GOST R ISO IEC 27031-2012 Information technology Security techniques Guidelines for information and communication technology readiness for business continuity《信息技术 安全技术 业务连续用信息和通信技.pdf

1、 / 27031 2012 - ISO/IEC 27031:2011 Information technology Security techniques Guidelines for information and communication technology readiness for business continuity (IDT) / 27031 2012 II 1 - ( ) ( ) , 4 2 22 3 24 2012 . 426- 4 / 27031:2011 . . - (ISO/IEC 27031:2011 Information technology Security

2、 techniques Guidelines for information and communication technology readiness for business continuity) 1.5 ( 3.5). , 5 1.02012 ( 8). ( 1 ) , . () . , (gost.ru) , 2014 , III / 27031 2012 1 . 2 3 . 4 . 5 6 7 8 . 9 A () . B () . C () . D () . () . 1 1 2 3 3 8 13 18 23 24 26 27 29 30 31 / 27031 2012 IV

3、 () , : , . , , . , (), , , , , , , , / 223. / 223 ( 22301). , , , . , , . , , , . , . . (), / 27001, (), , . , , . , , () . (), , , . (PDCA Plan-Do-Check-Act) . , , . 1 , , , , , , , , , , , / 27031-2012 V / 27001 () , , , . , . 1 . / 24762:2008 , . 1 / 27031-2012 1 - Information technology. Secur

4、ity techniques. Guidelines for information and communication technology readiness for business continuity 20140101 1 - () (), ( , ) . (, , , ), () / , , ( ) . , , . ( ), . , . 2 . . ( ). / 18044:20041) . . (ISO/IEC TR 18044:2004, Information technology Security techniques Information security incide

5、nt management). / 27000 . . . (ISO/IEC 27000, Information technology Security techniques Information security management systems Overview and vocabulary)/ 27001 . . . (ISO/IEC 27001, Information technology Security techniques Information security management systems Requirements) 1)/ 18044:2004 / 270

6、35:2011. / 27031 2012 2 / 27002 . . (ISO/IEC 27002, Information technology Security techniques Code of practice for information security management) / 27005 . . (ISO/IEC 27005, Information technology Security techniques Information security risk management). 3 , / 18044, / 27000, / 27001, / 27002, /

7、 27005 . 3.1 (alternative site): , , . 3.2 ; (business continuity management BCM): , , , , , . 3.3 ; (business continuity plan BCP): , , , . , , . 3.4 ; (business impact analysis BIA): , . 3.5 (critical): , , , , , . 3.6 (disruption): (, ) (, / , / ) , . 3.7 (ICT disaster recovery): . 3.8 (ICT disaster recovery plan ICT DRP): . . 3.9 (failure mode): , . , , . 3.10 ; (ICT readiness for business continuity IRBC): , , . 3.11 ; (minimum business continuit