KS X ISO IEC 24762-2011 Information technology－Security techniques－Guidelines for information and communications technology disaster recovery services《信息技术 安全技术 信息和通信技术故障恢复服务指南》.pdf

1、 KSKSKSKSKSKSKSK KSKSKS KSKSK KSKS KSK KS KS X ISO/IEC 24762 KS X ISO/IEC 24762:2011 2011 12 29 http:/www.kats.go.krKS X ISO/IEC 24762:2011 : e- ( ) ( ) ( ) : () () KISA KISA ETRI ETRI : (http:/www.standard.go.kr) ： ：2011 12 29 2011-0674 ： e- ： ( 02-509-7262) (http:/www.kats.go.kr). 10 5 , . KS X IS

2、O/IEC 24762:2011 i . iii . iv 1 1 1.1 .1 1.2 1 1.3 1 2 2 3 .2 3.1 (computing and related equipment) .2 3.2 ICT (ICT systems) .2 3.3 (information security)2 3.4 (infrastructure)2 3.5 (organizations).2 3.6 (outsourced service providers).2 3.7 (service providers).2 3.8 (service level agreement).3 3.9 (

3、service level commitment) 3 4 3 5 ICT .3 5.1 .3 5.2 3 5.3 4 5.4 5 5.5 5 5.6 6 5.7 7 5.8 .9 5.9 10 5.10 ICT 11 5.11 ICT DR .11 5.12 13 6 ICT 13 6.1 .13 6.2 13 6.3 .15 6.4 .18 6.5 23 6.6 24 6.7 24 6.8 26 KS X ISO/IEC 24762:2011 ii 6.9 28 6.10 .29 6.11 (EOC： Emergency operations center)31 6.12 .32 6.13

4、 .35 6.14 .36 6.15 .38 7 39 7.1 .39 7.2 39 7.3 41 7.4 .41 7.5 .43 7.6 ICT 45 7.7 .47 7.8 47 7.9 48 7.10 .49 7.11 .49 7.12 50 7.13 50 7.14 .51 7.15 52 7.16 54 8 56 8.1 .56 8.2 .56 8.3 .56 8.4 .56 8.5 .57 8.6 .57 9 .57 9.1 .57 9.2 ICT DR .57 9.3 .58 9.4 .59 9.5 59 A( ) KS X ISO/IEC 27002 61 63 KS X IS

5、O/IEC 24762:2011 .64 KS X ISO/IEC 24762:2011 iii . . , , . , , . KS X ISO/IEC 24762:2011 iv 2008 1 ISO/IEC 24762, Information technology Security techniquesGuidelines for information and communications technology disaster recovery services . 0.1 (ICT DR) (ISMS) . , , . ISMS , . KS X ISO/IEC 27001 KS

6、 X ISO/IEC 27002 (KS X ISO/IEC 27002 14.1 ), . , , , . , , , , ( ) . 3 . 0.2 ICT DR , . , ICT . , , . . ICT DR . ICT DR . ICT DR , , , , . a) ICT (5.) b) ICT (6.) KS X ISO/IEC 24762:2011 v 7. “ ” ICT DR . ICT DR ( , ). 8. “ ” . a) ICT DR b) ( ) ICT DR , , ICT DR . ICT DR . ICT DR . ICT DR . 9. “ ” I

7、CT DR ICT DR . , . 0.3 0.3.1 ICT DR 1 ICT DR . “ ” ICT DR , , , . . “ ” ICT DR , . , . ICT DR ICT DR ICT DR 1 ICT DR KS X ISO/IEC 24762:2011 vi 0.3.2 “ ” ICT DR ICT DR , , , ICT DR . “ ” 5. 9. . “ ” “ ” . 0.3.3 “ ” ICT DR , . ICT DR . “ ” 9.3 , 9.3 ICT DR , . 0.3.4 “ ” ICT DR , ICT DR . “ ” 5. 9. .

8、“ ” “ ” . 0.3.5 “ ” ICT DR , , , , 3 . ICT DR . “ ” . 5.9 , 7.4 . 6.10 6.12 , 6.13 . 0.4 0.4.1 “ ” , . , . , ( ) . KS X ISO/IEC 24762:2011 vii . 0.4.2 ICT DR . , . , , . 0.4.3 (SLA)/ (SLC) SLA/SLC . SLA/SLC . . , SLA/SLC . KS X ISO/IEC 24762:2011 Information technology Security techniques Guidelines

9、 for information and communications technology disaster recovery services 1 1.1 ICT DR . , ( / ). , , , , . , ICT DR . 1.2 . a) . b) . c) (SLA) . d) . , , , . e) , . KS X ISO/IEC 27001 KS X ISO/IEC 27002, , . 1.3 . a) ( ) ICT DR b) ICT DR ICT DR c) KS X ISO/IEC 24762:2011 2 2 . . ( ) . KS X ISO/IEC

10、27001, KS X ISO/IEC 27002, 3 . 3.1 (computing and related equipment) , , , 3.2 ICT (ICT systems) , , , , ICT / , , , , , , , , , / , . 3.3 (information security) , , 1 , , , . 2 KS X ISO/IEC 27002 . 3.4 (infrastructure) ICT DR , , . 3.5 (organizations) ICT DR 3.6 (outsourced service providers) ICT D

11、R 3.7 (service providers) ICT DR KS X ISO/IEC 24762:2011 3 3.8 (service level agreement) , . 3.9 (service level commitment) ( ) 4 DBA (Data Base Administrator) EMF (Electro Magnetic Field) ICT DR (Information and Communications Technology Disaster Recovery)MDF (Main Distribution Frame) PDA PDA(Perso

12、nal Digital Assistant) SLA (Service Level Agreement) SLC (Service Level Commitment) UPS (Uninterruptible Power Supply) USB (Universal Serial Bus) VFI (Voltage and Frequency Independent) WAR (Work Area Recovery) 5 ICT 5.1 ICT DR . , ICT DR . . a) ICT DR ( ) . ICT DR . b) ICT DR SLA . 5.2 , , . . . ,

13、. . KS X ISO/IEC 24762:2011 4 a) b) c) d) e) f) g) 5.3 5.3.1 ICT DR , . , , ( ) , . 5.3.2 ICT DR . , . 5.3.3 ICT DR . a) , , (KS X ISO/IEC 20000 1 KS X ISO/IEC 20000 2 ). b) . c) ICT DR / . , / . , , , , “ ”1) , ICT DR . a) . b) . c) . ICT DR , . a) . 1) “ ” , , ( ) . KS X ISO/IEC 24762:2011 5 b) . c) . , . 5.3.4 (SLA ) , / , , , . , , . 5.4 DR / . ICT DR SLA . 5.5 5.5.1 . . . . 5.5.2 , ICT . 5.5.3 “ ” . “ ” . a) b) , c) , , d) ICT . . 1) , , 2) 3) KS X ISO/IEC 24762:2011 6 4) 5) 5.5.4 3 3 , . a) , b) c) 5.5.5 3 . . a) b) . . 1) ICT DR , 2)