèê THREAT-1a, THREAT-1b, THREAT-1c, THREAT-1d, THREAT-2a, THREAT-2b, THREAT-2c, THREAT-2d îáëàñò³ THREAT çà ÷îòèðèáàëüíîþ øêàëîþ ìຠáóòè LI àáî FI; 2) äëÿ äîñÿãíåííÿ ³íäèêàòîðà çð³ëîñò³ MIL2 ìîäåë³ C2M2 â îáëàñò³ THREAT ð³âåíü âïðîâàäæåííÿ êîæíî¿ ç ïðàêòèê THREAT-1a, THREAT-1b, THREAT-1c, THREAT-1d, THREAT-2a, THREAT-2b, THREAT-2c, THREAT-2d, THREAT-1e, THREAT-1f, THREAT-1g, THREAT-1h, THREAT-1i, THREAT-2e, THREAT-2f, THREAT-2g, THREAT-2h, THREAT-3a, THREAT-3b îáëàñò³ THREAT çà ÷îòèðèáàëüíîþ øêàëîþ ìຠáóòè LI àáî FI; 3) äëÿ äîñÿãíåííÿ ³íäèêàòîðà çð³ëîñò³ MIL3 ìîäåë³ C2M2 â îáëàñò³ THREAT ð³âåíü âïðîâàäæåííÿ êîæíî¿ ç ïðàêòèê THREAT-1a, THREAT-1b, THREAT-1c, THREAT-1d, THREAT-2a, THREAT-2b, THREAT-2c, THREAT-2d, THREAT-1e, THREAT-1f, THREAT-1g, THREAT-1h, THREAT-1i, THREAT-2e, THREAT-2f, THREAT-2g, THREAT-2h, THREAT-3a, THREAT-3b, THREAT-1j, THREAT-1k, THREAT-1l, THREAT-1m, THREAT-2i, THREAT-2j, THREAT-2k, THREAT-3c, THREAT-3d, THREAT-3e, THREAT-3f îáëàñò³ THREAT çà ÷îòèðèáàëüíîþ øêàëîþ ìຠáóòè LI àáî FI. 7. Âèçíà÷åííÿ ð³âíÿ MIL â îáëàñò³ RISK: 1) äëÿ äîñÿãíåííÿ ³íäèêàòîðà çð³ëîñò³ MIL1 ìîäåë³ C2M2 â îáëàñò³ RISK ð³âåíü âïðîâàäæåííÿ êîæíî¿ ç ïðàêòèê RISK-1a, RISK-2a, RISK-3a, RISK-4a îáëàñò³ RISK çà ÷îòèðèáàëüíîþ øêàëîþ ìຠáóòè LI àáî FI; 2) äëÿ äîñÿãíåííÿ ³íäèêàòîðà çð³ëîñò³ MIL2 ìîäåë³ C2M2 â îáëàñò³ RISK ð³âåíü âïðîâàäæåííÿ êîæíî¿ ç ïðàêòèê RISK-1a, RISK-2a, RISK-3a, RISK-4a, RISK-1b, RISK-1c, RISK-1d, RISK-1e, RISK-1f, RISK-2b, RISK-2c, RISK-2d, RISK-2e, RISK-2f, RISK-2g, RISK-3b, RISK-3c, RISK-3d, RISK-3e, RISK-3f, RISK-4b, RISK-5a, RISK-5b îáëàñò³ RISK çà ÷îòèðèáàëüíîþ øêàëîþ ìຠáóòè LI àáî FI; 3) äëÿ äîñÿãíåííÿ ³íäèêàòîðà çð³ëîñò³ MIL3 ìîäåë³ C2M2 â îáëàñò³ RISK ð³âåíü âïðîâàäæåííÿ êîæíî¿ ç ïðàêòèê RISK-1a, RISK-2a, RISK-3a, RISK-4a, RISK-1b, RISK-1c, RISK-1d, RISK-1e, RISK-1f, RISK-2b, RISK-2c, RISK-2d, RISK-2e, RISK-2f, RISK-2g, RISK-3b, RISK-3c, RISK-3d, RISK-3e, RISK-3f, RISK-4b, RISK-5a, RISK-5b, RISK-1g, RISK-1h, RISK-2h, RISK-2i, RISK-2j, RISK-2k, RISK-2l, RISK-2m, RISK-3g, RISK-4c, RISK-4d, RISK-4e, RISK-5c, RISK-5d, RISK-5e, RISK-5f îáëàñò³ RISK çà ÷îòèðèáàëüíîþ øêàëîþ ìຠáóòè LI àáî FI; 8. Âèçíà÷åííÿ ð³âíÿ MIL â îáëàñò³ ACCESS: 1) äëÿ äîñÿãíåííÿ ³íäèêàòîðà çð³ëîñò³ MIL1 ìîäåë³ C2M2 â îáëàñò³ ACCESS ð³âåíü âïðîâàäæåííÿ êîæíî¿ ç ïðàêòèê ACCESS-1a, ACCESS-1b, ACCESS-1c, ACCESS-2a, ACCESS-2b, ACCESS-3a, ACCESS-3b, ACCESS-3c îáëàñò³ ACCESS çà ÷îòèðèáàëüíîþ øêàëîþ ìຠáóòè LI àáî FI; 2) äëÿ äîñÿãíåííÿ ³íäèêàòîðà çð³ëîñò³ MIL2 ìîäåë³ C2M2 â îáëàñò³ ACCESS ð³âåíü âïðîâàäæåííÿ êîæíî¿ ç ïðàêòèê ACCESS-1a, ACCESS-1b, ACCESS-1c, ACCESS-2a, ACCESS-2b, ACCESS-3a, ACCESS-3b, ACCESS-3c, ACCESS-1d, ACCESS-1e, ACCESS-1f, ACCESS-1g, ACCESS-1h, ACCESS-2c, ACCESS-2d, ACCESS-2e, ACCESS-2f, ACCESS-2g, ACCESS-3d, ACCESS-3e, ACCESS-3f, ACCESS-3g, ACCESS-3h, ACCESS-4a, ACCESS-4b îáëàñò³ ACCESS çà ÷îòèðèáàëüíîþ øêàëîþ ìຠáóòè LI àáî FI; 3) äëÿ äîñÿãíåííÿ ³íäèêàòîðà çð³ëîñò³ MIL3 ìîäåë³ C2M2 â îáëàñò³ ACCESS ð³âåíü âïðîâàäæåííÿ êîæíî¿ ç ïðàêòèê ACCESS-1a, ACCESS-1b, ACCESS-1c, ACCESS-2a, ACCESS-2b, ACCESS-3a, ACCESS-3b, ACCESS-3c, ACCESS-1d, ACCESS-1e, ACCESS-1f, ACCESS-1g, ACCESS-1h, ACCESS-2c, ACCESS-2d, ACCESS-2e, ACCESS-2f, ACCESS-2g, ACCESS-3d, ACCESS-3e, ACCESS-3f, ACCESS-3g, ACCESS-3h, ACCESS-4a, ACCESS-4b, ACCESS-1i, ACCESS-1j, ACCESS-2h, ACCESS-2i, ACCESS-3i, ACCESS-3j, ACCESS-4c, ACCESS-4d, ACCESS-4e, ACCESS-4f îáëàñò³ ACCESS çà ÷îòèðèáàëüíîþ øêàëîþ ìຠáóòè LI àáî FI. 9. Âèçíà÷åííÿ ð³âíÿ MIL â îáëàñò³ SITUATION: 1) äëÿ äîñÿãíåííÿ ³íäèêàòîðà çð³ëîñò³ MIL1 ìîäåë³ C2M2 â îáëàñò³ SITUATION ð³âåíü âïðîâàäæåííÿ êîæíî¿ ç ïðàêòèê SITUATION-1a, SITUATION-2a, SITUATION-2b îáëàñò³ SITUATION çà ÷îòèðèáàëüíîþ øêàëîþ ìຠáóòè LI àáî FI; 2) äëÿ äîñÿãíåííÿ ³íäèêàòîðà çð³ëîñò³ MIL2 ìîäåë³ C2M2 â îáëàñò³ SITUATION ð³âåíü âïðîâàäæåííÿ êîæíî¿ ç ïðàêòèê SITUATION-1a, SITUATION-2a, SITUATION-2b, SITUATION-1b, SITUATION-1c, SITUATION-1d, SITUATION-1e, SITUATION-2c, SITUATION-2d, SITUATION-2e, SITUATION-2f, SITUATION-3a, SITUATION-3b, SITUATION-3c, SITUATION-4a, SITUATION-4b îáëàñò³ SITUATION çà ÷îòèðèáàëüíîþ øêàëîþ ìຠáóòè LI àáî FI; 3) äëÿ äîñÿãíåííÿ ³íäèêàòîðà çð³ëîñò³ MIL3 ìîäåë³ C2M2 â îáëàñò³ SITUATION ð³âåíü âïðîâàäæåííÿ êîæíî¿ ç ïðàêòèê SITUATION-1a, SITUATION-2a, SITUATION-2b, SITUATION-1b, SITUATION-1c, SITUATION-1d, SITUATION-1e, SITUATION-2c, SITUATION-2d, SITUATION-2e, SITUATION-2f, SITUATION-3a, SITUATION-3b, SITUATION-3c, SITUATION-4a, SITUATION-4b, SITUATION-1f, SITUATION-2g, SITUATION-2h, SITUATION-2i, SITUATION-3d, SITUATION-3e, SITUATION-3f, SITUATION-3g, SITUATION-4c, SITUATION-4d, SITUATION-4e, SITUATION-4f îáëàñò³ SITUATION çà ÷îòèðèáàëüíîþ øêàëîþ ìຠáóòè LI àáî FI. 10. Âèçíà÷åííÿ ð³âíÿ MIL â îáëàñò³ RESPONSE: 1) äëÿ äîñÿãíåííÿ ³íäèêàòîðà çð³ëîñò³ MIL1 ìîäåë³ C2M2 â îáëàñò³ RESPONSE ð³âåíü âïðîâàäæåííÿ êîæíî¿ ç ïðàêòèê RESPONSE-1a, RESPONSE-2a, RESPONSE-2b, RESPONSE-3a, RESPONSE-3b, RESPONSE-3c, RESPONSE-4a, RESPONSE-4b, RESPONSE-4c îáëàñò³ RESPONSE çà ÷îòèðèáàëüíîþ øêàëîþ ìຠáóòè LI àáî FI; 2) äëÿ äîñÿãíåííÿ ³íäèêàòîðà çð³ëîñò³ MIL2 ìîäåë³ C2M2 â îáëàñò³ RESPONSE ð³âåíü âïðîâàäæåííÿ êîæíî¿ ç ïðàêòèê RESPONSE-1a, RESPONSE-2a, RESPONSE-2b, RESPONSE-3a, RESPONSE-3b, RESPONSE-3c, RESPONSE-4a, RESPONSE-4b, RESPONSE-4c, RESPONSE-1b, RESPONSE-1c, RESPONSE-2c, RESPONSE-2d, RESPONSE-2e, RESPONSE-2f, RESPONSE-2g, RESPONSE-3d, RESPONSE-3e, RESPONSE-3f, RESPONSE-3g, RESPONSE-3h, RESPONSE-4d, RESPONSE-4e, RESPONSE-4f, RESPONSE-4g, RESPONSE-4h, RESPONSE-4i, RESPONSE-4j, RESPONSE-4k, RESPONSE-4l, RESPONSE-5a, RESPONSE-5b îáëàñò³ RESPONSE çà ÷îòèðèáàëüíîþ øêàëîþ ìຠáóòè LI àáî FI; 3) äëÿ äîñÿãíåííÿ ³íäèêàòîðà çð³ëîñò³ MIL3 ìîäåë³ C2M2 â îáëàñò³ RESPONSE ð³âåíü âïðîâàäæåííÿ êîæíî¿ ç ïðàêòèê RESPONSE-1a, RESPONSE-2a, RESPONSE-2b, RESPONSE-3a, RESPONSE-3b, RESPONSE-3c, RESPONSE-4a, RESPONSE-4b, RESPONSE-4c, RESPONSE-1b, RESPONSE-1c, RESPONSE-2c, RESPONSE-2d, RESPONSE-2e, RESPONSE-2f, RESPONSE-2g, RESPONSE-3d, RESPONSE-3e, RESPONSE-3f, RESPONSE-3g, RESPONSE-3h, RESPONSE-4d, RESPONSE-4e, RESPONSE-4f, RESPONSE-4g, RESPONSE-4h, RESPONSE-4i, RESPONSE-4j, RESPONSE-4k, RESPONSE-1e RESPONSE-1f RESPONSE-2h RESPONSE-2i RESPONSE-3i RESPONSE-3j RESPONSE-3k RESPONSE-3l RESPONSE-4m RESPONSE-4n RESPONSE-4o RESPONSE-4p RESPONSE-5c RESPONSE-5d RESPONSE-5e RESPONSE-5f îáëàñò³ RESPONSE çà ÷îòèðèáàëüíîþ øêàëîþ ìຠáóòè LI àáî FI. 11. Âèçíà÷åííÿ ð³âíÿ MIL â îáëàñò³ THIRD-PARTIES: 1) äëÿ äîñÿãíåííÿ ³íäèêàòîðà çð³ëîñò³ MIL1 ìîäåë³ C2M2 â îáëàñò³ THIRD-PARTIES ð³âåíü âïðîâàäæåííÿ êîæíî¿ ç ïðàêòèê THIRD-PARTIES-1a, THIRD-PARTIES-1b, THIRD-PARTIES-2a, THIRD-PARTIES-2b îáëàñò³ THIRD-PARTIES çà ÷îòèðèáàëüíîþ øêàëîþ ìຠáóòè LI àáî FI; 2) äëÿ äîñÿãíåííÿ ³íäèêàòîðà çð³ëîñò³ MIL2 ìîäåë³ C2M2 â îáëàñò³ THIRD-PARTIES ð³âåíü âïðîâàäæåííÿ êîæíî¿ ç ïðàêòèê THIRD-PARTIES-1a, THIRD-PARTIES-1b, THIRD-PARTIES-2a, THIRD-PARTIES-2b, THIRD-PARTIES-1c, THIRD-PARTIES-1d, THIRD-PARTIES-1e, THIRD-PARTIES-2c, THIRD-PARTIES-2d, THIRD-PARTIES-2e, THIRD-PARTIES-2f, THIRD-PARTIES-2g, THIRD-PARTIES-3a, THIRD-PARTIES-3b îáëàñò³ THIRD-PARTIES çà ÷îòèðèáàëüíîþ øêàëîþ ìຠáóòè LI àáî FI; 3) äëÿ äîñÿãíåííÿ ³íäèêàòîðà çð³ëîñò³ MIL3 ìîäåë³ C2M2 â îáëàñò³ THIRD-PARTIES ð³âåíü âïðîâàäæåííÿ êîæíî¿ ç ïðàêòèê THIRD-PARTIES-1a, THIRD-PARTIES-1b, THIRD-PARTIES-2a, THIRD-PARTIES-2b, THIRD-PARTIES-1c THIRD-PARTIES-1d, THIRD-PARTIES-1e, THIRD-PARTIES-2c, THIRD-PARTIES-2d, THIRD-PARTIES-2e, THIRD-PARTIES-2f, THIRD-PARTIES-2g, THIRD-PARTIES-3a, THIRD-PARTIES-3b, THIRD-PARTIES-1f, THIRD-PARTIES-2h, THIRD-PARTIES-2i, THIRD-PARTIES-2j, THIRD-PARTIES-2k, THIRD-PARTIES-2l, THIRD-PARTIES-2m, THIRD-PARTIES-3c, THIRD-PARTIES-3d, THIRD-PARTIES-3e, THIRD-PARTIES-3f îáëàñò³ THIRD-PARTIES çà ÷îòèðèáàëüíîþ øêàëîþ ìຠáóòè LI àáî FI. 12. Âèçíà÷åííÿ ð³âíÿ MIL â îáëàñò³ WORKFORCE: 1) äëÿ äîñÿãíåííÿ ³íäèêàòîðà çð³ëîñò³ MIL1 ìîäåë³ C2M2 â îáëàñò³ WORKFORCE ð³âåíü âïðîâàäæåííÿ êîæíî¿ ç ïðàêòèê WORKFORCE-1a, WORKFORCE-1b, WORKFORCE-2a, WORKFORCE-3a, WORKFORCE-3b, WORKFORCE-4a, WORKFORCE-4b îáëàñò³ WORKFORCE çà ÷îòèðèáàëüíîþ øêàëîþ ìຠáóòè LI àáî FI; 2) äëÿ äîñÿãíåííÿ ³íäèêàòîðà çð³ëîñò³ MIL2 ìîäåë³ C2M2 â îáëàñò³ WORKFORCE ð³âåíü âïðîâàäæåííÿ êîæíî¿ ç ïðàêòèê WORKFORCE-1a, WORKFORCE-1b, WORKFORCE-2a, WORKFORCE-3a, WORKFORCE-3b, WORKFORCE-4a, WORKFORCE-4b, WORKFORCE-1c, WORKFORCE-1d, WORKFORCE-1e, WORKFORCE-2b, WORKFORCE-2c, WORKFORCE-2d, WORKFORCE-3c, WORKFORCE-3d, WORKFORCE-4c, WORKFORCE-4d, WORKFORCE-5a, WORKFORCE-5b îáëàñò³ WORKFORCE çà ÷îòèðèáàëüíîþ øêàëîþ ìຠáóòè LI àáî FI; 3) äëÿ äîñÿãíåííÿ ³íäèêàòîðà çð³ëîñò³ MIL3 ìîäåë³ C2M2 â îáëàñò³ WORKFORCE ð³âåíü âïðîâàäæåííÿ êîæíî¿ ç ïðàêòèê WORKFORCE-1a, WORKFORCE-1b, WORKFORCE-2a, WORKFORCE-3a, WORKFORCE-3b, WORKFORCE-4a, WORKFORCE-4b, WORKFORCE-1c, WORKFORCE-1d, WORKFORCE-1e, WORKFORCE-2b, WORKFORCE-2c, WORKFORCE-2d, WORKFORCE-3c, WORKFORCE-3d, WORKFORCE-4c, WORKFORCE-4d, WORKFORCE-5a, WORKFORCE-5b, WORKFORCE-1f WORKFORCE-1g WORKFORCE-2e WORKFORCE-2f, WORKFORCE-2g, WORKFORCE-3e, WORKFORCE-3f, WORKFORCE-4e, WORKFORCE-4f, WORKFORCE-5c, WORKFORCE-5d, WORKFORCE-5e, WORKFORCE-5f îáëàñò³ WORKFORCE çà ÷îòèðèáàëüíîþ øêàëîþ ìຠáóòè LI àáî FI. 13. Âèçíà÷åííÿ ð³âíÿ MIL â îáëàñò³ ARCHITECTURE: 1) äëÿ äîñÿãíåííÿ ³íäèêàòîðà çð³ëîñò³ MIL1 ìîäåë³ C2M2 â îáëàñò³ ARCHITECTURE ð³âåíü âïðîâàäæåííÿ êîæíî¿ ç ïðàêòèê ARCHITECTURE-1a, ARCHITECTURE-2a, ARCHITECTURE-2b, ARCHITECTURE-3a, ARCHITECTURE-3b, ARCHITECTURE-5a îáëàñò³ ARCHITECTURE çà ÷îòèðèáàëüíîþ øêàëîþ ìຠáóòè LI àáî FI; 2) äëÿ äîñÿãíåííÿ ³íäèêàòîðà çð³ëîñò³ MIL2 ìîäåë³ C2M2 â îáëàñò³ ARCHITECTURE ð³âåíü âïðîâàäæåííÿ êîæíî¿ ç ïðàêòèê ARCHITECTURE-1a, ARCHITECTURE-2a, ARCHITECTURE-2b, ARCHITECTURE-3a, ARCHITECTURE-3b, ARCHITECTURE-5a, ARCHITECTURE-1b, ARCHITECTURE-1c, ARCHITECTURE-1d, ARCHITECTURE-1e, ARCHITECTURE-1f, ARCHITECTURE-1g, ARCHITECTURE-2c, ARCHITECTURE-2d, ARCHITECTURE-2e, ARCHITECTURE-2f, ARCHITECTURE-2g, ARCHITECTURE-3c, ARCHITECTURE-3d, ARCHITECTURE-3e, ARCHITECTURE-3f, ARCHITECTURE-3g, ARCHITECTURE-3h, ARCHITECTURE-3i, ARCHITECTURE-3j, ARCHITECTURE-3k, ARCHITECTURE-4a, ARCHITECTURE-4b, ARCHITECTURE-4c, ARCHITECTURE-5b, ARCHITECTURE-5c, ARCHITECTURE-5d, ARCHITECTURE-5e, ARCHITECTURE-5f, ARCHITECTURE-6a, ARCHITECTURE-6b îáëàñò³ ARCHITECTURE çà ÷îòèðèáàëüíîþ øêàëîþ ìຠáóòè LI àáî FI; 3) äëÿ äîñÿãíåííÿ ³íäèêàòîðà çð³ëîñò³ MIL3 ìîäåë³ C2M2 â îáëàñò³ ARCHITECTURE ð³âåíü âïðîâàäæåííÿ êîæíî¿ ç ïðàêòèê ARCHITECTURE-1a, ARCHITECTURE-2a, ARCHITECTURE-2b, ARCHITECTURE-3a, ARCHITECTURE-3b, ARCHITECTURE-5a, ARCHITECTURE-1b, ARCHITECTURE-1c, ARCHITECTURE-1d, ARCHITECTURE-1e, ARCHITECTURE-1f, ARCHITECTURE-1g, ARCHITECTURE-2c, ARCHITECTURE-2d, ARCHITECTURE-2e, ARCHITECTURE-2f, ARCHITECTURE-2g, ARCHITECTURE-3c, ARCHITECTURE-3d, ARCHITECTURE-3e, ARCHITECTURE-3f, ARCHITECTURE-3g, ARCHITECTURE-3h, ARCHITECTURE-3i, ARCHITECTURE-3j, ARCHITECTURE-3k, ARCHITECTURE-4a, ARCHITECTURE-4b, ARCHITECTURE-4c, ARCHITECTURE-5b, ARCHITECTURE-5c, ARCHITECTURE-5d, ARCHITECTURE-5e, ARCHITECTURE-5f, ARCHITECTURE-6a, ARCHITECTURE-6b, ARCHITECTURE-1h, ARCHITECTURE-1i, ARCHITECTURE-1j, ARCHITECTURE-1k, ARCHITECTURE-2h, ARCHITECTURE-2i, ARCHITECTURE-2j, ARCHITECTURE-2k, ARCHITECTURE-2l, ARCHITECTURE-3l, ARCHITECTURE-3m, ARCHITECTURE-4d, ARCHITECTURE-4e, ARCHITECTURE-4f, ARCHITECTURE-4g, ARCHITECTURE-4h, ARCHITECTURE-5g, ARCHITECTURE-5h, ARCHITECTURE-6c, ARCHITECTURE-6d, ARCHITECTURE-6e, ARCHITECTURE-6f îáëàñò³ ARCHITECTURE çà ÷îòèðèáàëüíîþ øêàëîþ ìຠáóòè LI àáî FI. 14. Âèçíà÷åííÿ ð³âíÿ MIL â îáëàñò³ PROGRAM: 1) äëÿ äîñÿãíåííÿ ³íäèêàòîðà çð³ëîñò³ MIL1 ìîäåë³ C2M2 â îáëàñò³ PROGRAM ð³âåíü âïðîâàäæåííÿ êîæíî¿ ç ïðàêòèê PROGRAM-1a, PROGRAM-2a îáëàñò³ PROGRAM çà ÷îòèðèáàëüíîþ øêàëîþ ìຠáóòè LI àáî FI; 2) äëÿ äîñÿãíåííÿ ³íäèêàòîðà çð³ëîñò³ MIL2 ìîäåë³ C2M2 â îáëàñò³ PROGRAM ð³âåíü âïðîâàäæåííÿ êîæíî¿ ç ïðàêòèê PROGRAM-1a, PROGRAM-2a, PROGRAM-1b, PROGRAM-1c, PROGRAM-1d, PROGRAM-1e, PROGRAM-1f, PROGRAM-1g, PROGRAM-2b, PROGRAM-2c, PROGRAM-2d, PROGRAM-2e, PROGRAM-2f, PROGRAM-3a, PROGRAM-3b îáëàñò³ PROGRAM çà ÷îòèðèáàëüíîþ øêàëîþ ìຠáóòè LI àáî FI; 3) äëÿ äîñÿãíåííÿ ³íäèêàòîðà çð³ëîñò³ MIL3 ìîäåë³ C2M2 â îáëàñò³ PROGRAM ð³âåíü âïðîâàäæåííÿ êîæíî¿ ç ïðàêòèê PROGRAM-1a, PROGRAM-2a, PROGRAM-1b, PROGRAM-1c, PROGRAM-1d, PROGRAM-1e, PROGRAM-1f, PROGRAM-1g, PROGRAM-2b, PROGRAM-2c, PROGRAM-2d, PROGRAM-2e, PROGRAM-2f, PROGRAM-3a, PROGRAM-3b, PROGRAM-1h, PROGRAM-2g, PROGRAM-2h, PROGRAM-2i, PROGRAM-2j, PROGRAM-3c, PROGRAM-3d, PROGRAM-3e, PROGRAM-3f îáëàñò³ PROGRAM çà ÷îòèðèáàëüíîþ øêàëîþ ìຠáóòè LI àáî FI. ____________ ÇÀÒÂÅÐÄÆÅÍÎ Íàêàç ̳í³ñòåðñòâà åíåðãåòèêè Óêðà¿íè 05 ñåðïíÿ 2024 ðîêó N 285 (ãðèô çàòâåðäæåííÿ ó ðåäàêö³¿ íàêàçó ̳í³ñòåðñòâà åíåðãåòèêè Óêðà¿íè â³ä 26.08.2024 ð. N 317)
Ïðàêòèêè ê³áåðáåçïåêè åëåêòðè÷íèõ ìåðåæN ç/ï | ²äåíòèô³êàòîð ïðàêòèêè | MIL | Îïèñ ïðàêòèêè | гâåíü âïðîâàäæåííÿ | NI | PI | LI | FI | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | Îáëàñòü: Óïðàâë³ííÿ àêòèâàìè, çì³íàìè òà êîíô³ãóðàö³ºþ (ASSET) | Ö³ëü 1. Óïðàâë³ííÿ ³íâåíòàðèçàö³ºþ IT-àêòèâ³â òà OT-àêòèâ³â | 1 | ASSET-1a | 1 | IT-àêòèâè òà OT-àêòèâè, âàæëèâ³ äëÿ âèêîíàííÿ ôóíêö³¿, ³íâåíòàðèçóþòüñÿ, ïðèíàéìí³ â ïåâíîìó ïîðÿäêó. | | | | | 2 | ASSET-1b | 2 | ²íâåíòàðèçàö³ÿ IT-àêòèâ³â òà OT-àêòèâ³â âêëþ÷ຠàêòèâè â ìåæàõ ôóíêö³¿, ÿê³ ìîæóòü áóòè âèêîðèñòàí³ äëÿ äîñÿãíåííÿ ìåòè çàãðîçè. | | | | | 3 | ASSET-1c | 2 | ²íâåíòàðèçîâàí³ IT-àêòèâè òà OT-àêòèâè âñòàíîâëþþòüñÿ çà ïð³îðèòåòí³ñòþ íà îñíîâ³ âèçíà÷åíèõ êðèòåð³¿â, ÿê³ âêëþ÷àþòü âàæëèâ³ñòü äëÿ âèêîíàííÿ ôóíêö³¿. | | | | | 4 | ASSET-1d | 2 | Êðèòå𳿠âèçíà÷åííÿ ïð³îðèòåò³â âêëþ÷àþòü ðîçãëÿä ñòóïåíÿ, äî ÿêîãî àêòèâ ó ìåæàõ ôóíêö³¿ ìîæå áóòè âèêîðèñòàíèé äëÿ äîñÿãíåííÿ ö³ë³ çàãðîçè. | | | | | 5 | ASSET-1e | 2 | ²íâåíòàðèçàö³ÿ IT-àêòèâ³â òà OT-àêòèâ³â ì³ñòèòü àòðèáóòè, ÿê³ ï³äòðèìóþòü 䳿 ç ê³áåðáåçïåêè (íàïðèêëàä, ðîçòàøóâàííÿ, ïð³îðèòåò àêòèâ³â, âëàñíèê àêòèâ³â, îïåðàö³éíà ñèñòåìà òà âåðñ³¿ ïðîøèâêè). | | | | | 6 | ASSET-1f | 3 | ²íâåíòàðèçàö³þ IT-àêòèâ³â òà OT-àêòèâ³â çàâåðøåíî (³íâåíòàðèçàö³ÿ âêëþ÷ຠâñ³ àêòèâè â ìåæàõ ôóíêö³¿). | | | | | 7 | ASSET-1g | 3 | ²íâåíòàðèçàö³ÿ IT-àêòèâ³â òà OT-àêòèâ³â º àêòóàëüíîþ, òîáòî ïåð³îäè÷íî îíîâëþºòüñÿ â³äïîâ³äíî äî âèçíà÷åíèõ òðèãåð³â, íàïðèêëàä ñèñòåìíèõ çì³í. | | | | | 8 | ASSET-1h | 3 | Äàí³ çíèùóþòüñÿ àáî áåçïå÷íî âèäàëÿþòüñÿ ç IT-àêòèâ³â òà OT-àêòèâ³â ïåðåä ïåðåðîçïîä³ëîì ³ â ê³íö³ ñòðîêó ñëóæáè. | | | | | Ö³ëü 2. Óïðàâë³ííÿ ³íâåíòàðèçàö³ºþ ³íôîðìàö³éíèõ àêòèâ³â | 9 | ASSET-2a | 1 | ²íôîðìàö³éí³ àêòèâè, ÿê³ º âàæëèâèìè äëÿ âèêîíàííÿ ôóíêö³¿ (íàïðèêëàä, çàäàí³ çíà÷åííÿ SCADA òà ³íôîðìàö³ÿ ïðî ê볺íò³â), ³íâåíòàðèçóþòüñÿ. | | | | | 10 | ASSET-2b | 2 | ²íâåíòàðèçàö³ÿ ³íôîðìàö³éíèõ àêòèâ³â âêëþ÷ຠ³íôîðìàö³éí³ àêòèâè â ìåæàõ ôóíêö³¿, ÿê³ ìîæóòü áóòè âèêîðèñòàí³ äëÿ äîñÿãíåííÿ ìåòè çàãðîçè. | | | | | 11 | ASSET-2c | 2 | ²íâåíòàðèçîâàí³ ³íôîðìàö³éí³ àêòèâè êëàñèô³êóþòüñÿ íà îñíîâ³ âèçíà÷åíèõ êðèòåð³¿â, ÿê³ âðàõîâóþòü âàæëèâ³ñòü äëÿ âèêîíàííÿ ôóíêö³¿. | | | | | 12 | ASSET-2d | 2 | Êðèòå𳿠êëàñèô³êàö³¿ âðàõîâóþòü ðîçãëÿä ñòóïåíÿ, äî ÿêîãî ³íôîðìàö³éíèé àêòèâ ó ìåæàõ ôóíêö³¿ ìîæå áóòè âèêîðèñòàíèé äëÿ äîñÿãíåííÿ ìåòè çàãðîçè. | | | | | 13 | ASSET-2e | 2 | ²íâåíòàðèçàö³ÿ ³íôîðìàö³éíèõ àêòèâ³â âêëþ÷ຠàòðèáóòè, ÿê³ ï³äòðèìóþòü 䳿 ç ê³áåðáåçïåêè (íàïðèêëàä, êàòåãîð³ÿ àêòèâ³â, ì³ñöÿ òà ÷àñòîòó ðåçåðâíîãî êîï³þâàííÿ, ì³ñöÿ çáåð³ãàííÿ, âëàñíèê àêòèâó, âèìîãè äî ê³áåðáåçïåêè). | | | | | 14 | ASSET-2f | 2 | ²íâåíòàðèçàö³ÿ ³íôîðìàö³éíèõ àêòèâ³â çàâåðøåíà (³íâåíòàðèçàö³ÿ âêëþ÷ຠâñ³ àêòèâè â ìåæàõ ôóíêö³¿). | | | | | 15 | ASSET-2g | 2 | ²íâåíòàðèçàö³ÿ ³íôîðìàö³éíèõ àêòèâ³â º àêòóàëüíîþ, òîáòî âîíà îíîâëþºòüñÿ ïåð³îäè÷íî â³äïîâ³äíî äî âèçíà÷åíèõ òðèãåð³â, òàêèõ ÿê ñèñòåìí³ çì³íè. | | | | | 16 | ASSET-2h | 2 | ²íôîðìàö³éí³ àêòèâè ï³äëÿãàþòü ñàí³òàðí³é îáðîáö³ àáî çíèùåííþ íàïðèê³íö³ òåðì³íó ñëóæáè çà äîïîìîãîþ ìåòîä³â, ÿê³ â³äïîâ³äàþòü âèìîãàì ê³áåðáåçïåêè. | | | | | Ö³ëü 3. Óïðàâë³ííÿ êîíô³ãóðàö³ÿìè IT-àêòèâ³â òà OT-àêòèâ³â | 17 | ASSET-3a | 1 | Áàçîâ³ ïàðàìåòðè êîíô³ãóðàö³¿ âñòàíîâëþþòüñÿ. | | | | | 18 | ASSET-3b | 2 | Áàçîâ³ ïàðàìåòðè êîíô³ãóðàö³¿ âèêîðèñòîâóþòüñÿ äëÿ íàëàøòóâàííÿ àêòèâ³â ï³ä ÷àñ ðîçãîðòàííÿ òà â³äíîâëåííÿ. | | | | | 19 | ASSET-3c | 2 | Áàçîâ³ ïàðàìåòðè êîíô³ãóðàö³¿ âêëþ÷àþòü â³äïîâ³äí³ âèìîãè àðõ³òåêòóðè ê³áåðáåçïåêè (ïðàêòèêà ARCHITECTURE-1f). | | | | | 20 | ASSET-3d | 2 | Áàçîâ³ ïàðàìåòðè êîíô³ãóðàö³¿ ïåð³îäè÷íî ïåðåãëÿäàþòüñÿ òà îíîâëþþòüñÿ â³äïîâ³äíî äî âèçíà÷åíèõ òðèãåð³â, òàêèõ ÿê ñèñòåìí³ çì³íè òà çì³íè â àðõ³òåêòóð³ ê³áåðáåçïåêè. | | | | | 21 | ASSET-3e | 3 | Êîíô³ãóðàö³¿ àêòèâ³â ïåðåâ³ðÿþòüñÿ íà óçãîäæåí³ñòü ³ç áàçîâèìè ïðîòÿãîì óñüîãî æèòòºâîãî öèêëó àêòèâ³â. | | | | | Ö³ëü 4. Óïðàâë³ííÿ çì³íàìè â IT-àêòèâàõ òà OT-àêòèâàõ | 22 | ASSET-4a | 1 | Çì³íè â àêòèâàõ îö³íþþòüñÿ òà çàòâåðäæóþòüñÿ ïåðåä âïðîâàäæåííÿì, ïðèíàéìí³ â îêðåìèõ âèïàäêàõ. | | | | | 23 | ASSET-4b | 1 | Çì³íè â àêòèâàõ äîêóìåíòóþòüñÿ. | | | | | 24 | ASSET-4c | 2 | Âèìîãè äî äîêóìåíòàö³¿ ùîäî çì³í â àêòèâàõ âñòàíîâëåíî òà ï³äòðèìóþòüñÿ. | | | | | 25 | ASSET-4d | 2 | Çì³íè äî ðåñóðñ³â ç âèùèì ïð³îðèòåòîì òåñòóþòüñÿ ïåðåä ðîçãîðòàííÿì. | | | | | 26 | ASSET-4e | 2 | Çì³íè òà îíîâëåííÿ âïðîâàäæóþòüñÿ áåçïå÷íèì ñïîñîáîì. | | | | | 27 | ASSET-4f | 2 | Ìîæëèâ³ñòü ñêàñîâóâàòè çì³íè âñòàíîâëþºòüñÿ òà ï³äòðèìóºòüñÿ äëÿ àêòèâ³â, ÿê³ âàæëèâ³ äëÿ âèêîíàííÿ ôóíêö³¿. | | | | | 28 | ASSET-4g | 2 | Ïðàêòèêè óïðàâë³ííÿ çì³íàìè ñòîñóþòüñÿ ïîâíîãî æèòòºâîãî öèêëó àêòèâ³â (íàïðèêëàä, ïðèäáàííÿ, ðîçãîðòàííÿ, åêñïëóàòàö³¿ òà âèâåäåííÿ ç åêñïëóàòàö³¿). | | | | | 29 | ASSET-4h | 3 | Ïåðåä ðîçãîðòàííÿì çì³íè â àêòèâàõ ç âèùèì ïð³îðèòåòîì ïåðåâ³ðÿþòüñÿ íà âïëèâ íà ê³áåðáåçïåêó. | | | | | 30 | ASSET-4i | 3 | Æóðíàëè çì³í ì³ñòÿòü ³íôîðìàö³þ ïðî çì³íè, ÿê³ âïëèâàþòü íà âèìîãè ê³áåðáåçïåêè àêòèâ³â. | | | | | Ö³ëü 5. Óïðàâë³ííÿ îáëàñòþ ASSET | 31 | ASSET-5a | 2 | Çàäîêóìåíòîâàí³ ïðîöåäóðè âñòàíîâëþþòüñÿ, äîòðèìóþòüñÿ òà ï³äòðèìóþòüñÿ äëÿ ä³ÿëüíîñò³ â îáëàñò³ ASSET. | | | | | 32 | ASSET-5b | 2 | Íàäàþòüñÿ â³äïîâ³äí³ ðåñóðñè (ëþäè, ô³íàíñóâàííÿ òà ³íñòðóìåíòè) äëÿ ï³äòðèìêè ä³ÿëüíîñò³ â îáëàñò³ ASSET. | | | | | 33 | ASSET-5c | 3 | Àêòóàëüí³ ïîë³òèêè àáî ³íø³ îðãàí³çàö³éí³ äèðåêòèâè âèçíà÷àþòü âèìîãè äî ä³ÿëüíîñò³ â îáëàñò³ ASSET. | | | | | 34 | ASSET-5d | 3 | Ïåðñîíàë, ÿêèé âèêîíóº ä³ÿëüí³ñòü â îáëàñò³ ASSET, çàáåçïå÷óº âèêîíàííÿ ïîêëàäåíèõ íà íüîãî îáîâ'ÿçê³â. | | | | | 35 | ASSET-5e | 3 | Ïåðñîíàë, ÿêèé âèêîíóº ä³ÿëüí³ñòü â îáëàñò³ ASSET, ìຠíàâè÷êè òà çíàííÿ, íåîáõ³äí³ äëÿ âèêîíàííÿ ïîêëàäåíèõ íà íèõ îáîâ'ÿçê³â | | | | | 36 | ASSET-5f | 3 | Åôåêòèâí³ñòü ä³ÿëüíîñò³ â îáëàñò³ ASSET îö³íþºòüñÿ òà â³äñòåæóºòüñÿ. | | | | | Îáëàñòü: Óïðàâë³ííÿ çàãðîçàìè òà âðàçëèâîñòÿìè (THREAT) | Ö³ëü 1. Çìåíøåííÿ âðàçëèâîñòåé ê³áåðáåçïåêè | 37 | THREAT-1a | 1 | Âèçíà÷àþòüñÿ äæåðåëà ³íôîðìàö³¿ äëÿ ï³äòðèìêè âèÿâëåííÿ âðàçëèâîñò³ ê³áåðáåçïåêè, ïðèíàéìí³ â îêðåìèõ âèïàäêàõ. | | | | | 38 | THREAT-1b | 1 | ²íôîðìàö³ÿ ïðî âðàçëèâ³ñòü ê³áåðáåçïåêè çáèðàºòüñÿ òà ³íòåðïðåòóºòüñÿ äëÿ ôóíêö³¿, ïðèíàéìí³ â îêðåìèõ âèïàäêàõ. | | | | | 39 | THREAT-1c | 1 | Îö³íêà âðàçëèâîñò³ ê³áåðáåçïåêè âèêîíóºòüñÿ. | | | | | 40 | THREAT-1d | 1 | Âðàçëèâîñò³ ê³áåðáåçïåêè, ÿê³ ìàþòü â³äíîøåííÿ äî âèêîíàííÿ ôóíêö³¿, ïîì'ÿêøóþòüñÿ. | | | | | 41 | THREAT-1e | 2 | ³äñòåæóþòüñÿ äæåðåëà ³íôîðìàö³¿ ïðî âðàçëèâîñò³ ê³áåðáåçïåêè, ÿê³ ñòîñóþòüñÿ àêòèâ³â âèùîãî ïð³îðèòåòó. | | | | | 42 | THREAT-1f | 2 | Îö³íêà âðàçëèâîñò³ ê³áåðáåçïåêè âèêîíóºòüñÿ ïåð³îäè÷íî òà â³äïîâ³äíî äî âèçíà÷åíèõ òðèãåð³â, òàêèõ ÿê ñèñòåìí³ çì³íè òà çîâí³øí³ ïî䳿. | | | | | 43 | THREAT-1g | 2 | Âèÿâëåí³ âðàçëèâîñò³ ê³áåðáåçïåêè àíàë³çóþòüñÿ òà âñòàíîâëþþòüñÿ çà ïð³îðèòåòí³ñòþ, à òàêîæ óñóâàþòüñÿ â³äïîâ³äíèì ÷èíîì. | | | | | 44 | THREAT-1h | 2 | Îïåðàö³éíèé âïëèâ íà ôóíêö³þ îö³íþºòüñÿ ïåðåä ðîçãîðòàííÿì âèïðàâëåíü àáî ³íøèõ çàõîä³â ùîäî óñóíåííÿ âðàçëèâîñòåé. | | | | | 45 | THREAT-1i | 2 | ²íôîðìàö³ÿ ïðî âèÿâëåí³ âðàçëèâîñò³ ê³áåðáåçïåêè ïåðåäàºòüñÿ çàö³êàâëåíèì ñòîðîíàì, âèçíà÷åíèì îðãàí³çàö³ºþ. | | | | | 46 | THREAT-1j | 3 | ³äñòåæóþòüñÿ äæåðåëà ³íôîðìàö³¿ ïðî âðàçëèâîñò³ ê³áåðáåçïåêè, ÿê³ ñï³ëüíî ñòîñóþòüñÿ âñ³õ IT-àêòèâ³â òà OT-àêòèâ³â ó ìåæàõ ôóíêö³¿. | | | | | 47 | THREAT-1k | 3 | Îö³íêà âðàçëèâîñò³ ê³áåðáåçïåêè âèêîíóºòüñÿ ñòîðîíàìè, ÿê³ íå çàëåæàòü â³ä îïåðàö³é ö³º¿ ôóíêö³¿. | | | | | 48 | THREAT-1l | 3 | ijÿëüí³ñòü ç ìîí³òîðèíãó âðàçëèâîñòåé âêëþ÷ຠïåðåâ³ðêó, ÿêà ï³äòâåðäæóº, ùî 䳿, âæèò³ ó â³äïîâ³äü íà âðàçëèâîñò³ ê³áåðáåçïåêè, áóëè åôåêòèâíèìè. | | | | | 49 | THREAT-1m | 3 | Âñòàíîâëþþòüñÿ òà ï³äòðèìóþòüñÿ ìåõàí³çìè äëÿ îòðèìàííÿ òà ðåàãóâàííÿ íà çâ³òè â³ä ãðîìàäñüêîñò³ ÷è çîâí³øí³õ ñòîð³í ïðî ïîòåíö³éíó âðàçëèâ³ñòü, ïîâ'ÿçàíó ç IT-àêòèâàìè òà OT-àêòèâàìè îðãàí³çàö³¿, òàêèìè ÿê çàãàëüíîäîñòóïí³ âåáñàéòè àáî ìîá³ëüí³ äîäàòêè. | | | | | Ö³ëü 2. Ðåàãóâàííÿ íà çàãðîçè òà îáì³í ³íôîðìàö³ºþ ïðî çàãðîçè | 50 | THREAT-2a | 1 | Âíóòð³øí³ òà çîâí³øí³ äæåðåëà ³íôîðìàö³¿ äëÿ ï³äòðèìêè ä³ÿëüíîñò³ ç óïðàâë³ííÿ çàãðîçàìè âèçíà÷àþòüñÿ. | | | | | 51 | THREAT-2b | 1 | ²íôîðìàö³ÿ ïðî çàãðîçè ê³áåðáåçïåö³ çáèðàºòüñÿ òà ³íòåðïðåòóºòüñÿ. | | | | | 52 | THREAT-2c | 1 | Ö³ë³ ùîäî çàãðîç äëÿ ôóíêö³¿ âèçíà÷àþòüñÿ. | | | | | 53 | THREAT-2d | 1 | Çàãðîçè, ÿê³ ìàþòü â³äíîøåííÿ äî âèêîíàííÿ ôóíêö³¿, ðîçãëÿäàþòüñÿ. | | | | | 54 | THREAT-2e | 2 | Âñòàíîâëþºòüñÿ ïðîô³ëü çàãðîçè äëÿ ôóíêö³¿, ÿêèé âêëþ÷ຠö³ë³ çàãðîçè òà äîäàòêîâ³ õàðàêòåðèñòèêè çàãðîçè (íàïðèêëàä, òèïè ñóá'ºêò³â çàãðîçè, ìîòèâè, ìîæëèâîñò³ òà ö³ë³). | | | | | 55 | THREAT-2f | 2 | Äæåðåëà ³íôîðìàö³¿ ïðî çàãðîçè, ÿê³ ñï³ëüíî ñòîñóþòüñÿ âñ³õ êîìïîíåíò³â ïðîô³ëþ çàãðîç, âèçíà÷àþòüñÿ çà ïð³îðèòåòí³ñòþ òà êîíòðîëþþòüñÿ. | | | | | 56 | THREAT-2g | 2 | Âèÿâëåí³ çàãðîçè àíàë³çóþòüñÿ òà âñòàíîâëþþòüñÿ çà ïð³îðèòåòí³ñòþ, à ïîò³ì ðîçãëÿäàþòüñÿ â³äïîâ³äíî. | | | | | 57 | THREAT-2h | 2 | Îáì³í ³íôîðìàö³ºþ ïðî çàãðîçè çä³éñíþºòüñÿ ³ç çàö³êàâëåíèìè ñòîðîíàìè (íàïðèêëàä, êåð³âíèêàìè, îïåðàòèâíèì ïåðñîíàëîì, óðÿäîì, ïîâ'ÿçàíèìè îðãàí³çàö³ÿìè, ïîñòà÷àëüíèêàìè, ãàëóçåâèìè îðãàí³çàö³ÿìè, ðåãóëÿòîðàìè, öåíòðàìè îáì³íó ³íôîðìàö³ºþ òà àíàë³çó). | | | | | 58 | THREAT-2i | 3 | Ïðîô³ëü çàãðîç äëÿ ôóíêö³¿ îíîâëþºòüñÿ ïåð³îäè÷íî òà â³äïîâ³äíî äî âèçíà÷åíèõ òðèãåð³â, òàêèõ ÿê ñèñòåìí³ çì³íè òà çîâí³øí³ ïî䳿. | | | | | 59 | THREAT-2j | 3 | Ìîí³òîðèíã çàãðîç ³ çàõîäè ðåàãóâàííÿ íà íèõ âèêîðèñòîâóþòü ³ çàïóñêàþòü ïîïåðåäíüî âèçíà÷åí³ ñòàíè ðîáîòè (ïðàêòèêà SITUATION-3g). | | | | | 60 | THREAT-2k | 3 | Çàõèùåí³ ìåòîäè ìàéæå â ðåàëüíîìó ÷àñ³ âèêîðèñòîâóþòüñÿ äëÿ îòðèìàííÿ òà îáì³íó ³íôîðìàö³ºþ ïðî çàãðîçè, ùîá çàáåçïå÷èòè øâèäêèé àíàë³ç ³ 䳿. | | | | | Ö³ëü 3. Óïðàâë³ííÿ îáëàñòþ THREAT | 61 | THREAT-3a | 2 | Çàäîêóìåíòîâàí³ ïðîöåäóðè âñòàíîâëþþòüñÿ, äîòðèìóþòüñÿ òà ï³äòðèìóþòüñÿ äëÿ ä³ÿëüíîñò³ â îáëàñò³ THREAT. | | | | | 62 | THREAT-3b | 2 | Íàäàþòüñÿ â³äïîâ³äí³ ðåñóðñè (ëþäè, ô³íàíñóâàííÿ òà ³íñòðóìåíòè) äëÿ ï³äòðèìêè ä³ÿëüíîñò³ â îáëàñò³ THREAT. | | | | | 63 | THREAT-3c | 3 | Àêòóàëüí³ ïîë³òèêè àáî ³íø³ îðãàí³çàö³éí³ äèðåêòèâè âèçíà÷àþòü âèìîãè äî ä³ÿëüíîñò³ â îáëàñò³ THREAT. | | | | | 64 | THREAT-3d | 3 | Ïåðñîíàë, ÿêèé âèêîíóº ä³ÿëüí³ñòü â îáëàñò³ THREAT, çàáåçïå÷óº âèêîíàííÿ ïîêëàäåíèõ íà íüîãî îáîâ'ÿçê³â. | | | | | 65 | THREAT-3e | 3 | Ïåðñîíàë, ÿêèé âèêîíóº ä³ÿëüí³ñòü â îáëàñò³ THREAT, ìຠíàâè÷êè òà çíàííÿ, íåîáõ³äí³ äëÿ âèêîíàííÿ ïîêëàäåíèõ íà íüîãî îáîâ'ÿçê³â. | | | | | 66 | THREAT-3f | 3 | Îö³íþºòüñÿ òà â³äñòåæóºòüñÿ åôåêòèâí³ñòü ä³ÿëüíîñò³ â îáëàñò³ THREAT. | | | | | Îáëàñòü: Óïðàâë³ííÿ ðèçèêàìè (RISK) | Ö³ëü 1. Ñòâîðåííÿ òà ï³äòðèìêà ñòðàòå㳿 òà ïðîãðàìè óïðàâë³ííÿ ê³áåððèçèêàìè | 67 | RISK-1a | 1 | Îðãàí³çàö³ÿ ìຠñòðàòåã³þ óïðàâë³ííÿ ê³áåððèçèêàìè, ÿêà ìîæå áóòè ðîçðîáëåíîþ òà êåðîâàíîþ â ³íäèâ³äóàëüíîìó ïîðÿäêó. | | | | | 68 | RISK-1b | 2 | Ñòðàòåã³ÿ óïðàâë³ííÿ ê³áåððèçèêàìè ñòâîðþºòüñÿ òà ï³äòðèìóºòüñÿ â³äïîâ³äíî äî ñòðàòå㳿 ïðîãðàìè ê³áåðáåçïåêè îðãàí³çàö³¿ (ïðàêòèêà PROGRAM-1b) òà àðõ³òåêòóðè ï³äïðèºìñòâà. | | | | | 69 | RISK-1c | 2 | Ïðîãðàìà óïðàâë³ííÿ ê³áåððèçèêàìè ñòâîðåíà òà ï³äòðèìóºòüñÿ äëÿ âèêîíàííÿ çàõîä³â ç óïðàâë³ííÿ ê³áåððèçèêàìè â³äïîâ³äíî äî ñòðàòå㳿 óïðàâë³ííÿ ê³áåððèçèêàìè. | | | | | 70 | RISK-1d | 2 | ²íôîðìàö³ÿ ïðî ä³ÿëüí³ñòü â îáëàñò³ RISK ïåðåäàºòüñÿ â³äïîâ³äíèì çàö³êàâëåíèì ñòîðîíàì. | | | | | 71 | RISK-1e | 2 | Âñòàíîâëåíî òà ï³äòðèìóºòüñÿ êåðóâàííÿ ïðîãðàìîþ óïðàâë³ííÿ ê³áåððèçèêàìè. | | | | | 72 | RISK-1f | 2 | Ô³íàíñîâà ï³äòðèìêà âèùîãî êåð³âíèöòâà ïðîãðàìè óïðàâë³ííÿ ê³áåððèçèêàìè º ïîì³òíîþ òà àêòèâíîþ. | | | | | 73 | RISK-1g | 3 | Ïðîãðàìà óïðàâë³ííÿ ê³áåððèçèêàìè â³äïîâ³äຠì³ñ³¿ òà ö³ëÿì îðãàí³çàö³¿. | | | | | 74 | RISK-1h | 3 | Ïðîãðàìà óïðàâë³ííÿ ê³áåððèçèêàìè óçãîäæóºòüñÿ ç çàãàëüíîêîðïîðàòèâíîþ ïðîãðàìîþ óïðàâë³ííÿ ðèçèêàìè îðãàí³çàö³¿. | | | | | Ö³ëü 2. Âèçíà÷åííÿ ê³áåððèçèê³â | 75 | RISK-2a | 1 | ʳáåðíåòè÷í³ ðèçèêè âèçíà÷àþòüñÿ, ïðèíàéìí³ ÷àñ â³ä ÷àñó. | | | | | 76 | RISK-2b | 2 | Âèçíà÷åíî ìåòîä, ùî âèêîðèñòîâóºòüñÿ äëÿ âèçíà÷åííÿ ê³áåððèçèê³â. | | | | | 77 | RISK-2c | 2 | Çàö³êàâëåí³ ñòîðîíè ç â³äïîâ³äíèõ îïåðàö³é ³ á³çíåñ-ñôåð áåðóòü ó÷àñòü ó âèÿâëåíí³ ê³áåððèçèê³â. | | | | | 78 | RISK-2d | 2 | Âèÿâëåí³ ê³áåððèçèêè êîíñîë³äóþòüñÿ çà êàòåãîð³ÿìè (íàïðèêëàä, ïîðóøåííÿ äàíèõ, âíóòð³øí³ ïîìèëêè, ïðîãðàìè-âèìàãà÷³, çàõîïëåííÿ êîíòðîëþ), ùîá ïîëåãøèòè êåðóâàííÿ íà ð³âí³ êàòåãîð³¿. | | | | | 79 | RISK-2e | 2 | Êàòåãî𳿠ê³áåððèçèê³â ³ ê³áåððèçèêè äîêóìåíòóþòüñÿ â ðåºñòð³ ðèçèê³â àáî â ³íø³é ôîðì³. | | | | | 80 | RISK-2f | 2 | Êàòåãî𳿠ê³áåððèçèê³â ³ ê³áåððèçèêè ïðèçíà÷àþòüñÿ âëàñíèêàì ðèçèê³â. | | | | | 81 | RISK-2g | 2 | ijÿëüí³ñòü ç ³äåíòèô³êàö³¿ ê³áåððèçèê³â âèêîíóºòüñÿ ïåð³îäè÷íî òà â³äïîâ³äíî äî âèçíà÷åíèõ òðèãåð³â, òàêèõ ÿê ñèñòåìí³ çì³íè òà çîâí³øí³ ïî䳿. | | | | | 82 | RISK-2h | 3 | ijÿëüí³ñòü ç ³äåíòèô³êàö³¿ ê³áåððèçèê³â âèêîðèñòîâóº ³íâåíòàðèçàö³þ àêòèâ³â òà ³íôîðìàö³þ ïðî ïð³îðèòåòí³ñòü ç îáëàñò³ ASSET, òàêó ÿê çàâåðøåííÿ ï³äòðèìêè IT-àêòèâ³â òà OT-àêòèâ³â, îäèíè÷í³ òî÷êè çáîþ, ðèçèê ðîçêðèòòÿ, ï³äðîáêè àáî çíèùåííÿ ³íôîðìàö³éíèõ àêòèâ³â. | | | | | 83 | RISK-2i | 3 | ²íôîðìàö³ÿ ïðî êåðóâàííÿ âðàçëèâ³ñòþ ç îáëàñò³ THREAT âèêîðèñòîâóºòüñÿ äëÿ îíîâëåííÿ ê³áåððèçèê³â ³ âèÿâëåííÿ íîâèõ ðèçèê³â (òàêèõ ÿê ðèçèêè, ùî âèíèêàþòü ÷åðåç âðàçëèâîñò³, ÿê³ ñòàíîâëÿòü ïîñò³éíèé ðèçèê äëÿ îðãàí³çàö³¿, àáî íåùîäàâíî âèÿâëåí³ âðàçëèâîñò³). | | | | | 84 | RISK-2j | 3 | ²íôîðìàö³ÿ ïðî êåðóâàííÿ çàãðîçàìè â îáëàñò³ THREAT âèêîðèñòîâóºòüñÿ äëÿ îíîâëåííÿ ê³áåððèçèê³â ³ âèÿâëåííÿ íîâèõ ðèçèê³â. | | | | | 85 | RISK-2k | 3 | ²íôîðìàö³ÿ ïðî ä³ÿëüí³ñòü îáëàñò³ THIRD-PARTIES âèêîðèñòîâóºòüñÿ äëÿ îíîâëåííÿ ê³áåððèçèê³â ³ âèÿâëåííÿ íîâèõ ðèçèê³â. | | | | | 86 | RISK-2l | 3 | ²íôîðìàö³ÿ ïðî 䳿 â îáëàñò³ ARCHITECTURE (íàïðèêëàä, íåâèïðàâëåí³ ïðîãàëèíè â àðõ³òåêòóð³) âèêîðèñòîâóºòüñÿ äëÿ îíîâëåííÿ ê³áåððèçèê³â ³ âèÿâëåííÿ íîâèõ ðèçèê³â. | | | | | 87 | RISK-2m | 3 | ²äåíòèô³êàö³ÿ ê³áåððèçèê³â âðàõîâóº ðèçèêè, ÿê³ ìîæóòü âèíèêíóòè àáî âïëèíóòè íà ³íø³ âçàºìîçàëåæí³ îðãàí³çàö³¿. | | | | | Ö³ëü 3. Àíàë³ç ê³áåððèçèê³â | 88 | RISK-3a | 1 | Ïð³îðèòåçàö³ÿ ê³áåððèçèê³â âèçíà÷àºòüñÿ íà îñíîâ³ îö³íêè ¿õ âïëèâó. | | | | | 89 | RISK-3b | 2 | Âèçíà÷åí³ êðèòå𳿠âèêîðèñòîâóþòüñÿ äëÿ âèçíà÷åííÿ ïð³îðèòåòíîñò³ ê³áåððèçèê³â (íàïðèêëàä, âïëèâ íà îðãàí³çàö³þ, âïëèâ íà ñï³ëüíîòó, éìîâ³ðí³ñòü, ñïðèéíÿòëèâ³ñòü, òîëåðàíòí³ñòü äî ðèçèêó). | | | | | 90 | RISK-3c | 2 | Âèçíà÷åíèé ìåòîä âèêîðèñòîâóºòüñÿ äëÿ îö³íêè âïëèâó ê³áåððèçèê³â ç âèùèì ïð³îðèòåòîì (íàïðèêëàä, ïîð³âíÿííÿ ç ðåàëüíèìè ïîä³ÿìè, ê³ëüê³ñíà îö³íêà ðèçèêó). | | | | | 91 | RISK-3d | 2 | Âèçíà÷åí³ ìåòîäè âèêîðèñòîâóþòüñÿ äëÿ àíàë³çó ê³áåððèçèê³â ç âèùèì ïð³îðèòåòîì (íàïðèêëàä, àíàë³ç ïîøèðåíîñò³ òèï³â àòàê äëÿ îö³íêè éìîâ³ðíîñò³, âèêîðèñòàííÿ ðåçóëüòàò³â îö³íêè çàñîá³â êîíòðîëþ äëÿ îö³íêè ñïðèéíÿòëèâîñò³). | | | | | 92 | RISK-3e | 2 | Îðãàí³çàö³éíî çàö³êàâëåí³ ñòîðîíè ç â³äïîâ³äíèõ îïåðàö³é ³ á³çíåñ-ôóíêö³é áåðóòü ó÷àñòü â àíàë³ç³ ê³áåððèçèê³â ç âèùèì ïð³îðèòåòîì. | | | | | 93 | RISK-3f | 2 | ʳáåððèçèêè âèäàëÿþòüñÿ ç ðåºñòðó ðèçèê³â àáî ³íøèõ ôîðì ¿õ ô³êñàö³¿, ùî âèêîðèñòîâóþòüñÿ äëÿ äîêóìåíòóâàííÿ âèÿâëåíèõ ðèçèê³â ³ êåðóâàííÿ íèìè, êîëè âîíè á³ëüøå íå ïîòðåáóþòü â³äñòåæåííÿ ÷è ðåàãóâàííÿ. | | | | | 94 | RISK-3g | 3 | Àíàë³ç ê³áåððèçèê³â ïåð³îäè÷íî îíîâëþºòüñÿ â³äïîâ³äíî äî âèçíà÷åíèõ òðèãåð³â, òàêèõ ÿê ñèñòåìí³ çì³íè, çîâí³øí³ ïî䳿 òà ³íôîðìàö³ÿ ç ³íøèõ îáëàñòåé ìîäåë³. | | | | | Ö³ëü 4. Ðåàãóâàííÿ íà ê³áåððèçèêè | 95 | RISK-4a | 1 | Ðåàãóâàííÿ íà ðèçèêè (òàê³ ÿê ïîì'ÿêøåííÿ, ïðèéíÿòòÿ, óíèêíåííÿ àáî ïåðåäà÷à) âïðîâàäæóºòüñÿ äëÿ óñóíåííÿ ê³áåððèçèê³â. | | | | | 96 | RISK-4b | 2 | Âèçíà÷åíèé ìåòîä âèêîðèñòîâóºòüñÿ äëÿ âèáîðó òà âïðîâàäæåííÿ çàõîä³â ðåàãóâàííÿ íà ðèçèêè íà îñíîâ³ àíàë³çó òà âñòàíîâëåííÿ ïð³îðèòåò³â. | | | | | 97 | RISK-4c | 3 | Çàñîáè êîíòðîëþ ê³áåðáåçïåêè îö³íþþòüñÿ, ùîá âèçíà÷èòè, ÷è âîíè ðîçðîáëåí³ íàëåæíèì ÷èíîì ³, ÷è ôóíêö³îíóþòü çà ¿õ ïðèçíà÷åííÿì äëÿ çìåíøåííÿ âèÿâëåíèõ ê³áåððèçèê³â. | | | | | 98 | RISK-4d | 3 | Ðåçóëüòàòè àíàë³çó âïëèâó ê³áåððèçèê³â ³ îö³íêè êîíòðîëþ ê³áåðáåçïåêè ðàçîì ïåðåãëÿäàþòüñÿ êåð³âíèöòâîì ï³äïðèºìñòâà, ùîá âèçíà÷èòè, ÷è äîñòàòíüî ïîì'ÿêøåíî ê³áåððèçèêè òà ÷è íå ïåðåâèùåíî äîïóñòèì³ ð³âí³ ðèçèêó. | | | | | 99 | RISK-4e | 3 | Ðåàêö³¿ íà ðèçèêè (òàê³ ÿê ïîì'ÿêøåííÿ, ïðèéíÿòòÿ, óíèêíåííÿ àáî ïåðåäà÷à) ïåð³îäè÷íî ïåðåãëÿäàþòüñÿ êåð³âíèöòâîì, ùîá âèçíà÷èòè, ÷è âîíè âñå ùå äîö³ëüí³. | | | | | Ö³ëü 5. Óïðàâë³ííÿ â îáëàñò³ RISK | 100 | RISK-5a | 2 | Çàäîêóìåíòîâàí³ ïðîöåäóðè âñòàíîâëþþòüñÿ, äîòðèìóþòüñÿ òà ï³äòðèìóþòüñÿ äëÿ ä³ÿëüíîñò³ â îáëàñò³ RISK. | | | | | 101 | RISK-5b | 2 | Íàäàþòüñÿ â³äïîâ³äí³ ðåñóðñè (ëþäè, ô³íàíñóâàííÿ òà ³íñòðóìåíòè) äëÿ ï³äòðèìêè ä³ÿëüíîñò³ â îáëàñò³ RISK. | | | | | 102 | RISK-5c | 3 | Àêòóàëüí³ ïîë³òèêè àáî ³íø³ îðãàí³çàö³éí³ äèðåêòèâè âèçíà÷àþòü âèìîãè äî ä³ÿëüíîñò³ â îáëàñò³ RISK. | | | | | 103 | RISK-5d | 3 | Ïåðñîíàë, ÿêèé âèêîíóº ä³ÿëüí³ñòü â îáëàñò³ RISK, çàáåçïå÷óº âèêîíàííÿ ïîêëàäåíèõ íà íüîãî îáîâ'ÿçê³â. | | | | | 104 | RISK-5e | 3 | Ïåðñîíàë, ÿêèé âèêîíóº ä³ÿëüí³ñòü â îáëàñò³ RISK, ìຠíàâè÷êè òà çíàííÿ, íåîáõ³äí³ äëÿ âèêîíàííÿ ïîêëàäåíèõ íà íèõ îáîâ'ÿçê³â. | | | | | 105 | RISK-5f | 3 | Îö³íþºòüñÿ òà â³äñòåæóºòüñÿ åôåêòèâí³ñòü ä³ÿëüíîñò³ â îáëàñò³ RISK. | | | | | Îáëàñòü: Óïðàâë³ííÿ ³äåíòèô³êàö³ºþ òà äîñòóïîì (ACCESS) | Ö³ëü 1. Âñòàíîâëåííÿ ³äåíòè÷íîñò³ òà êåðóâàííÿ àâòåíòèô³êàö³ºþ | 106 | ACCESS-1a | 1 | ²äåíòèô³êàö³éí³ äàí³ íàäàþòüñÿ, ïðèíàéìí³ â ïåâíîìó ïîðÿäêó, äëÿ ïåðñîíàëó òà ³íøèõ îá'ºêò³â, òàêèõ ÿê ñëóæáè òà ïðèñòðî¿, ÿêèì ïîòð³áåí äîñòóï äî àêòèâ³â (çâåðí³òü óâàãó, ùî öå íå âèêëþ÷ຠñï³ëüíèõ ³äåíòèô³êàö³éíèõ äàíèõ). | | | | | 107 | ACCESS-1b | 1 | Îáë³êîâ³ äàí³ (òàê³ ÿê ïàðîë³, ñìàðò-êàðòè, ñåðòèô³êàòè òà êëþ÷³) âèäàþòüñÿ ïåðñîíàëó òà ³íøèì îñîáàì, ÿêèì ïîòð³áåí äîñòóï äî àêòèâ³â. | | | | | 108 | ACCESS-1c | 1 | ²äåíòèô³êàö³éí³ äàí³ äå³í³ö³àë³çóþòüñÿ, ïðèíàéìí³ òèì÷àñîâî, êîëè âîíè á³ëüøå íå ïîòð³áí³. | | | | | 109 | ACCESS-1d | 2 | Îáìåæåííÿ ùîäî íàä³éíîñò³ ïàðîëÿ òà ïîâòîðíîãî éîãî âèêîðèñòàííÿ âèçíà÷åí³ òà çàñòîñîâóþòüñÿ. | | | | | 110 | ACCESS-1e | 2 | Ðåïîçèòî𳿠³äåíòèô³êàö³éíèõ äàíèõ ïåðåãëÿäàþòüñÿ òà îíîâëþþòüñÿ ïåð³îäè÷íî òà â³äïîâ³äíî äî âèçíà÷åíèõ òðèãåð³â, òàêèõ ÿê ñèñòåìí³ çì³íè òà çì³íè îðãàí³çàö³éíî¿ ñòðóêòóðè. | | | | | 111 | ACCESS-1f | 2 | ²äåíòèô³êàö³éí³ äàí³ äå³í³ö³àë³çóþòüñÿ â ìåæàõ ÷àñó, âèçíà÷åíîãî îðãàí³çàö³ºþ, êîëè âîíè á³ëüøå íå ïîòð³áí³. | | | | | 112 | ACCESS-1g | 2 | Âèêîðèñòàííÿ ïðèâ³ëåéîâàíèõ îáë³êîâèõ äàíèõ îáìåæåíî ïðîöåñàìè, äëÿ ÿêèõ âîíè ïîòð³áí³. | | | | | 113 | ACCESS-1h | 2 | Äëÿ äîñòóïó ç ï³äâèùåíèì ðèçèêîì (íàïðèêëàä, ïðèâ³ëåéîâàí³ îáë³êîâ³ çàïèñè, îáë³êîâ³ çàïèñè ñëóæá, ñï³ëüí³ îáë³êîâ³ çàïèñè òà â³ääàëåíèé äîñòóï) âèêîðèñòîâóþòüñÿ íàä³éí³ø³ îáë³êîâ³ äàí³, áàãàòîôàêòîðíà àâòåíòèô³êàö³ÿ àáî îäíîðàçîâ³ îáë³êîâ³ äàí³. | | | | | 114 | ACCESS-1i | 3 | Áàãàòîôàêòîðíà àâòåíòèô³êàö³ÿ ïîòð³áíà äëÿ áóäü-ÿêîãî äîñòóïó, äå öå ìîæëèâî. | | | | | 115 | ACCESS-1j | 3 | ²äåíòèô³êàö³éí³ äàí³ âèìèêàþòüñÿ ï³ñëÿ ïåâíîãî ïåð³îäó áåçä³ÿëüíîñò³, äå öå ìîæëèâî. | | | | | Ö³ëü 2. Êîíòðîëü ëîã³÷íîãî äîñòóïó | 116 | ACCESS-2a | 1 | Ðåàë³çîâàíî ëîã³÷íèé êîíòðîëü äîñòóïó. | | | | | 117 | ACCESS-2b | 1 | Ïðèâ³ëå¿ ëîã³÷íîãî äîñòóïó ñêàñîâóþòüñÿ, êîëè á³ëüøå íå ïîòð³áí³. | | | | | 118 | ACCESS-2c | 2 | Âñòàíîâëþþòüñÿ òà ï³äòðèìóþòüñÿ âèìîãè äî ëîã³÷íîãî äîñòóïó (íàïðèêëàä, ïðàâèëà, ÿêèì òèïàì îá'ºêò³â äîçâîëåíî äîñòóï äî àêòèâó, îáìåæåííÿ äîçâîëåíîãî äîñòóïó, îáìåæåííÿ â³ääàëåíîãî äîñòóïó, ïàðàìåòðè àâòåíòèô³êàö³¿). | | | | | 119 | ACCESS-2d | 2 | Âèìîãè äî ëîã³÷íîãî äîñòóïó âêëþ÷àþòü ïðèíöèï íàéìåíøèõ ïðèâ³ëå¿â. | | | | | 120 | ACCESS-2e | 2 | Âèìîãè äî ëîã³÷íîãî äîñòóïó âêëþ÷àþòü ïðèíöèï ðîçïîä³ëó îáîâ'ÿçê³â. | | | | | 121 | ACCESS-2f | 2 | Çàïèòè íà ëîã³÷íèé äîñòóï ïåðåãëÿäàþòüñÿ òà çàòâåðäæóþòüñÿ âëàñíèêîì ðåñóðñó. | | | | | 122 | ACCESS-2g | 2 | Ïðèâ³ëå¿ ëîã³÷íîãî äîñòóïó, ÿê³ ñòàíîâëÿòü á³ëüøèé ðèçèê äëÿ ôóíêö³¿, îòðèìóþòü äîäàòêîâó ïåðåâ³ðêó òà ìîí³òîðèíã. | | | | | 123 | ACCESS-2h | 3 | Ëîã³÷í³ ïðèâ³ëå¿ äîñòóïó ïåðåãëÿäàþòüñÿ òà îíîâëþþòüñÿ äëÿ çàáåçïå÷åííÿ â³äïîâ³äíîñò³ âèìîãàì äîñòóïó ïåð³îäè÷íî òà â³äïîâ³äíî äî âèçíà÷åíèõ òðèãåð³â, òàêèõ ÿê çì³íè â îðãàí³çàö³éí³é ñòðóêòóð³, ³ ï³ñëÿ áóäü-ÿêîãî òèì÷àñîâîãî ï³äâèùåííÿ ïðèâ³ëå¿â. | | | | | 124 | ACCESS-2i | 3 | Àíîìàëüí³ ñïðîáè îòðèìàòè ëîã³÷íèé äîñòóï â³äñòåæóþòüñÿ ÿê ³íäèêàòîðè ïîä³é ê³áåðáåçïåêè. | | | | | Ö³ëü 3. Êîíòðîëü ô³çè÷íîãî äîñòóïó | 125 | ACCESS-3a | 1 | Ô³çè÷í³ çàñîáè êîíòðîëþ äîñòóïó (òàê³ ÿê îãîðîæ³, çàìêè òà âèâ³ñêè) ðåàë³çîâàí³. | | | | | 126 | ACCESS-3b | 1 | Ïðèâ³ëå¿ ô³çè÷íîãî äîñòóïó ñêàñîâóþòüñÿ, êîëè âîíè á³ëüøå íå ïîòð³áí³. | | | | | 127 | ACCESS-3c | 1 | Æóðíàëè ô³çè÷íîãî äîñòóïó çáåð³ãàþòüñÿ. | | | | | 128 | ACCESS-3d | 2 | Âèìîãè äî ô³çè÷íîãî äîñòóïó âñòàíîâëþþòüñÿ òà ï³äòðèìóþòüñÿ (íàïðèêëàä, ïðàâèëà ùîäî òîãî, õòî ìຠäîñòóï äî àêòèâó, ÿê íàäàºòüñÿ äîñòóï, îáìåæåííÿ äîçâîëåíîãî äîñòóïó). | | | | | 129 | ACCESS-3e | 2 | Âèìîãè ùîäî ô³çè÷íîãî äîñòóïó âêëþ÷àþòü ïðèíöèï íàéìåíøèõ ïðèâ³ëå¿â. | | | | | 130 | ACCESS-3f | 2 | Âèìîãè ùîäî ô³çè÷íîãî äîñòóïó âêëþ÷àþòü ïðèíöèï ðîçïîä³ëó îáîâ'ÿçê³â. | | | | | 131 | ACCESS-3g | 2 | Çàïèòè íà ô³çè÷íèé äîñòóï ðîçãëÿäàþòüñÿ òà çàòâåðäæóþòüñÿ âëàñíèêîì ðåñóðñó. | | | | | 132 | ACCESS-3h | 2 | Ïðèâ³ëå¿ ô³çè÷íîãî äîñòóïó, ÿê³ ñòâîðþþòü ï³äâèùåíèé ðèçèê äëÿ ôóíêö³¿, îòðèìóþòü äîäàòêîâó ïåðåâ³ðêó òà ìîí³òîðèíã. | | | | | 133 | ACCESS-3i | 3 | Ïðèâ³ëå¿ ô³çè÷íîãî äîñòóïó ïåðåãëÿäàþòüñÿ òà îíîâëþþòüñÿ. | | | | | 134 | ACCESS-3j | 3 | Ô³çè÷íèé äîñòóï â³äñòåæóºòüñÿ äëÿ âèÿâëåííÿ ïîòåíö³éíèõ ïîä³é ê³áåðáåçïåêè. | | | | | Ö³ëü 4. Óïðàâë³ííÿ â îáëàñò³ ACCESS | 135 | ACCESS-4a | 2 | Çàäîêóìåíòîâàí³ ïðîöåäóðè âñòàíîâëþþòüñÿ, äîòðèìóþòüñÿ òà ï³äòðèìóþòüñÿ äëÿ ä³ÿëüíîñò³ â îáëàñò³ ACCESS. | | | | | 136 | ACCESS-4b | 2 | Äëÿ ï³äòðèìêè ä³ÿëüíîñò³ â îáëàñò³ ACCESS íàäàþòüñÿ â³äïîâ³äí³ ðåñóðñè (ëþäè, ô³íàíñóâàííÿ òà ³íñòðóìåíòè). | | | | | 137 | ACCESS-4c | 3 | Àêòóàëüí³ ïîë³òèêè àáî ³íø³ îðãàí³çàö³éí³ äèðåêòèâè âèçíà÷àþòü âèìîãè äî ä³ÿëüíîñò³ â îáëàñò³ ACCESS. | | | | | 138 | ACCESS-4d | 3 | Ïåðñîíàë, ÿêèé âèêîíóº ä³ÿëüí³ñòü â îáëàñò³ ACCESS, çàáåçïå÷óº âèêîíàííÿ ïîêëàäåíèõ íà íüîãî îáîâ'ÿçê³â. | | | | | 139 | ACCESS-4e | 3 | Ïåðñîíàë, ÿêèé âèêîíóº ä³ÿëüí³ñòü â îáëàñò³ ACCESS, ìຠíàâè÷êè òà çíàííÿ, íåîáõ³äí³ äëÿ âèêîíàííÿ ïîêëàäåíèõ íà íèõ îáîâ'ÿçê³â. | | | | | 140 | ACCESS-4f | 3 | Åôåêòèâí³ñòü ä³ÿëüíîñò³ â îáëàñò³ ACCESS îö³íþºòüñÿ òà â³äñòåæóºòüñÿ. | | | | | Îáëàñòü: Ñèòóàö³éíà îá³çíàí³ñòü (SITUATION) | Ö³ëü 1. Âèêîíàííÿ æóðíàëþâàííÿ | 141 | SITUATION -1a | 1 | Ðåºñòðàö³ÿ âåäåòüñÿ äëÿ àêòèâ³â, ÿê³ âàæëèâ³ äëÿ âèêîíàííÿ ôóíêö³¿. | | | | | 142 | SITUATION-1b | 2 | Æóðíàëþâàííÿ ïðîâîäèòüñÿ äå öå ìîæëèâî äëÿ àêòèâ³â ó îïåðàö³ÿõ, ÿê³ ìîæóòü áóòè âèêîðèñòàí³ äëÿ äîñÿãíåííÿ ìåòè çàãðîçè. | | | | | 143 | SITUATION-1c | 2 | Âèìîãè äî æóðíàëþâàííÿ âñòàíîâëþþòüñÿ òà ï³äòðèìóþòüñÿ äëÿ IT-àêòèâ³â òà OT-àêòèâ³â, âàæëèâèõ äëÿ âèêîíàííÿ ôóíêö³¿, ³ àêòèâ³â ó ìåæàõ ôóíêö³¿, ÿê³ ìîæóòü áóòè âèêîðèñòàí³ äëÿ äîñÿãíåííÿ ö³ë³ çàãðîçè. | | | | | 144 | SITUATION-1d | 2 | Âèìîãè äî æóðíàëþâàííÿ âñòàíîâëþþòüñÿ òà ï³äòðèìóþòüñÿ äëÿ ³íôðàñòðóêòóðè ìîí³òîðèíãó ìåðåæ³ òà õîñò³â (íàïðèêëàä, âåá-øëþçè, ïðîãðàìíå çàáåçïå÷åííÿ äëÿ âèÿâëåííÿ ³ ðåàãóâàííÿ íà ê³íöåâèõ òî÷êàõ, ñèñòåìè âèÿâëåííÿ òà çàïîá³ãàííÿ âòîðãíåííÿì). | | | | | 145 | SITUATION-1e | 2 | Äàí³ æóðíàëó àãðåãóþòüñÿ ó ìåæàõ ôóíêö³¿. | | | | | 146 | SITUATION-1f | 3 | Ðåòåëüí³øå æóðíàëþâàííÿ âèêîíóºòüñÿ äëÿ àêòèâ³â ç âèùèì ïð³îðèòåòîì. | | | | | Ö³ëü 2. Ïðîâåäåííÿ ìîí³òîðèíãó | 147 | SITUATION-2a | 1 | Âèêîíóþòüñÿ ïåð³îäè÷í³ ïåðåâ³ðêè äàíèõ æóðíàë³â àáî ³íø³ çàõîäè ìîí³òîðèíãó ê³áåðáåçïåêè. | | | | | 148 | SITUATION-2b | 1 | Äàí³ òà ñïîâ³ùåííÿ ç ìåðåæåâèõ ³ õîñò-ìîí³òîðèíãîâèõ àêòèâ³â ³íôðàñòðóêòóðè ïåð³îäè÷íî ïåðåãëÿäàþòüñÿ. | | | | | 149 | SITUATION-2c | 2 | Âèìîãè äî ìîí³òîðèíãó òà àíàë³çó âñòàíîâëþþòüñÿ òà ï³äòðèìóþòüñÿ äëÿ ôóíêö³¿ òà çàáåçïå÷óþòü ñâîº÷àñíèé ïåðåãëÿä äàíèõ ïðî ïî䳿. | | | | | 150 | SITUATION-2d | 2 | ²íäèêàòîðè àíîìàëüíî¿ àêòèâíîñò³ âñòàíîâëþþòüñÿ òà ï³äòðèìóþòüñÿ íà îñíîâ³ ñèñòåìíèõ æóðíàë³â, ïîòîê³â äàíèõ, áàçîâèõ ïîêàçíèê³â ìåðåæ³, ïîä³é ê³áåðáåçïåêè òà àðõ³òåêòóðè òà â³äñòåæóþòüñÿ â ñåðåäîâèùàõ ÿê ³íôîðìàö³éíèõ, òàê îïåðàö³éíèõ òåõíîëîã³é. | | | | | 151 | SITUATION-2e | 2 | Ñèãíàëè òðèâîãè òà ñïîâ³ùåííÿ íàëàøòîâàí³ òà ï³äòðèìóþòüñÿ äëÿ ï³äòðèìêè ³äåíòèô³êàö³¿ ïîä³é ê³áåðáåçïåêè. | | | | | 152 | SITUATION-2f | 2 | ijÿëüí³ñòü ìîí³òîðèíãó óçãîäæóºòüñÿ ç ïðîô³ëåì çàãðîç (ïðàêòèêà THREAT-2e). | | | | | 153 | SITUATION-2g | 3 | Ðåòåëüí³øèé ìîí³òîðèíã çä³éñíþºòüñÿ äëÿ àêòèâ³â ç âèùèì ïð³îðèòåòîì. | | | | | 154 | SITUATION-2h | 3 | ²íôîðìàö³ÿ àíàë³çó ðèçèê³â (ïðàêòèêà RISK-3d) âèêîðèñòîâóºòüñÿ äëÿ âèçíà÷åííÿ ïîêàçíèê³â àíîìàëüíî¿ àêòèâíîñò³. | | | | | 155 | SITUATION-2i | 3 | ²íäèêàòîðè àíîìàëüíî¿ àêòèâíîñò³ îö³íþþòüñÿ òà îíîâëþþòüñÿ ïåð³îäè÷íî òà â³äïîâ³äíî äî âèçíà÷åíèõ òðèãåð³â, òàêèõ ÿê ñèñòåìí³ çì³íè òà çîâí³øí³ ïî䳿. | | | | | Ö³ëü 3. Ñòâîðåííÿ òà ï³äòðèìêà îá³çíàíîñò³ ïðî ñèòóàö³þ | 156 | SITUATION-3a | 2 | Ìåòîäè ïåðåäà÷³ ³íôîðìàö³¿ ïðî ïîòî÷íèé ñòàí ê³áåðáåçïåêè äëÿ ôóíêö³¿ âñòàíîâëåíî òà ï³äòðèìóþòüñÿ. | | | | | 157 | SITUATION-3b | 2 | Äàí³ ìîí³òîðèíãó àãðåãèðóþòüñÿ, ùîá çàáåçïå÷èòè ðîçóì³ííÿ ðîáî÷îãî ñòàíó ôóíêö³¿. | | | | | 158 | SITUATION-3c | 2 | ³äïîâ³äíà ³íôîðìàö³ÿ ç óñ³º¿ îðãàí³çàö³¿ äîñòóïíà äëÿ ï³äâèùåííÿ îá³çíàíîñò³ ïðî ñèòóàö³þ. | | | | | 159 | SITUATION-3d | 3 | Áóëî âèçíà÷åíî âèìîãè äî çâ³òíîñò³ ùîäî îá³çíàíîñò³ ïðî ñèòóàö³þ, ÿê³ ñòîñóþòüñÿ ñâîº÷àñíîãî ðîçïîâñþäæåííÿ ³íôîðìàö³¿ ïðî ê³áåðáåçïåêó çàö³êàâëåíèì ñòîðîíàì, âèçíà÷åíèì îðãàí³çàö³ºþ. | | | | | 160 | SITUATION-3e | 3 | Ðåëåâàíòíà ³íôîðìàö³ÿ ççîâí³ îðãàí³çàö³¿ çáèðàºòüñÿ òà ñòຠäîñòóïíîþ â óñ³é îðãàí³çàö³¿ äëÿ ï³äâèùåííÿ îá³çíàíîñò³ ïðî ñèòóàö³þ. | | | | | 161 | SITUATION-3f | 3 | Âñòàíîâëåíî òà ï³äòðèìóºòüñÿ ìîæëèâ³ñòü àãðåãèðóâàòè, ñï³ââ³äíîñèòè òà àíàë³çóâàòè ðåçóëüòàòè ä³ÿëüíîñò³ ìîí³òîðèíãó ê³áåðáåçïåêè òà íàäàâàòè ìàéæå â ðåàëüíîìó ÷àñ³ ðîçóì³ííÿ ñòàíó ê³áåðáåçïåêè ôóíêö³¿. | | | | | 162 | SITUATION-3g | 3 | Ïîïåðåäíüî âèçíà÷åí³ ñòàíè ðîáîòè çàäîêóìåíòîâàí³ òà ìîæóòü áóòè ðåàë³çîâàí³ íà îñíîâ³ ñòàíó ê³áåðáåçïåêè ôóíêö³¿ àáî êîëè âîíè âèêëèêàí³ ä³ÿëüí³ñòþ â ³íøèõ îáëàñòÿõ. | | | | | Ö³ëü 4. Óïðàâë³ííÿ â îáëàñò³ SITUATION | 163 | SITUATION-4a | 2 | Çàäîêóìåíòîâàí³ ïðîöåäóðè âñòàíîâëþþòüñÿ, äîòðèìóþòüñÿ òà ï³äòðèìóþòüñÿ äëÿ ä³ÿëüíîñò³ â îáëàñò³ SITUATION. | | | | | 164 | SITUATION-4b | 2 | Äîñòàòí³ ðåñóðñè (ëþäè, ô³íàíñóâàííÿ òà ³íñòðóìåíòè) íàäàþòüñÿ äëÿ ï³äòðèìêè ä³ÿëüíîñò³ â îáëàñò³ SITUATION. | | | | | 165 | SITUATION-4c | 3 | Àêòóàëüí³ ïîë³òèêè àáî ³íø³ îðãàí³çàö³éí³ äèðåêòèâè âèçíà÷àþòü âèìîãè äî ä³ÿëüíîñò³ â îáëàñò³ SITUATION. | | | | | 166 | SITUATION-4d | 3 | Ïåðñîíàë çàáåçïå÷óº âèêîíàííÿ çàõîä³â â îáëàñò³ SITUATION. | | | | | 167 | SITUATION-4e | 3 | Ïåðñîíàë, ÿêèé âèêîíóº ä³ÿëüí³ñòü â îáëàñò³ SITUATION, ìຠíàâè÷êè òà çíàííÿ, íåîáõ³äí³ äëÿ âèêîíàííÿ ïîêëàäåíèõ íà íüîãî îáîâ'ÿçê³â. | | | | | 168 | SITUATION-4f | 3 | Îö³íþºòüñÿ òà â³äñòåæóºòüñÿ åôåêòèâí³ñòü ä³ÿëüíîñò³ â îáëàñò³ SITUATION. | | | | | Îáëàñòü: Ðåàãóâàííÿ íà ïî䳿 òà ³íöèäåíòè, áåçïåðåðâí³ñòü ðîáîòè (RESPONSE) | Ö³ëü 1. Âèÿâëåííÿ ïî䳿 ê³áåðáåçïåêè | 169 | RESPONSE-1a | 1 | Âèÿâëåí³ ïî䳿 ê³áåðáåçïåêè ïîâ³äîìëÿþòüñÿ ïåâí³é îñîá³ àáî ðîë³ òà äîêóìåíòóþòüñÿ. | | | | | 170 | RESPONSE-1b | 2 | Âñòàíîâëþþòüñÿ êðèòå𳿠äëÿ âèÿâëåííÿ ïîä³é ê³áåðáåçïåêè (íàïðèêëàä, ùî º ïî䳺þ ê³áåðáåçïåêè, äå øóêàòè ïî䳿 ê³áåðáåçïåêè). | | | | | 171 | RESPONSE-1c | 2 | Ïî䳿 ê³áåðáåçïåêè äîêóìåíòóþòüñÿ íà îñíîâ³ âñòàíîâëåíèõ êðèòåð³¿â. | | | | | 172 | RESPONSE-1d | 3 | ²íôîðìàö³ÿ ïðî ïî䳿 êîðåëþºòüñÿ äëÿ ï³äòðèìêè àíàë³çó ³íöèäåíò³â øëÿõîì âèÿâëåííÿ çàêîíîì³ðíîñòåé, òåíäåíö³é òà ³íøèõ çàãàëüíèõ õàðàêòåðèñòèê. | | | | | 173 | RESPONSE-1e | 3 | ijÿëüí³ñòü âèÿâëåííÿ ïîä³é ê³áåðáåçïåêè êîðèãóºòüñÿ íà îñíîâ³ âèÿâëåíèõ ðèçèê³â ³ ïðîô³ëþ çàãðîçè îðãàí³çàö³¿ (ïðàêòèêà THREAT-2e). | | | | | 174 | RESPONSE-1f | 3 | Ñèòóàö³éíà îá³çíàí³ñòü äëÿ ôóíêö³¿ êîíòðîëþºòüñÿ äëÿ ï³äòðèìêè ³äåíòèô³êàö³¿ ïîä³é ê³áåðáåçïåêè. | | | | | Ö³ëü 2. Àíàë³ç ïîä³é ê³áåðáåçïåêè òà îãîëîøåííÿ ïðî ³íöèäåíòè | 175 | RESPONSE-2a | 1 | Êðèòå𳿠äëÿ îãîëîøåííÿ ³íöèäåíò³â ê³áåðáåçïåêè âñòàíîâëþþòüñÿ. | | | | | 176 | RESPONSE-2b | 1 | Ïî䳿 ê³áåðáåçïåêè àíàë³çóþòüñÿ, ùîá ï³äòâåðäèòè äåêëàðóâàííÿ ïðî ³íöèäåíòè ê³áåðáåçïåêè. | | | | | 177 | RESPONSE-2c | 2 | Êðèòå𳿠äåêëàðóâàííÿ ³íöèäåíò³â ê³áåðáåçïåêè âñòàíîâëþþòüñÿ íà îñíîâ³ ïîòåíö³éíîãî âïëèâó íà ôóíêö³þ. | | | | | 178 | RESPONSE-2d | 2 | Ïî䳿 ê³áåðáåçïåêè îãîëîøóþòüñÿ ³íöèäåíòàìè íà îñíîâ³ âñòàíîâëåíèõ êðèòåð³¿â. | | | | | 179 | RESPONSE-2e | 2 | Êðèòå𳿠äåêëàðóâàííÿ ³íöèäåíò³â ê³áåðáåçïåêè ïåð³îäè÷íî îíîâëþþòüñÿ â³äïîâ³äíî äî âèçíà÷åíèõ òðèãåð³â, òàêèõ ÿê îðãàí³çàö³éí³ çì³íè, âèñíîâêè, îòðèìàí³ ï³ä ÷àñ âèêîíàííÿ ïëàíó ç ê³áåðçàõèñòó, àáî íåùîäàâíî âèÿâëåí³ çàãðîçè. | | | | | 180 | RESPONSE-2f | 2 | ª ðåïîçèòîð³é, äå ïî䳿 òà ³íöèäåíòè ê³áåðáåçïåêè äîêóìåíòóþòüñÿ òà â³äñòåæóþòüñÿ äî çàêðèòòÿ. | | | | | 181 | RESPONSE-2g | 2 | Âíóòð³øí³ òà çîâí³øí³ çàö³êàâëåí³ ñòîðîíè (íàïðèêëàä, êåð³âíèêè, þðèñòè, äåðæàâí³ óñòàíîâè, ïîâ'ÿçàí³ îðãàí³çàö³¿, ïîñòà÷àëüíèêè, ãàëóçåâ³ îðãàí³çàö³¿, ðåãóëÿòîðè) âèçíà÷àþòüñÿ òà ïîâ³äîìëÿþòüñÿ ïðî ³íöèäåíòè íà îñíîâ³ âèìîã ùîäî çâ³òíîñò³ ïðî ñèòóàö³þ (ïðàêòèêà SITUATION-3d). | | | | | 182 | RESPONSE-2h | 3 | Êðèòå𳿠äëÿ äåêëàðóâàííÿ ³íöèäåíò³â ê³áåðáåçïåêè óçãîäæåí³ ç êðèòåð³ÿìè ïð³îðèòåòíîñò³ ê³áåððèçèê³â (ïðàêòèêà RISK-3b). | | | | | 183 | RESPONSE-2i | 3 | ²íöèäåíòè ê³áåðáåçïåêè ïîð³âíþþòüñÿ, àíàë³çóþòüñÿ, ùîá âèçíà÷èòè çàêîíîì³ðíîñò³, òåíäåíö³¿ òà ³íø³ çàãàëüí³ õàðàêòåðèñòèêè â ê³ëüêîõ ³íöèäåíòàõ. | | | | | Ö³ëü 3. Ðåàãóâàííÿ íà ³íöèäåíòè ê³áåðáåçïåêè | 184 | RESPONSE-3a | 1 | Âèçíà÷àºòüñÿ ïåðñîíàë çàëó÷åíèé äëÿ ðåàãóâàííÿ íà ³íöèäåíòè ê³áåðáåçïåêè òà ðîçïîä³ëÿþòüñÿ ðîë³. | | | | | 185 | RESPONSE-3b | 1 | Ðåàãóâàííÿ íà ³íöèäåíòè ê³áåðáåçïåêè âèêîíóºòüñÿ, ïðèíàéìí³, ó ïåâíèé ñïîñ³á, ùîá îáìåæèòè âïëèâ íà ôóíêö³þ òà â³äíîâèòè íîðìàëüíó ðîáîòó. | | | | | 186 | RESPONSE-3c | 1 | Çâ³òóâàííÿ ïðî ³íöèäåíòè çä³éñíþºòüñÿ (íàïðèêëàä, âíóòð³øíÿ çâ³òí³ñòü, CERT-UA òîùî). | | | | | 187 | RESPONSE-3d | 2 | Ðîçðîáëÿþòüñÿ òà ï³äòðèìóþòüñÿ ïëàíè ðåàãóâàííÿ íà ³íöèäåíòè ê³áåðáåçïåêè, ÿê³ ñòîñóþòüñÿ âñ³õ åòàï³â æèòòºâîãî öèêëó ³íöèäåíòó. | | | | | 188 | RESPONSE-3e | 2 | Ðåàãóâàííÿ íà ³íöèäåíòè ê³áåðáåçïåêè âèêîíóºòüñÿ â³äïîâ³äíî äî âèçíà÷åíèõ ïëàí³â ³ ïðîöåäóð. | | | | | 189 | RESPONSE-3f | 2 | Ïëàíè ðåàãóâàííÿ íà ³íöèäåíòè ê³áåðáåçïåêè âêëþ÷àþòü ïëàí êîìóí³êàö³é äëÿ âíóòð³øí³õ ³ çîâí³øí³õ çàö³êàâëåíèõ ñòîð³í. | | | | | 190 | RESPONSE-3g | 2 | Íàâ÷àííÿ ïëàíó ðåàãóâàííÿ íà ³íöèäåíòè ê³áåðáåçïåêè ïðîâîäÿòüñÿ ïåð³îäè÷íî òà â³äïîâ³äíî äî âèçíà÷åíèõ òðèãåð³â, òàêèõ ÿê ñèñòåìí³ çì³íè òà çîâí³øí³ ïî䳿. | | | | | 191 | RESPONSE-3h | 2 | Âèêîíóþòüñÿ çàõîäè íà îñíîâ³ îòðèìàíèõ óðîê³â ùîäî ³íöèäåíò³â ê³áåðáåçïåêè òà âæèâàþòüñÿ êîðèãóâàëüí³ ä³¿, âêëþ÷àþ÷è îíîâëåííÿ ïëàíó ðåàãóâàííÿ íà ³íöèäåíòè. | | | | | 192 | RESPONSE-3i | 3 | Âèêîíóºòüñÿ àíàë³ç îñíîâíèõ ïðè÷èí ³íöèäåíòó ê³áåðáåçïåêè òà âæèâàþòüñÿ êîðèãóâàëüí³ ä³¿, âêëþ÷àþ÷è îíîâëåííÿ ïëàíó ðåàãóâàííÿ íà ³íöèäåíòè. | | | | | 193 | RESPONSE-3j | 3 | Ðåàãóâàííÿ íà ³íöèäåíòè ê³áåðáåçïåêè óçãîäæóºòüñÿ ç ïîñòà÷àëüíèêàìè, ïðàâîîõîðîííèìè îðãàíàìè òà ³íøèìè çîâí³øí³ìè îðãàí³çàö³ÿìè, ÿêùî öå íåîáõ³äíî, âêëþ÷àþ÷è ï³äòðèìêó çáîðó òà çáåðåæåííÿ äîêàç³â. | | | | | 194 | RESPONSE-3k | 3 | Ïåðñîíàë ç ðåàãóâàííÿ íà ³íöèäåíòè ê³áåðáåçïåêè áåðå ó÷àñòü ó ñï³ëüíèõ íàâ÷àííÿõ ç ê³áåðáåçïåêè ç ³íøèìè îðãàí³çàö³ÿìè. | | | | | 195 | RESPONSE-3l | 3 | Ðåàãóâàííÿ íà ³íöèäåíòè ê³áåðáåçïåêè âèêîðèñòîâóº òà çàïóñêຠïîïåðåäíüî âèçíà÷åí³ ðåæèìè ðîáîòè (ïðàêòèêà SITUATION-3g). | | | | | Ö³ëü 4. Ðîçâ'ÿçàííÿ ïðîáëåìè ê³áåðáåçïåêè â áåçïåðåðâíîñò³ îïåðàö³é | 196 | RESPONSE-4a | 1 | Ðîçðîáëÿþòüñÿ ïëàíè áåçïåðåðâíîñò³, ùîá ï³äòðèìóâàòè òà â³äíîâëþâàòè ðîáîòó ôóíêö³¿, ÿêùî òðàïëÿºòüñÿ ïîä³ÿ ÷è ³íöèäåíò ó ñôåð³ ê³áåðáåçïåêè. | | | | | 197 | RESPONSE-4b | 1 | Ðåçåðâíå êîï³þâàííÿ äàíèõ äîñòóïíå òà ïðîòåñòîâàíå. | | | | | 198 | RESPONSE-4c | 1 | IT-àêòèâè òà OT-àêòèâè, ÿê³ ïîòðåáóþòü çàïàñíèõ ÷àñòèí, âèçíà÷àþòüñÿ. | | | | | 199 | RESPONSE-4d | 2 | Ó ïëàíàõ çàáåçïå÷åííÿ áåçïåðåðâíîñò³ ðîçãëÿäàþòüñÿ ïîòåíö³éí³ íàñë³äêè ³íöèäåíò³â ê³áåðáåçïåêè. | | | | | 200 | RESPONSE-4e | 2 | Àêòèâè òà ä³ÿëüí³ñòü, íåîáõ³äí³ äëÿ ï³äòðèìêè ì³í³ìàëüíèõ îïåðàö³é ôóíêö³¿, âèçíà÷àþòüñÿ òà äîêóìåíòóþòüñÿ â ïëàíàõ áåçïåðåðâíîñò³. | | | | | 201 | RESPONSE-4f | 2 | Ïëàíè çàáåçïå÷åííÿ áåçïåðåðâíîñò³ ñòîñóþòüñÿ IT-àêòèâ³â, OT-àêòèâ³â òà ³íôîðìàö³éíèõ àêòèâ³â, ÿê³ âàæëèâ³ äëÿ âèêîíàííÿ ôóíêö³é, âêëþ÷àþ÷è íàÿâí³ñòü ðåçåðâíèõ êîï³é äàíèõ ³ ¿õ çàì³íè, íàäëèøêîâèõ òà ðåçåðâíèõ IT-àêòèâ³â ³ OT-àêòèâ³â. | | | | | 202 | RESPONSE-4g | 2 | Ö³ëüîâ³ ïîêàçíèêè ÷àñó â³äíîâëåííÿ (RTO) ³ òî÷êè â³äíîâëåííÿ (RPO) äëÿ àêòèâ³â, ÿê³ âàæëèâ³ äëÿ âèêîíàííÿ ôóíêö³¿, âêëþ÷åí³ äî ïëàí³â áåçïåðåðâíîñò³. | | | | | 203 | RESPONSE-4h | 2 | Êðèòå𳿠³íöèäåíòó ê³áåðáåçïåêè, ÿê³ ³í³ö³þþòü âèêîíàííÿ ïëàí³â áåçïåðåðâíîñò³, âñòàíîâëþþòüñÿ òà ïîâ³äîìëÿþòüñÿ ïåðñîíàëó ç ðåàãóâàííÿ íà ³íöèäåíòè òà óïðàâë³ííÿ áåçïåðåðâí³ñòþ. | | | | | 204 | RESPONSE-4i | 2 | Ïëàíè áåçïåðåðâíîñò³ ïåðåâ³ðÿþòüñÿ çà äîïîìîãîþ îö³íþâàííÿ òà ïåð³îäè÷íèõ âïðàâ â³äïîâ³äíî äî âèçíà÷åíèõ òðèãåð³â, òàêèõ ÿê ñèñòåìí³ çì³íè òà çîâí³øí³ ïî䳿. | | | | | 205 | RESPONSE-4j | 2 | Êîíòðîëü ê³áåðáåçïåêè, ùî çàõèùຠðåçåðâí³ äàí³, åêâ³âàëåíòíèé àáî á³ëüø ñóâîðèé, í³æ êîíòðîëü, ùî çàõèùຠâèõ³äí³ äàí³. | | | | | 206 | RESPONSE-4k | 2 | Ðåçåðâí³ êîﳿ äàíèõ ëîã³÷íî àáî ô³çè÷íî â³äîêðåìëåí³ â³ä âèõ³äíèõ äàíèõ. | | | | | 207 | RESPONSE-4l | 2 | Äîñòóïí³ çàï÷àñòèíè äëÿ âèáðàíèõ IT- òà OT-àêòèâ³â. | | | | | 208 | RESPONSE-4m | 3 | Ïëàíè áåçïåðåðâíîñò³ óçãîäæåí³ ç âèÿâëåíèìè ðèçèêàìè òà ïðîô³ëåì çàãðîç îðãàí³çàö³¿ (ïðàêòèêà THREAT-2e), ùîá çàáåçïå÷èòè ïîêðèòòÿ âèçíà÷åíèõ êàòåãîð³é ðèçèê³â ³ çàãðîç. | | | | | 209 | RESPONSE-4n | 3 | Íàâ÷àííÿ ïëàíó áåçïåðåðâíîñò³ ñòîñóþòüñÿ ðèçèê³â âèùîãî ïð³îðèòåòó. | | | | | 210 | RESPONSE-4o | 3 | Ðåçóëüòàòè òåñòóâàííÿ àáî àêòèâàö³¿ ïëàíó áåçïåðåðâíîñò³ ïîð³âíþþòüñÿ ç ö³ëÿìè â³äíîâëåííÿ, ³ ïëàíè â³äïîâ³äíî âäîñêîíàëþþòüñÿ. | | | | | 211 | RESPONSE-4p | 3 | Ïëàíè áåçïåðåðâíîñò³ ïåð³îäè÷íî ïåðåãëÿäàþòüñÿ òà îíîâëþþòüñÿ. | | | | | Ö³ëü 5. Óïðàâë³ííÿ îáëàñòþ RESPONSE | 212 | RESPONSE-5a | 2 | Çàäîêóìåíòîâàí³ ïðîöåäóðè âñòàíîâëþþòüñÿ, äîòðèìóþòüñÿ òà ï³äòðèìóþòüñÿ äëÿ ä³ÿëüíîñò³ â îáëàñò³ RESPONSE. | | | | | 213 | RESPONSE-5b | 2 | Íàäàþòüñÿ â³äïîâ³äí³ ðåñóðñè (ëþäè, ô³íàíñóâàííÿ òà ³íñòðóìåíòè) äëÿ ï³äòðèìêè ä³ÿëüíîñò³ â îáëàñò³ RESPONSE. | | | | | 214 | RESPONSE-5c | 3 | Àêòóàëüí³ ïîë³òèêè àáî ³íø³ îðãàí³çàö³éí³ äèðåêòèâè âèçíà÷àþòü âèìîãè äî ä³ÿëüíîñò³ â îáëàñò³ RESPONSE. | | | | | 215 | RESPONSE-5d | 3 | Ïåðñîíàë, ÿêèé âèêîíóº ä³ÿëüí³ñòü â îáëàñò³ RESPONSE, çàáåçïå÷óº âèêîíàííÿ ïîêëàäåíèõ íà íüîãî îáîâ'ÿçê³â. | | | | | 216 | RESPONSE-5e | 3 | Ïåðñîíàë, ÿêèé âèêîíóº ä³ÿëüí³ñòü â îáëàñò³ RESPONSE, ìຠíàâè÷êè òà çíàííÿ, íåîáõ³äí³ äëÿ âèêîíàííÿ ïîêëàäåíèõ íà íèõ îáîâ'ÿçê³â. | | | | | 217 | RESPONSE-5f | 3 | Îö³íþºòüñÿ òà â³äñòåæóºòüñÿ åôåêòèâí³ñòü ä³ÿëüíîñò³ â îáëàñò³ RESPONSE. | | | | | Îáëàñòü: Óïðàâë³ííÿ ëàíöþãàìè ïîñòà÷àííÿ òà çîâí³øí³ìè âçàºìîçàëåæíîñòÿìè (THIRD-PARTIES) | Ö³ëü 1. Âèÿâëåííÿ òðåò³õ ñòîð³í ³ âèçíà÷åííÿ ïð³îðèòåò³â | 218 | THIRD-PARTIES-1a | 1 | Âèçíà÷àþòüñÿ âàæëèâ³ çàëåæíîñò³ ³íôîðìàö³éíèõ òà îïåðàö³éíèõ òåõíîëîã³é â³ä òðåò³õ ñòîð³í (òîáòî âíóòð³øí³ òà çîâí³øí³ ñòîðîíè, â³ä ÿêèõ çàëåæèòü âèêîíàííÿ ôóíêö³é, âêëþ÷íî ç îïåðàö³éíèìè ïàðòíåðàìè). | | | | | 219 | THIRD-PARTIES-1b | 1 | Òðåò³ ñòîðîíè, ÿê³ ìàþòü äîñòóï, êîíòðîëü àáî çáåð³ãàííÿ áóäü-ÿêèõ IT-àêòèâ³â, OT-àêòèâ³â ÷è ³íôîðìàö³éíèõ àêòèâ³â, ÿê³ º âàæëèâèìè äëÿ âèêîíàííÿ ôóíêö³é, âèçíà÷àþòüñÿ. | | | | | 220 | THIRD-PARTIES-1c | 2 | Äëÿ âèÿâëåííÿ ðèçèê³â, ùî âèíèêàþòü â³ä ïîñòà÷àëüíèê³â òà ³íøèõ òðåò³õ ñòîð³í, âèêîðèñòîâóºòüñÿ ïåâíèé ìåòîä. | | | | | 221 | THIRD-PARTIES-1d | 2 | Ïð³îðèòåòí³ñòü òðåò³õ ñòîð³í âèçíà÷àºòüñÿ â³äïîâ³äíî äî âñòàíîâëåíèõ êðèòåð³¿â (íàïðèêëàä, âàæëèâ³ñòü äëÿ âèêîíàííÿ ôóíêö³¿, âïëèâ êîìïðîì³ñó ÷è çðèâó, çäàòí³ñòü îáãîâîðþâàòè âèìîãè ê³áåðáåçïåêè â ðàìêàõ êîíòðàêò³â). | | | | | 222 | THIRD-PARTIES-1e | 2 | ϳäâèùåíèé ïð³îðèòåò ïðèçíà÷àºòüñÿ ïîñòà÷àëüíèêàì òà ³íøèì òðåò³ì ñòîðîíàì, êîìïðîìåòàö³ÿ ÷è çá³é ó ÿêèõ ìîæå ñïðè÷èíèòè çíà÷í³ íàñë³äêè (íàïðèêëàä, ïîñòà÷àëüíèêè ç îäíîãî äæåðåëà, ïîñòà÷àëüíèêè ç ïðèâ³ëåéîâàíèì äîñòóïîì). | | | | | 223 | THIRD-PARTIES-1f | 3 | Ïð³îðèòåçàö³ÿ ïîñòà÷àëüíèê³â òà ³íøèõ òðåò³õ ñòîð³í ïåð³îäè÷íî îíîâëþºòüñÿ â³äïîâ³äíî äî âèçíà÷åíèõ òðèãåð³â, òàêèõ ÿê ñèñòåìí³ çì³íè òà çîâí³øí³ ïî䳿. | | | | | Ö³ëü 2. Óïðàâë³ííÿ ðèçèêàìè òðåò³õ ñòîð³í | 224 | THIRD-PARTIES-2a | 1 | Âèá³ð ïîñòà÷àëüíèê³â òà ³íøèõ òðåò³õ ñòîð³í âêëþ÷ຠðîçãëÿä ¿õíüî¿ êâàë³ô³êàö³¿ ç ê³áåðáåçïåêè (â îêðåìèõ âèïàäêàõ). | | | | | 225 | THIRD-PARTIES-2b | 1 | Âèá³ð ïðîäóêò³â ³ ïîñëóã âêëþ÷ຠðîçãëÿä ¿õí³õ ìîæëèâîñòåé ê³áåðáåçïåêè (â îêðåìèõ âèïàäêàõ). | | | | | 226 | THIRD-PARTIES-2c | 2 | Âèêîðèñòîâóºòüñÿ îêðåñëåíèé ìåòîä äëÿ âèçíà÷åííÿ âèìîã äî ê³áåðáåçïåêè òà âïðîâàäæåííÿ ïîâ'ÿçàíèõ çàñîá³â êîíòðîëþ, ÿê³ çàõèùàþòü â³ä ðèçèê³â, ùî âèíèêàþòü â³ä ïîñòà÷àëüíèê³â òà ³íøèõ òðåò³õ ñòîð³í. | | | | | 227 | THIRD-PARTIES-2d | 2 | Äëÿ îö³íêè òà âèáîðó ïîñòà÷àëüíèê³â òà ³íøèõ òðåò³õ îñ³á âèêîðèñòîâóºòüñÿ âèçíà÷åíèé ìåòîä. | | | | | 228 | THIRD-PARTIES-2e | 2 | Äëÿ ïîñòà÷àëüíèê³â ç âèùèì ïð³îðèòåòîì òà ³íøèõ òðåò³õ ñòîð³í ðåàë³çîâàíî á³ëüø ñóâîðèé êîíòðîëü ê³áåðáåçïåêè. | | | | | 229 | THIRD-PARTIES-2f | 2 | Âèìîãè äî ê³áåðáåçïåêè (íàïðèêëàä, ïîâ³äîìëåííÿ ïðî âðàçëèâîñò³, âèìîãè SLA (Service Level Agreement äîãîâ³ð ïðî ð³âåíü îáñëóãîâóâàííÿ ì³æ çàìîâíèêîì òà âèêîíàâöåì ïîñëóã), ïîâ'ÿçàí³ ç ³íöèäåíòàìè) ôîðìàë³çóþòüñÿ â óãîäàõ ç ïîñòà÷àëüíèêàìè òà ³íøèìè òðåò³ìè ñòîðîíàìè. | | | | | 230 | THIRD-PARTIES-2g | 2 | Ïîñòà÷àëüíèêè òà ³íø³ òðåò³ ñòîðîíè ïåð³îäè÷íî ï³äòâåðäæóþòü ñâîþ çäàòí³ñòü â³äïîâ³äàòè âèìîãàì ê³áåðáåçïåêè. | | | | | 231 | THIRD-PARTIES-2h | 3 | Âèìîãè äî ê³áåðáåçïåêè äëÿ ïîñòà÷àëüíèê³â òà ³íøèõ òðåò³õ ñòîð³í âêëþ÷àþòü âèìîãè äî áåçïå÷íîãî ïðîãðàìíîãî çàáåçïå÷åííÿ òà áåçïå÷íî¿ ðîçðîáêè ïðîäóêòó, äå öå íåîáõ³äíî. | | | | | 232 | THIRD-PARTIES-2i | 3 | Êðèòå𳿠â³äáîðó äëÿ ïðîäóêò³â âêëþ÷àþòü ðîçãëÿä òåðì³í³â çàê³í÷åííÿ ñòðîêó åêñïëóàòàö³¿ òà çàâåðøåííÿ ï³äòðèìêè. | | | | | 233 | THIRD-PARTIES-2j | 3 | Êðèòå𳿠â³äáîðó âêëþ÷àþòü âðàõóâàííÿ çàõîä³â çàõèñòó â³ä ï³äðîáëåíîãî àáî ñêîìïðîìåòîâàíîãî ïðîãðàìíîãî çàáåçïå÷åííÿ, îáëàäíàííÿ òà ïîñëóã. | | | | | 234 | THIRD-PARTIES-2k | 3 | Êðèòå𳿠â³äáîðó äëÿ àêòèâ³â ç âèùèì ïð³îðèòåòîì âêëþ÷àþòü îö³íêó îïèñó ìàòåð³àë³â äëÿ êëþ÷îâèõ åëåìåíò³â àêòèâ³â, òàêèõ ÿê àïàðàòíå òà ïðîãðàìíå çàáåçïå÷åííÿ. | | | | | 235 | THIRD-PARTIES-2l | 3 | Êðèòå𳿠â³äáîðó äëÿ àêòèâ³â ³ç âèùèì ïð³îðèòåòîì âêëþ÷àþòü îö³íêó áóäü-ÿêèõ ïîâ'ÿçàíèõ ñòîðîíí³õ ñåðåäîâèù õîñòèíãó òà âèõ³äíèõ äàíèõ. | | | | | 236 | THIRD-PARTIES-2m | 3 | Ïðèéìàëüí³ âèïðîáóâàííÿ çàêóïëåíèõ àêòèâ³â âêëþ÷àþòü âðàõóâàííÿ âèìîã äî ê³áåðáåçïåêè. | | | | | Ö³ëü 3. Óïðàâë³ííÿ îáëàñòþ THIRD-PARTIES | 237 | THIRD-PARTIES-3a | 2 | Çàäîêóìåíòîâàí³ ïðîöåäóðè âñòàíîâëþþòüñÿ, äîòðèìóþòüñÿ òà ï³äòðèìóþòüñÿ äëÿ ä³ÿëüíîñò³ â îáëàñò³ THIRD-PARTIES. | | | | | 238 | THIRD-PARTIES-3b | 2 | Íàäàþòüñÿ â³äïîâ³äí³ ðåñóðñè (ëþäè, ô³íàíñóâàííÿ òà ³íñòðóìåíòè) äëÿ ï³äòðèìêè ä³ÿëüíîñò³ â îáëàñò³ THIRD-PARTIES. | | | | | 239 | THIRD-PARTIES-3c | 3 | Àêòóàëüí³ ïîë³òèêè àáî ³íø³ îðãàí³çàö³éí³ äèðåêòèâè âèçíà÷àþòü âèìîãè äî ä³ÿëüíîñò³ â îáëàñò³ THIRD-PARTIES. | | | | | 240 | THIRD-PARTIES-3d | 3 | Ïåðñîíàë, ÿêèé âèêîíóº ä³ÿëüí³ñòü â îáëàñò³ THIRD-PARTIES, çàáåçïå÷óº âèêîíàííÿ ïîêëàäåíèõ íà íüîãî îáîâ'ÿçê³â. | | | | | 241 | THIRD-PARTIES-3e | 3 | Ïåðñîíàë, ÿêèé âèêîíóº ä³ÿëüí³ñòü â îáëàñò³ THIRD-PARTIES, ìຠíàâè÷êè òà çíàííÿ, íåîáõ³äí³ äëÿ âèêîíàííÿ ïîêëàäåíèõ íà íèõ îáîâ'ÿçê³â. | | | | | 242 | THIRD-PARTIES-3f | 3 | Åôåêòèâí³ñòü ä³ÿëüíîñò³ â îáëàñò³ THIRD-PARTIES îö³íþºòüñÿ òà â³äñòåæóºòüñÿ. | | | | | Îáëàñòü: Óïðàâë³ííÿ ïåðñîíàëîì (WORKFORCE) | Ö³ëü 1. Âïðîâàäæåííÿ çàñîá³â êîíòðîëþ ïåðñîíàëó | 243 | WORKFORCE-1a | 1 | Ïåðåâ³ðêà ïåðñîíàëó (íàïðèêëàä, ïåðåâ³ðêà ðåïóòàö³¿, ïåðåâ³ðêà íà âì³ñò íàðêîòè÷íèõ ðå÷îâèí) ïðîâîäèòüñÿ, ïðèíàéìí³, ó òèì÷àñîâîìó ïîðÿäêó. | | | | | 244 | WORKFORCE-1b | 1 | Ïðîöåäóðè ïîä³ëó ïåðñîíàëó ñòîñóþòüñÿ ê³áåðáåçïåêè. | | | | | 245 | WORKFORCE-1c | 2 | Ïåðåâ³ðêà ïåðñîíàëó ïðîâîäèòüñÿ ïåð³îäè÷íî, ïðèíàéìí³, äëÿ ïîñàä, ÿê³ ìàþòü äîñòóï äî àêòèâ³â, âàæëèâèõ äëÿ âèêîíàííÿ ôóíêö³é. | | | | | 246 | WORKFORCE-1d | 2 | Ïðîöåäóðè ïîä³ëó òà ïåðåâåäåííÿ ïåðñîíàëó ñòîñóþòüñÿ ê³áåðáåçïåêè, âêëþ÷àþ÷è äîäàòêîâó ïåðåâ³ðêó (çà íåîáõ³äíîñò³). | | | | | 247 | WORKFORCE-1e | 2 | Ïåðñîíàë çàáåçïå÷óº çàõèñò ³ ïðèéíÿòíå âèêîðèñòàííÿ IT-àêòèâ³â, OT-àêòèâ³â òà ³íôîðìàö³éíèõ àêòèâ³â. | | | | | 248 | WORKFORCE-1f | 3 | Ïåðåâ³ðêà ïðîâîäèòüñÿ äëÿ âñ³õ ïîñàä (âêëþ÷àþ÷è ïðàö³âíèê³â, ïîñòà÷àëüíèê³â ³ ï³äðÿäíèê³â) íà ð³âí³, â³äïîâ³äíîìó ðèçèêó ïîñàäè. | | | | | 249 | WORKFORCE-1g | 3 | Ïåðñîíàë çàáåçïå÷óº äîòðèìàííÿ âñòàíîâëåíèõ ïîë³òèêè ³ ïðîöåäóð áåçïåêè. | | | | | Ö³ëü 2. ϳäâèùåííÿ îá³çíàíîñò³ ïðî ê³áåðáåçïåêó | 250 | WORKFORCE-2a | 1 | ijÿëüí³ñòü ç ï³äâèùåííÿ ð³âíÿ îá³çíàíîñò³ ùîäî ê³áåðáåçïåêè çä³éñíþºòüñÿ (ó ðàç³ íåîáõ³äíîñò³). | | | | | 251 | WORKFORCE-2b | 2 | Ö³ë³ ùîäî îá³çíàíîñò³ ç ê³áåðáåçïåêè âñòàíîâëåí³ òà ï³äòðèìóþòüñÿ. | | | | | 252 | WORKFORCE-2c | 2 | Ö³ë³ ïî³íôîðìîâàíîñò³ ïðî ê³áåðáåçïåêó óçãîäæåí³ ç âèçíà÷åíèì ïðîô³ëåì çàãðîç (ïðàêòèêà THREAT-2e). | | | | | 253 | WORKFORCE-2d | 2 | Ïåð³îäè÷íî ïðîâîäÿòüñÿ çàõîäè ç ï³äâèùåííÿ îá³çíàíîñò³ ùîäî ê³áåðáåçïåêè. | | | | | 254 | WORKFORCE-2e | 3 | Çàõîäè ç ï³äâèùåííÿ îá³çíàíîñò³ ùîäî ê³áåðáåçïåêè àäàïòîâàí³ äî ïîñàäè. | | | | | 255 | WORKFORCE-2f | 3 | Çàõîäè ç ï³äâèùåííÿ îá³çíàíîñò³ ùîäî ê³áåðáåçïåêè ñòîñóþòüñÿ ïîïåðåäíüî âèçíà÷åíèõ ñòàí³â ðîáîòè (ïðàêòèêà SITUATION-3g). | | | | | 256 | WORKFORCE-2g | 3 | Åôåêòèâí³ñòü ä³ÿëüíîñò³ ç ï³äâèùåííÿ îá³çíàíîñò³ ïðî ê³áåðáåçïåêó îö³íþºòüñÿ ïåð³îäè÷íî òà â³äïîâ³äíî äî âèçíà÷åíèõ òðèãåð³â, òàêèõ ÿê ñèñòåìí³ çì³íè òà çîâí³øí³ ïî䳿, ³ çà íåîáõ³äíîñò³ âíîñÿòüñÿ ïîêðàùåííÿ. | | | | | Ö³ëü 3. Ðîçïîä³ë îáîâ'ÿçê³â ùîäî ê³áåðáåçïåêè | 257 | WORKFORCE-3a | 1 | Âñòàíîâëåí³ îáîâ'ÿçêè ùîäî ê³áåðáåçïåêè. | | | | | 258 | WORKFORCE-3b | 1 | Äîòðèìàííÿ âñòàíîâëåíèõ îáîâ'ÿçê³â ïåðñîíàëó ùîäî ê³áåðáåçïåêè. | | | | | 259 | WORKFORCE-3c | 2 | Çàáåçïå÷åííÿ çîâí³øí³ìè ïîñòà÷àëüíèêàìè ïîñëóã îáîâ'ÿçê³â ùîäî ê³áåðáåçïåêè. | | | | | 260 | WORKFORCE-3d | 2 | Îáîâ'ÿçêè ùîäî ê³áåðáåçïåêè çàäîêóìåíòîâàí³. | | | | | 261 | WORKFORCE-3e | 3 | Îáîâ'ÿçêè ùîäî ê³áåðáåçïåêè òà âèìîãè äî ðîáîòè ïåðåãëÿäàþòüñÿ òà îíîâëþþòüñÿ ïåð³îäè÷íî òà, â³äïîâ³äíî, äî âèçíà÷åíèõ òðèãåð³â, òàêèõ ÿê ñèñòåìí³ çì³íè òà çì³íè îðãàí³çàö³éíî¿ ñòðóêòóðè. | | | | | 262 | WORKFORCE-3f | 3 | Ïðè ïðèçíà÷åí³ îáîâ'ÿçê³â ç ê³áåðáåçïåêè êåðóþòüñÿ çàáåçïå÷åííÿì àäåêâàòíîñò³ òà íàäì³ðíîñò³ ïîêðèòòÿ, âêëþ÷àþ÷è ïðàâîíàñòóïíèöòâî ïëàíóâàííÿ. | | | | | Ö³ëü 4. Ðîçâèòîê íàâè÷îê ïåðñîíàëó ç ê³áåðáåçïåêè | 263 | WORKFORCE-4a | 1 | Íàâ÷àííÿ ç ê³áåðáåçïåêè äîñòóïíå äëÿ ïåðñîíàëó, ÿêèé â³äïîâ³äຠçà ê³áåðáåçïåêó. | | | | | 264 | WORKFORCE-4b | 1 | Âèìîãè äî çíàíü, íàâè÷îê ³ çä³áíîñòåé ó ñôåð³ ê³áåðáåçïåêè, à òàêîæ ïðîãàëèíè âèçíà÷àþòüñÿ ÿê äëÿ ïîòî÷íèõ, òàê ³ äëÿ ìàéáóòí³õ îïåðàö³éíèõ ïîòðåá. | | | | | 265 | WORKFORCE-4c | 2 | Âèÿâëåí³ ïðîãàëèíè â çíàííÿõ, íàâè÷êàõ ³ çä³áíîñòÿõ ó ñôåð³ ê³áåðáåçïåêè óñóâàþòüñÿ øëÿõîì íàâ÷àííÿ ïåðñîíàëó, äîäàòêîâîìó íàéìó ôàõ³âö³â. | | | | | 266 | WORKFORCE-4d | 2 | Íàâ÷àííÿ ç ê³áåðáåçïåêè íàäàºòüñÿ ÿê ïåðåäóìîâà äëÿ íàäàííÿ äîñòóïó äî àêòèâ³â, âàæëèâèõ äëÿ âèêîíàííÿ ôóíêö³¿. | | | | | 267 | WORKFORCE-4e | 3 | Åôåêòèâí³ñòü íàâ÷àëüíèõ ïðîãðàì ïåð³îäè÷íî îö³íþºòüñÿ, ³ çà íåîáõ³äíîñò³ âäîñêîíàëþºòüñÿ. | | | | | 268 | WORKFORCE-4f | 3 | Ïðîãðàìè íàâ÷àííÿ âêëþ÷àþòü áåçïåðåðâíó îñâ³òó òà ìîæëèâîñò³ ïðîôåñ³éíîãî ðîçâèòêó äëÿ ïåðñîíàëó, ÿêèé ìຠçíà÷í³ îáîâ'ÿçêè ç ê³áåðáåçïåêè. | | | | | Ö³ëü 5. Óïðàâë³ííÿ îáëàñòþ WORKFORCE | 269 | WORKFORCE-5a | 2 | Çàäîêóìåíòîâàí³ ïðîöåäóðè âñòàíîâëþþòüñÿ, äîòðèìóþòüñÿ òà ï³äòðèìóþòüñÿ äëÿ ä³ÿëüíîñò³ â îáëàñò³ WORKFORCE. | | | | | 270 | WORKFORCE-5b | 2 | Íàäàþòüñÿ â³äïîâ³äí³ ðåñóðñè (ëþäè, ô³íàíñóâàííÿ òà ³íñòðóìåíòè) äëÿ ï³äòðèìêè ä³ÿëüíîñò³ â îáëàñò³ WORKFORCE. | | | | | 271 | WORKFORCE-5c | 3 | Àêòóàëüí³ ïîë³òèêè àáî ³íø³ îðãàí³çàö³éí³ äèðåêòèâè âèçíà÷àþòü âèìîãè äî ä³ÿëüíîñò³ â îáëàñò³ WORKFORCE. | | | | | 272 | WORKFORCE-5d | 3 | Ïåðñîíàë, ÿêèé âèêîíóº ä³ÿëüí³ñòü â îáëàñò³ WORKFORCE, çàáåçïå÷óº âèêîíàííÿ ïîêëàäåíèõ íà íüîãî îáîâ'ÿçê³â. | | | | | 273 | WORKFORCE-5e | 3 | Ïåðñîíàë, ÿêèé âèêîíóº ä³ÿëüí³ñòü ó ñôåð³ WORKFORCE, ìຠíàâè÷êè òà çíàííÿ, íåîáõ³äí³ äëÿ âèêîíàííÿ ïîêëàäåíèõ íà íèõ îáîâ'ÿçê³â. | | | | | 274 | WORKFORCE-5f | 3 | Åôåêòèâí³ñòü ä³ÿëüíîñò³ â îáëàñò³ WORKFORCE îö³íþºòüñÿ òà â³äñòåæóºòüñÿ. | | | | | Îáëàñòü: Àðõ³òåêòóðà ê³áåðáåçïåêè (ARCHITECTURE) | Ö³ëü 1. Ñòâîðåííÿ òà ï³äòðèìêà ñòðàòå㳿 òà ïðîãðàìè àðõ³òåêòóðè ê³áåðáåçïåêè | 275 | ARCHITECTURE-1a | 1 | Îðãàí³çàö³ÿ ìຠñòðàòåã³þ àðõ³òåêòóðè ê³áåðáåçïåêè, ÿêà ðîçðîáëÿºòüñÿ òà âèêîðèñòîâóºòüñÿ íà ïðàêòèö³ ÷àñ â³ä ÷àñó. | | | | | 276 | ARCHITECTURE-1b | 2 | Ñòðàòåã³ÿ àðõ³òåêòóðè ê³áåðáåçïåêè âñòàíîâëþºòüñÿ òà ï³äòðèìóºòüñÿ â³äïîâ³äíî äî ñòðàòå㳿 ïðîãðàìè ê³áåðáåçïåêè îðãàí³çàö³¿ (ïðàêòèêà PROGRAM-1b) òà àðõ³òåêòóðè ï³äïðèºìñòâà. | | | | | 277 | ARCHITECTURE-1c | 2 | Âñòàíîâëþºòüñÿ òà ï³äòðèìóºòüñÿ çàäîêóìåíòîâàíà àðõ³òåêòóðà ê³áåðáåçïåêè, ÿêà âêëþ÷ຠñèñòåìè ³íôîðìàö³éíèõ, îïåðàö³éíèõ òåõíîëîã³é òà ìåðåæ³, ³ óçãîäæóºòüñÿ ç êàòåãîðèçàö³ºþ òà ïð³îðèòåçàö³ºþ àêòèâ³â. | | | | | 278 | ARCHITECTURE-1d | 2 | Óïðàâë³ííÿ àðõ³òåêòóðîþ ê³áåðáåçïåêè (íàïðèêëàä, ïðîöåñ ïåðåâ³ðêè àðõ³òåêòóðè) âèçíà÷åíî òà ï³äòðèìóºòüñÿ, ùî âêëþ÷ຠíàÿâí³ñòü ïîëîæåííÿ ùîäî ïåð³îäè÷íèõ ïåðåâ³ðîê àðõ³òåêòóðè òà ïðîöåñó âíåñåííÿ çì³í. | | | | | 279 | ARCHITECTURE-1e | 2 | Ô³íàíñîâà ï³äòðèìêà âèùîãî êåð³âíèöòâà ïðîãðàìè àðõ³òåêòóðè ê³áåðáåçïåêè º ïîì³òíîþ òà àêòèâíîþ. | | | | | 280 | ARCHITECTURE-1f | 2 | Àðõ³òåêòóðà ê³áåðáåçïåêè âèçíà÷ຠòà ï³äòðèìóº âèìîãè äî ê³áåðáåçïåêè àêòèâ³â îðãàí³çàö³¿. | | | | | 281 | ARCHITECTURE-1g | 2 | Çàñîáè êåðóâàííÿ ê³áåðáåçïåêîþ âèáèðàþòüñÿ òà âïðîâàäæóþòüñÿ â³äïîâ³äíî äî âèìîã ê³áåðáåçïåêè. | | | | | 282 | ARCHITECTURE-1h | 3 | Ñòðàòåã³ÿ òà ïðîãðàìà àðõ³òåêòóðè ê³áåðáåçïåêè óçãîäæåí³ ç³ ñòðàòå㳺þ òà ïðîãðàìîþ êîðïîðàòèâíî¿ àðõ³òåêòóðè îðãàí³çàö³¿. | | | | | 283 | ARCHITECTURE-1i | 3 | ³äïîâ³äí³ñòü ñèñòåì ³ ìåðåæ îðãàí³çàö³¿ àðõ³òåêòóð³ ê³áåðáåçïåêè îö³íþºòüñÿ ïåð³îäè÷íî òà â³äïîâ³äíî äî âèçíà÷åíèõ òðèãåð³â, òàêèõ ÿê ñèñòåìí³ çì³íè òà çîâí³øí³ ïî䳿. | | | | | 284 | ARCHITECTURE-1j | 3 | Àðõ³òåêòóðà ê³áåðáåçïåêè êåðóºòüñÿ ³íôîðìàö³ºþ ïðî àíàë³ç ðèçèê³â îðãàí³çàö³¿ (ïðàêòèêà RISK-3d) ³ ïðîô³ëåì çàãðîç (ïðàêòèêà THREAT-2e). | | | | | 285 | ARCHITECTURE-1k | 3 | Àðõ³òåêòóðà ê³áåðáåçïåêè ïîñèëàºòüñÿ íà ïîïåðåäíüî âèçíà÷åí³ ñòàíè ðîáîòè (ïðàêòèêà SITUATION-3g). | | | | | Ö³ëü 2. Âïðîâàäæåííÿ çàõèñòó ìåðåæ³ ÿê åëåìåíòó àðõ³òåêòóðè ê³áåðáåçïåêè | 286 | ARCHITECTURE-2a | 1 | Çàõèñò ìåðåæ³ âïðîâàäæóºòüñÿ, ïðèíàéìí³, ó ïåâíèé ñïîñ³á. | | | | | 287 | ARCHITECTURE-2b | 1 | Ñèñòåìè ³íôîðìàö³éíèõ òåõíîëîã³é îðãàí³çàö³¿ â³äîêðåìëþþòüñÿ â³ä ñèñòåì îïåðàö³éíèõ òåõíîëîã³é çà äîïîìîãîþ ñåãìåíòàö³¿, çà äîïîìîãîþ ô³çè÷íèõ àáî ëîã³÷íèõ çàñîá³â. | | | | | 288 | ARCHITECTURE-2c | 2 | Ìåðåæåâèé çàõèñò âèçíà÷àºòüñÿ òà çàáåçïå÷óºòüñÿ äëÿ âèáðàíèõ òèï³â àêòèâ³â â³äïîâ³äíî äî ðèçèêó òà ïð³îðèòåòó àêòèâ³â (íàïðèêëàä, âíóòð³øí³ àêòèâè, àêòèâè ïåðèìåòðà, àêòèâè, ï³äêëþ÷åí³ äî Wi-Fi îðãàí³çàö³¿, õìàðí³ àêòèâè, â³ääàëåíèé äîñòóï ³ çîâí³øí³ ïðèñòðî¿). | | | | | 289 | ARCHITECTURE-2d | 2 | Àêòèâè, âàæëèâ³ äëÿ âèêîíàííÿ ôóíêö³¿, ëîã³÷íî àáî ô³çè÷íî ñåãìåíòóþòüñÿ íà îêðåì³ çîíè áåçïåêè â³äïîâ³äíî äî âèìîã ê³áåðáåçïåêè àêòèâ³â. | | | | | 290 | ARCHITECTURE-2e | 2 | Çàõèñò ìåðåæ³ âêëþ÷ຠïðèíöèïè íàéìåíøèõ ïðèâ³ëå¿â ³ íàéìåíøî¿ ôóíêö³îíàëüíîñò³. | | | | | 291 | ARCHITECTURE-2f | 2 | Çàõèñò ìåðåæ³ âêëþ÷ຠìîí³òîðèíã, àíàë³ç ³ êîíòðîëü ìåðåæåâîãî òðàô³êó äëÿ âèáðàíèõ çîí áåçïåêè (íàïðèêëàä, ì³æìåðåæåâ³ åêðàíè, á³ë³ ñïèñêè, ñèñòåìè âèÿâëåííÿ òà çàïîá³ãàííÿ âòîðãíåííÿì IDPS). | | | | | 292 | ARCHITECTURE-2g | 2 | Âåáòðàô³ê ³ åëåêòðîííà ïîøòà â³äñòåæóþòüñÿ, àíàë³çóþòüñÿ òà êîíòðîëþþòüñÿ (íàïðèêëàä, áëîêóâàííÿ øê³äëèâèõ ïîñèëàíü, áëîêóâàííÿ ï³äîçð³ëèõ çàâàíòàæåíü, ìåòîäè àâòåíòèô³êàö³¿ åëåêòðîííî¿ ïîøòè, áëîêóâàííÿ IP-àäðåñ). | | | | | 293 | ARCHITECTURE-2h | 3 | Óñ³ àêòèâè ñåãìåíòîâàí³ íà îêðåì³ çîíè áåçïåêè â³äïîâ³äíî äî âèìîã ê³áåðáåçïåêè. | | | | | 294 | ARCHITECTURE-2i | 3 | Ó ðàç³ íåîáõ³äíîñò³ ðåàë³çóþòüñÿ îêðåì³ ìåðåæ³, ÿê³ ëîã³÷íî àáî ô³çè÷íî ñåãìåíòóþòü àêòèâè â çîíè áåçïåêè ç íåçàëåæíîþ àâòåíòèô³êàö³ºþ. | | | | | 295 | ARCHITECTURE-2j | 3 | Ñèñòåìè OT º îïåðàö³éíî íåçàëåæíèìè â³ä IT-ñèñòåì, òîìó îïåðàö³¿ OT ìîæóòü ï³äòðèìóâàòèñÿ ï³ä ÷àñ çáîþ â ðîáîò³ IT-ñèñòåì. | | | | | 296 | ARCHITECTURE-2k | 3 | ϳäêëþ÷åííÿ ïðèñòðî¿â äî ìåðåæ³ êîíòðîëþºòüñÿ, ùîá ãàðàíòóâàòè ï³äêëþ÷åííÿ ëèøå àâòîðèçîâàíèõ ïðèñòðî¿â (íàïðèêëàä, êîíòðîëü äîñòóïó äî ìåðåæ³ (Network Access Control NAC)). | | | | | 297 | ARCHITECTURE-2l | 3 | Àðõ³òåêòóðà ê³áåðáåçïåêè äîçâîëÿº ³çîëþâàòè ñêîìïðîìåòîâàí³ àêòèâè. | | | | | Ö³ëü 3. Âïðîâàäæåííÿ áåçïåêè IT-àêòèâ³â òà OT-àêòèâ³â ÿê åëåìåíòà àðõ³òåêòóðè ê³áåðáåçïåêè | 298 | ARCHITECTURE-3a | 1 | Ëîã³÷íèé ³ ô³çè÷íèé êîíòðîëü äîñòóïó âïðîâàäæåíî äëÿ çàõèñòó àêòèâ³â, âàæëèâèõ äëÿ âèêîíàííÿ ôóíêö³¿, äå öå ìîæëèâî. | | | | | 299 | ARCHITECTURE-3b | 1 | Çàõèñò ê³íöåâèõ òî÷îê (íàïðèêëàä, áåçïå÷íà êîíô³ãóðàö³ÿ, ïðîãðàìè áåçïåêè òà ìîí³òîðèíãó õîñòà) ðåàë³çóºòüñÿ äëÿ çàõèñòó àêòèâ³â, âàæëèâèõ äëÿ âèêîíàííÿ ôóíêö³¿, äå öå ìîæëèâî. | | | | | 300 | ARCHITECTURE-3c | 2 | Çàñòîñîâóºòüñÿ ïðèíöèï íàéìåíøèõ ïðèâ³ëå¿â (íàïðèêëàä, îáìåæåííÿ àäì³í³ñòðàòèâíîãî äîñòóïó äëÿ êîðèñòóâà÷³â ³ îáë³êîâèõ çàïèñ³â ñåðâ³ñ³â). | | | | | 301 | ARCHITECTURE-3d | 2 | Çàñòîñîâóºòüñÿ ïðèíöèï íàéìåíøî¿ ôóíêö³îíàëüíîñò³ (íàïðèêëàä, îáìåæåííÿ ïîñëóã, îáìåæåííÿ ïðîãðàì, îáìåæåííÿ ïîðò³â, îáìåæåííÿ ï³äêëþ÷åíèõ ïðèñòðî¿â). | | | | | 302 | ARCHITECTURE-3e | 2 | Çàõèùåí³ êîíô³ãóðàö³¿ âñòàíîâëþþòüñÿ òà ï³äòðèìóþòüñÿ ÿê ÷àñòèíà ïðîöåñó ðîçãîðòàííÿ àêòèâ³â, äå öå ìîæëèâî. | | | | | 303 | ARCHITECTURE-3f | 2 | Ïðîãðàìè áåçïåêè ïîòð³áí³ ÿê åëåìåíò êîíô³ãóðàö³¿ ïðèñòðîþ, äå öå ìîæëèâî (íàïðèêëàä, âèÿâëåííÿ òà ðåàãóâàííÿ íà ê³íöåâèõ òî÷êàõ, ì³æìåðåæåâ³ åêðàíè íà õîñòàõ). | | | | | 304 | ARCHITECTURE-3g | 2 | Âèêîðèñòàííÿ çí³ìíèõ íîñ³¿â ³íôîðìàö³¿ êîíòðîëþºòüñÿ (íàïðèêëàä, îáìåæåííÿ âèêîðèñòàííÿ USB-ïðèñòðî¿â, êåðóâàííÿ çîâí³øí³ìè æîðñòêèìè äèñêàìè). | | | | | 305 | ARCHITECTURE-3h | 2 | Êîíòðîëü ê³áåðáåçïåêè âïðîâàäæóºòüñÿ äëÿ âñ³õ àêòèâ³â ó ìåæàõ ôóíêö³¿ àáî íà ð³âí³ àêòèâ³â, àáî ÿê êîìïåíñàö³éíèé êîíòðîëü, ÿêùî êîíòðîëü íà ð³âí³ àêòèâ³â íåìîæëèâèé. | | | | | 306 | ARCHITECTURE-3i | 2 | ijÿëüí³ñòü ç òåõí³÷íîãî îáñëóãîâóâàííÿ òà óïðàâë³ííÿ ïîòóæí³ñòþ âèêîíóºòüñÿ äëÿ âñ³õ àêòèâ³â ó ìåæàõ ôóíêö³¿. | | | | | 307 | ARCHITECTURE-3j | 2 | Ô³çè÷íå ðîáî÷å ñåðåäîâèùå êîíòðîëþºòüñÿ äëÿ çàõèñòó ðîáîòè àêòèâ³â ó ìåæàõ ôóíêö³¿. | | | | | 308 | ARCHITECTURE-3k | 2 | Äëÿ àêòèâ³â ç âèùèì ïð³îðèòåòîì ðåàë³çîâàíî á³ëüø ñóâîðèé êîíòðîëü ê³áåðáåçïåêè. | | | | | 309 | ARCHITECTURE-3l | 3 | Êîíô³ãóðàö³ÿ òà çì³íè ì³êðîïðîãðàì ïðîøèâêè êîíòðîëþþòüñÿ ïðîòÿãîì æèòòºâîãî öèêëó àêòèâó. | | | | | 310 | ARCHITECTURE-3m | 3 | Åëåìåíòè êåðóâàííÿ (òàê³, ÿê á³ë³ ñïèñêè, ÷îðí³ ñïèñêè ³ íàëàøòóâàííÿ êîíô³ãóðàö³é) ðåàë³çîâàíî äëÿ çàïîá³ãàííÿ âèêîíàííþ íåàâòîðèçîâàíîãî êîäó. | | | | | Ö³ëü 4. Âïðîâàäèòè áåçïåêó ïðîãðàìíîãî çàáåçïå÷åííÿ ÿê åëåìåíò àðõ³òåêòóðè ê³áåðáåçïåêè | 311 | ARCHITECTURE-4a | 2 | Ïðîãðàìíå çàáåçïå÷åííÿ, ðîçðîáëåíå âëàñíèìè ñèëàìè äëÿ ðîçãîðòàííÿ íà àêòèâàõ ç âèùèì ïð³îðèòåòîì, ðîçðîáëÿºòüñÿ ç âèêîðèñòàííÿì áåçïå÷íèõ ìåòîä³â ðîçðîáêè ïðîãðàìíîãî çàáåçïå÷åííÿ. | | | | | 312 | ARCHITECTURE-4b | 2 | Âèá³ð çàêóïëåíîãî ïðîãðàìíîãî çàáåçïå÷åííÿ äëÿ ðîçãîðòàííÿ íà àêòèâàõ ³ç âèùèì ïð³îðèòåòîì âêëþ÷ຠðîçãëÿä ïðàêòèê áåçïå÷íî¿ ðîçðîáêè ïðîãðàìíîãî çàáåçïå÷åííÿ ïîñòà÷àëüíèêà. | | | | | 313 | ARCHITECTURE-4c | 2 | Çàõèùåí³ êîíô³ãóðàö³¿ ïðîãðàìíîãî çàáåçïå÷åííÿ íåîáõ³äí³ ÿê ÷àñòèíà ïðîöåñó ðîçãîðòàííÿ ïðîãðàìíîãî çàáåçïå÷åííÿ ÿê äëÿ ïðèäáàíîãî ïðîãðàìíîãî çàáåçïå÷åííÿ, òàê ³ äëÿ ïðîãðàìíîãî çàáåçïå÷åííÿ, ðîçðîáëåíîãî âëàñíèìè ñèëàìè. | | | | | 314 | ARCHITECTURE-4d | 3 | Óñå ïðîãðàìíå çàáåçïå÷åííÿ, ðîçðîáëåíå âëàñíèìè ñèëàìè, ðîçðîáëÿºòüñÿ ç âèêîðèñòàííÿì áåçïå÷íèõ ìåòîä³â ðîçðîáêè ïðîãðàìíîãî çàáåçïå÷åííÿ. | | | | | 315 | ARCHITECTURE-4e | 3 | Âèá³ð óñüîãî çàêóïëåíîãî ïðîãðàìíîãî çàáåçïå÷åííÿ âêëþ÷ຠðîçãëÿä ïðàêòèê áåçïå÷íî¿ ðîçðîáêè ïðîãðàìíîãî çàáåçïå÷åííÿ ïîñòà÷àëüíèêà. | | | | | 316 | ARCHITECTURE-4f | 3 | Ïðîöåñ ïåðåãëÿäó àðõ³òåêòóðè îö³íþº áåçïåêó íîâèõ ïðîãðàì ³ àíàë³çóº ïðîãðàìè ïåðåä ¿õ ðîçãîðòàííÿì. | | | | | 317 | ARCHITECTURE-4g | 3 | Àâòåíòè÷í³ñòü óñüîãî ïðîãðàìíîãî çàáåçïå÷åííÿ òà ì³êðîïðîãðàì ïðîøèâêè ïåðåâ³ðÿºòüñÿ ïåðåä ðîçãîðòàííÿì. | | | | | 318 | ARCHITECTURE-4h | 3 | Òåñòóâàííÿ áåçïåêè (íàïðèêëàä, ñòàòè÷íå òåñòóâàííÿ, äèíàì³÷íå òåñòóâàííÿ, ôàçèíã-òåñòóâàííÿ, òåñòóâàííÿ íà ïðîíèêíåííÿ) âèêîíóºòüñÿ äëÿ âëàñíî ðîçðîáëåíèõ ³ âëàñíî ñïåö³àëüíî ðîçðîáëåíèõ ïðîãðàì ïåð³îäè÷íî òà â³äïîâ³äíî äî âèçíà÷åíèõ òðèãåð³â, òàêèõ ÿê ñèñòåìí³ çì³íè òà çîâí³øí³ ïî䳿. | | | | | Ö³ëü 5. Âïðîâàäèòè çàõèñò äàíèõ ÿê åëåìåíò àðõ³òåêòóðè ê³áåðáåçïåêè | 319 | ARCHITECTURE-5a | 1 | Êîíô³äåíö³éí³ äàí³ çàõèùåí³. | | | | | 320 | ARCHITECTURE-5b | 2 | Óñ³ äàí³, ùî ïåðåáóâàþòü ó ñòàí³ ñïîêîþ, çàõèùåíî äëÿ âèáðàíèõ êàòåãîð³é äàíèõ. | | | | | 321 | ARCHITECTURE-5c | 2 | Óñ³ äàí³, ùî ïåðåäàþòüñÿ, çàõèùåíî äëÿ âèáðàíèõ êàòåãîð³é äàíèõ. | | | | | 322 | ARCHITECTURE-5d | 2 | Äëÿ âèáðàíèõ êàòåãîð³é äàíèõ ðåàë³çîâàíî çàñîáè êðèïòîãðàô³÷íîãî çàõèñòó äëÿ äàíèõ ó ñòàí³ ñïîêîþ òà äàíèõ, ùî ïåðåäàþòüñÿ. | | | | | 323 | ARCHITECTURE-5e | 2 | ²íôðàñòðóêòóðà êåðóâàííÿ êëþ÷àìè (òîáòî ãåíåðàö³ÿ êëþ÷³â, çáåð³ãàííÿ êëþ÷³â, çíèùåííÿ êëþ÷³â, îíîâëåííÿ êëþ÷³â ³ â³äêëèêàííÿ êëþ÷³â) ðåàë³çîâàíà äëÿ ï³äòðèìêè êðèïòîãðàô³÷íîãî êîíòðîëþ. | | | | | 324 | ARCHITECTURE-5f | 2 | Ðåàë³çîâàíî åëåìåíòè êåðóâàííÿ äëÿ óíåìîæëèâëåííÿ âèêðàäàííÿ äàíèõ (íàïðèêëàä, çàñîáè çàïîá³ãàííÿ âòðàò³ äàíèõ). | | | | | 325 | ARCHITECTURE-5g | 3 | Àðõ³òåêòóðà ê³áåðáåçïåêè âêëþ÷ຠçàñîáè çàõèñòó (íàïðèêëàä, ïîâíå øèôðóâàííÿ äèñêà) äëÿ äàíèõ, ÿê³ çáåð³ãàþòüñÿ íà àêòèâàõ, ÿê³ ìîæóòü áóòè âòðà÷åí³ àáî âèêðàäåí³. | | | | | 326 | ARCHITECTURE-5h | 3 | Àðõ³òåêòóðà ê³áåðáåçïåêè âêëþ÷ຠçàõèñò â³ä íåñàíêö³îíîâàíèõ çì³í ïðîãðàìíîãî çàáåçïå÷åííÿ, ì³êðîïðîãðàì ïðîøèâêè îáëàäíàííÿ òà äàíèõ. | | | | | Ö³ëü 6. Óïðàâë³íñüêà ä³ÿëüí³ñòü ó ñôåð³ ARCHITECTURE | 327 | ARCHITECTURE-6a | 3 | Çàäîêóìåíòîâàí³ ïðîöåäóðè âñòàíîâëþþòüñÿ, äîòðèìóþòüñÿ òà ï³äòðèìóþòüñÿ äëÿ ä³ÿëüíîñò³ â îáëàñò³ ARCHITECTURE. | | | | | 328 | ARCHITECTURE-6b | 3 | Íåîáõ³äí³ ðåñóðñè (ëþäè, ô³íàíñóâàííÿ òà ³íñòðóìåíòè) íàäàþòüñÿ äëÿ ï³äòðèìêè ä³ÿëüíîñò³ â îáëàñò³ ARCHITECTURE. | | | | | 329 | ARCHITECTURE-6c | 3 | Àêòóàëüí³ ïîë³òèêè àáî ³íø³ îðãàí³çàö³éí³ äèðåêòèâè âèçíà÷àþòü âèìîãè äî ä³ÿëüíîñò³ â îáëàñò³ ARCHITECTURE. | | | | | 330 | ARCHITECTURE-6d | 3 | Ïåðñîíàë, ÿêèé âèêîíóº ä³ÿëüí³ñòü â îáëàñò³ ARCHITECTURE, çàáåçïå÷óº âèêîíàííÿ ïîêëàäåíèõ íà íüîãî îáîâ'ÿçê³â. | | | | | 331 | ARCHITECTURE-6e | 3 | Ïåðñîíàë, ÿêèé âèêîíóº ä³ÿëüí³ñòü â îáëàñò³ ARCHITECTURE, ìຠíàâè÷êè òà çíàííÿ, íåîáõ³äí³ äëÿ âèêîíàííÿ ïîêëàäåíèõ íà íèõ îáîâ'ÿçê³â. | | | | | 332 | ARCHITECTURE-6f | 3 | Îö³íþºòüñÿ òà â³äñòåæóºòüñÿ åôåêòèâí³ñòü ä³ÿëüíîñò³ â îáëàñò³ ARCHITECTURE. | | | | | Îáëàñòü: Óïðàâë³ííÿ ïðîãðàìîþ ê³áåðáåçïåêè (PROGRAM) | Ö³ëü 1. Ñòâîðåííÿ ñòðàòå㳿 ïðîãðàìè ê³áåðáåçïåêè | 333 | PROGRAM-1a | 1 | Îðãàí³çàö³ÿ ìຠïðîãðàìíó ñòðàòåã³þ ê³áåðáåçïåêè, ÿêà ìîæå áóòè ðîçðîáëåíà òà êåðîâàíà ñïåö³àëüíèì ÷èíîì. | | | | | 334 | PROGRAM-1b | 2 | Ñòðàòåã³ÿ ïðîãðàìè ê³áåðáåçïåêè âèçíà÷ຠö³ë³ òà çàâäàííÿ ä³ÿëüíîñò³ îðãàí³çàö³¿ ç ê³áåðáåçïåêè. | | | | | 335 | PROGRAM-1c | 2 | Ñòðàòåã³ÿ òà ïð³îðèòåòè ïðîãðàìè ê³áåðáåçïåêè çàäîêóìåíòîâàí³ òà óçãîäæåí³ ç ì³ñ³ºþ îðãàí³çàö³¿, ñòðàòåã³÷íèìè ö³ëÿìè òà ðèçèêàìè äëÿ êðèòè÷íî¿ ³íôðàñòðóêòóðè. | | | | | 336 | PROGRAM-1d | 2 | Ñòðàòåã³ÿ ïðîãðàìè ê³áåðáåçïåêè âèçíà÷ຠï³äõ³ä îðãàí³çàö³¿ äî çàáåçïå÷åííÿ ïðîãðàìíîãî íàãëÿäó òà óïðàâë³ííÿ ä³ÿëüí³ñòþ ç ê³áåðáåçïåêè. | | | | | 337 | PROGRAM-1e | 2 | Ñòðàòåã³ÿ ïðîãðàìè ê³áåðáåçïåêè âèçíà÷ຠñòðóêòóðó òà îðãàí³çàö³þ ïðîãðàìè ê³áåðáåçïåêè. | | | | | 338 | PROGRAM-1f | 2 | Ñòðàòåã³ÿ ïðîãðàìè ê³áåðáåçïåêè âèçíà÷ຠñòàíäàðòè òà âêàç³âêè, ÿêèõ ìຠäîòðèìóâàòèñÿ ïðîãðàìà. | | | | | 339 | PROGRAM-1g | 2 | Ñòðàòåã³ÿ ïðîãðàìè ê³áåðáåçïåêè âèçíà÷ຠáóäü-ÿê³ çàñòîñîâí³ âèìîãè â³äïîâ³äíîñò³, ÿêèì ìຠâ³äïîâ³äàòè ïðîãðàìà (íàïðèêëàä, ISO). | | | | | 340 | PROGRAM-1h | 3 | Ñòðàòåã³ÿ ïðîãðàìè ê³áåðáåçïåêè îíîâëþºòüñÿ ïåð³îäè÷íî òà â³äïîâ³äíî äî âèçíà÷åíèõ òðèãåð³â, òàêèõ ÿê á³çíåñ-çì³íè, çì³íè â îïåðàö³éíîìó ñåðåäîâèù³ òà çì³íè â ïðîô³ë³ çàãðîç (ïðàêòèêà THREAT-2e). | | | | | Ö³ëü 2. Ñòâîðåííÿ òà ï³äòðèìêà ïðîãðàìè ç ê³áåðáåçïåêè | 341 | PROGRAM-2a | 1 | Âèùå êåð³âíèöòâî ç â³äïîâ³äíèìè ïîâíîâàæåííÿìè íàäຠï³äòðèìêó ïðîãðàì³ ê³áåðáåçïåêè. | | | | | 342 | PROGRAM-2b | 2 | Ïðîãðàìà ê³áåðáåçïåêè ñòâîðåíà â³äïîâ³äíî äî ñòðàòå㳿 ïðîãðàìè ê³áåðáåçïåêè. | | | | | 343 | PROGRAM-2c | 2 | Äæåðåëà ô³íàíñóâàííÿ ïðîãðàìè ê³áåðáåçïåêè. | | | | | 344 | PROGRAM-2d | 2 | Äæåðåëà ô³íàíñóâàííÿ ðîçðîáêè, ï³äòðèìêè òà çàáåçïå÷åííÿ äîòðèìàííÿ ïîë³òèêè ê³áåðáåçïåêè. | | | | | 345 | PROGRAM-2e | 2 | Ïîñàäîâà îñîáà çàáåçïå÷óº âèêîíàííÿ ïðîãðàìè ê³áåðáåçïåêè. | | | | | 346 | PROGRAM-2f | 2 | Âèçíà÷åíî òà çàëó÷åíî çàö³êàâëåí³ ñòîðîíè äëÿ ä³ÿëüíîñò³ ç óïðàâë³ííÿ ïðîãðàìîþ ê³áåðáåçïåêè. | | | | | 347 | PROGRAM-2g | 3 | ijÿëüí³ñòü ïðîãðàìè ê³áåðáåçïåêè ïåð³îäè÷íî ïåðåãëÿäàºòüñÿ, ùîá ïåðåêîíàòèñÿ, ùî âîíà â³äïîâ³äຠñòðàòå㳿 ïðîãðàìè ê³áåðáåçïåêè. | | | | | 348 | PROGRAM-2h | 3 | ijÿëüí³ñòü ó ñôåð³ ê³áåðáåçïåêè ïåðåâ³ðÿºòüñÿ íåçàëåæíî, ùîá çàáåçïå÷èòè â³äïîâ³äí³ñòü ïîë³òèêàì ³ ïðîöåäóðàì ê³áåðáåçïåêè, ïåð³îäè÷íî òà â³äïîâ³äíî äî âèçíà÷åíèõ òðèãåð³â, òàêèõ ÿê çì³íè ïðîöåñ³â. | | | | | 349 | PROGRAM-2i | 3 | Ïðîãðàìà ê³áåðáåçïåêè ñïðÿìîâàíà íà äîòðèìàííÿ âèìîã çàêîíîäàâñòâà ó ñôåð³ çàõèñòó ³íôîðìàö³¿ òà ê³áåðáåçïåêè ³ çàáåçïå÷óº ¿¿ â³äïîâ³äí³ñòü. | | | | | 350 | PROGRAM-2j | 3 | Îðãàí³çàö³ÿ ñï³âïðàöþº ³ç çîâí³øí³ìè îðãàí³çàö³ÿìè, ùîá ñïðèÿòè ðîçðîáö³ òà âïðîâàäæåííþ ñòàíäàðò³â ê³áåðáåçïåêè, ³íñòðóêö³é, ïåðåäîâèõ ïðàêòèê, îòðèìàíèõ óðîê³â ³ íîâèõ òåõíîëîã³é. | | | | | Ö³ëü 3. Óïðàâë³íñüêà ä³ÿëüí³ñòü äëÿ îáëàñò³ PROGRAM | 351 | PROGRAM-3a | 2 | Çàäîêóìåíòîâàí³ ïðîöåäóðè âñòàíîâëþþòüñÿ, äîòðèìóþòüñÿ òà ï³äòðèìóþòüñÿ äëÿ ä³ÿëüíîñò³ â îáëàñò³ PROGRAM. | | | | | 352 | PROGRAM-3b | 2 | Íàäàþòüñÿ â³äïîâ³äí³ ðåñóðñè (ëþäè, ô³íàíñóâàííÿ òà ³íñòðóìåíòè) äëÿ ï³äòðèìêè çàõîä³â â îáëàñò³ PROGRAM. | | | | | 353 | PROGRAM-3c | 3 | Àêòóàëüí³ ïîë³òèêè àáî ³íø³ îðãàí³çàö³éí³ äèðåêòèâè âèçíà÷àþòü âèìîãè äî ä³ÿëüíîñò³ â îáëàñò³ PROGRAM. | | | | | 354 | PROGRAM-3d | 3 | Ïåðñîíàë çàáåçïå÷óº âèêîíàííÿ çàõîä³â â îáëàñò³ PROGRAM. | | | | | 355 | PROGRAM-3e | 3 | Ïåðñîíàë, ÿêèé âèêîíóº ä³ÿëüí³ñòü â îáëàñò³ PROGRAM, ìຠíàâè÷êè òà çíàííÿ, íåîáõ³äí³ äëÿ âèêîíàííÿ ïîêëàäåíèõ íà íèõ îáîâ'ÿçê³â. | | | | | 356 | PROGRAM-3f | 3 | Îö³íþºòüñÿ òà â³äñë³äêîâóºòüñÿ åôåêòèâí³ñòü ä³ÿëüíîñò³ â îáëàñò³ PROGRAM. | | | | |
Íà÷àëüíèê Óïðàâë³ííÿ ê³áåðáåçïåêè òà öèôðîâîãî ðîçâèòêó | Âàëåð³é ÑÒвÃÀÍΠ|
(Ïðàêòèêè ³ç çì³íàìè, âíåñåíèìè çã³äíî ç íàêàçîì ̳í³ñòåðñòâà åíåðãåòèêè Óêðà¿íè â³ä 26.08.2024 ð. N 317) |