1

ubPlnri~1~aiu~u~~daanKpIr~nrnrai~au1 (Acceptable Use Policy) 1 a nisfn~1inaiu~unsnlaonbiu~zuuairau~ n.ju~uir'n6 ~ 3 u n i r ~ n i i u o d ~ w a n " i ~ u ~ ~ ~ ~ a ~ 1 1 ~ l a *

~fiunroul~nzlfiutlwuiii~iq~urzguna~wb" d o u n r . - ~ ' u u i ~ r ~ i u n i ~ f n ~ l i n a i u ~ u n ~ ~ a o ~ b i u X i u

~wnTu~aiiari~nuawauosnsu~uifn~ I X o ~ ~ . - ~ u u i ~ r ~ i u a i n a T n ~ ~ i ~ ~ ~ ~ i n n ~ ~ u u i ~ r ~ i u a i n a

ISO~EC 27001 $n&$oqni~anwnnrznu~inln9 ~nonournr{Zur.-uuoeiiqran~$a nrirruuq tiin .

n a 1 u ~ % w i ~ t ~ u u u a ~ 1 ~ ~ ~ u % " ~ o ~ @ # ~ 1 u r z u u a i ~ a u ~ ~ 1 ~ u o ~ n r u ~ u 1 f n ~ $ r ~ ~ : n o u ~ a ~ 1 naan fnu

~sioa:GuR~qdolnl%

nrnn a 41hums3~ad;ninu (Accountability, Identification and Authentication)

CD o flkiu"uGid~uniriloqn'u qua inwuYoyaCq%%o$Gqiu (usemame) i~azrtindiu w 46

(Password) T R U ~ ~ G ~ I U L ~ ~ : ~ U ~ D ~ ~ I E ~ ~ " ] I " ] I O @ G ~ I P ~ (Usemame) UO.IIUID.I XIUIU~U~~U$E~SW&I?IU n'lnlrnullwi llonilu il~&$uda.r~niipilu (Password)

6 b flkiusln.r?uii~aoudonisnrzn'iI~~ ihiinoin@&o.r@Ciu (usemame) lu'iirnr

nrziiZuaziiinoinflGqiuHiolu'$niu

C m fl#qiukqRrliniiuI~Liinnaiun~aoRbiu TnrrrPadiunlrznouXau~aCn~lr~u'od"oun~i

c! &t%E15 $~dbdr: nnun'?uhlrlu (Numerical character) fii?"~ 1 (Alphabet) IIR:&$~Y 16lffY (Special

character) w 4 4 uYn ci $#~iuk.rddaurlinw'w (Password) qn7 bo i u n i o q n n ; ~ ~ u n i r ~ ~ ~ ~ ~ ~ o u I ~ ~ n l ~ a u

rXadiu ~~a~Xiu%#rGaeiiu~~u~~w~l#ui~~a"a

6 8 rj#qiuiodi~n~rii BoPddZanuT mtwi oud 0:1+~~wi~unioszuuairau~w~1"uo~nsu~ui~n6

~ m : r n n o i r ~ ~ n u ' k i n u k u ~ ~ q ~ - ~ ~ r i i i a z ~ i i n o i n r ~ a i i u nisfnudonfi'n ~To~iineinnaiuijnwainIn7

8; ~ # ~ i u b . r u ~ ~ ' l I ? ~ ~ ~ i a s z u u ~ nnuriuti TRU d c 9 Y

(o) nouWPa~wriTunyn (Notebook) $~dw"ifl19~~0Pdd$2med%~~~gU Mac Address f ; ~ u

nis%&iu

(s) ~~~Ga~nai~~nnlszinn f i ~ ~ ~ m s i & ~ ~ ~ z ~ ~ n l ~ ~ % n ~ ~ ~ o ~ w " ~ n i ~ w " q o o a " n ' a w u ~ ~ n w ~ ~

(o) ni~%~~iuszuunau~aino~$ulu in~~i iuoz~o~w"in isw"qooa"$anu~nn~~

c i mr1kiuGu~na~ii;n (Internet) ~~r i i n i~w '~~oa"$anu~~azn*o~~n i~Cuw"n .u "a~ad~

aions~Ei~uon~anuqnna$#~iulA

-b-

( a ) i d o @ 4 ~ 1 ~ 1 i o d i l 8 ~ ~ n o ~ G ~ i R o i i d o . m o u ~ a ~ a o t ~ n t d o ~ i o ~ w " i n i r

Bonnu'iaor)nn?d im:0~~imriu'~ood"~aaufiouni~l4~1u~nn~~

(b) ~ n ~ o ~ n o u ~ ~ ~ ~ ~ ~ n ~ n ~ o ~ ~ o ~ w " i n i ~ ~ ~ ~ a a i w " n n u ' i o o (screen saver) IRU~~OII

OfUaGI b ~ I ~ ~ U ~ I ~ ~ ~ ~ I ~ ~ G I ~ I ~ ~ Y W B ~ O ~ (Assets Management) ~ I~ :~ :UU~IJBU~B

$8 d @#~iu~o~~i tb i Id lu~o~nouW"a~ao~i~ i .U ' iu (Server) n r u ~ u i i n 6 ~ $ ~ 1 ~ ~ n a ~ X i u -

~nu~n"nuin ~lu~ldYifuoyqia~in{~~~ar:uu d U 2 bo 2 @kiubiod~iiiqdnr~~ro"iludau~n~onoin~odnouW"a~flof~~isiiu (server) ~Bllda::

'liiuoy qinainf~~~ar:uu

$8 6 Q$qiu~~o.r~iimnio~o nioqdnrtiiulo i ~ o u l ~ i t ~ o i i u i 4 o n i r ~ r : n o u ~ r i i o i a u

qnna

bo a o Q&iubio.tliW n'roau~~fiubo~avod@u li i inrl lnq

bo @k1u~~o~ldn'naonn?oi1~1~u11~~ubo~a~3~~?n~n"1n'unirl4~1u fiouli?uoyqia 9 4 9 bo a b @#diu~nu1nno~~u~~"ilou~on?wu"?u~~azr:uun1rnu~wn~n~u'6u1 in6 u o u l ~ ~ ~

A d ~iumu"ounu~tduniwu"2uvo-rQ4~1u~o~ mriun?on"uniwi2ul~a:r:uunirnumn~:~nuirn'nlm::: 9 4 4 nraonrmrlnnRIm~~i~nu'~~vo~gui~~n~u ~a~nirnu~nn n ? o i h in nnruaminliu ounlnu

u'o n r l w " i n u u o n n o i u ~ @ $ ~ ~ u i o ~ ~ ~ ~ a ua:?uii~.aounRQuuodnru~uifn6 9 2 9 91 4 u'o QkiuGnuinao~.aml.aniI~uniuli.diniwi?u$uoz~i n%op~rnuaiuyadi

niwGu rnnn?iu6bumu$uliinoinnaiudr:uin~od@#~iu 99d u UYo a(: ~ k i ~ i ' o ~ ~ i l n ~ o u u u nouitaifloj n?olGa<n liiilunr8lnq iluudmr8uiuld'fu

mroy u ~ ~ ~ u a i u n ' o v B ~ n v ~ o i n @ ~ i u i o .

Gb a b ~1f~~2ut~a~r~uu~1rnunn~nruau1in6akt~~uu~~$l$~iuGia~dr:n~&~on1r d l

'Ikiuuoanrusuiinv~~iJu $iu~~~~$~iuu'in?~u"~u~~a:r:uu~i~nu~~ndi~q Yd~fiufianrrui

nruauis"nv?i?&~inun nisw"i%$~iionaiu~~uniu~onruaui?n~

6 n~iut"numlnq d~iino~nmsn:t~naiu.UYo a b lXdo1~unaiuiiPliauqnna1nu~~~iu 4 - 2 ~o~fuEn.aouionaiu~?ania~~no"uu

nuan m i i h a r n s u ~ n i s ~ n n i s ~ ~ + a ~ d 6 n s (Corporate Management) 1 1 9 $0 o d (~*14.nu$o~nxrnGniia:s:sJ'nr:a"~donis~~~iuBu"oUa lua~uo~aI?ua:ifiuuo.r

nxuauiin~n~oi8uBu"oyauoqnnas1iuu~n

&J 06 dol?a~~nmu~o~mulun?wu"3u"uo~nruauiini i;oi8uniwb5uuodnru~uiJn~

f i iu l f fiiirnrauuwi idduuadad iih ntoiimu TnuMl8iuoyqiaa1n(GdcuGq~i

&I bo y " l * 1 4 ~ 1 u ~ d ? u ~ ? u ~ u n i s ~ i 6 a ~ n ~ i ~ i a ~ ~ u ~ n ~ ~ u d ~ $ o ~ a u ~ d n r u ~ u i ? n ~ nio$oyauod 9-

~ m n i i i n n v g q m u l~uiild'l4'Ium.riii~ mriwami1nuWi~loyqin y"lbiub.ridaui?u

lunirr'~anrau~on~iui~uniuw"u~au

$8 b o @ ~ d i u $ o o d u Gila ?nlnl$$dn?iui% n?iu;nd;od ~m:n?iuwfoa%%od$oya

&I bb$1r ' .nu~an<~nuaouaxxui0 :~8~ l inln l+diuua:iloqnirGoyadauqnnaa~u

iirunun?r nruauiini a~l~nisnriunyuua:inirwdo2nfdaufJ,nna iia:lioyqinl#ynnanih

y m d m i i n i r n : i u ' m d o ~ o u a d ~ u q n n a 1 n u l i l ~ ~ u o Y q i n a ~ n ~ ~ ~ i u 6 n r o u n r o ~ ~ r C a ~ und'u

lunro"l~nxasuiin6 b.rmrar~onoulyan$o maii$oyaI?uku~$o~n"unsusui?nfJ"P.mruauiini

oioarid~ql~(iinod"i6nraonou riimrar?anoudor?amdiw"u18naoaiaai Inulib.rukl#$4diu

Muan G ~ l & ~ ~ ~ l ~ ~ ~ ~ l ~ ~ ~ ~ i ~ szuualsapd6n (IT Infrastructure Management) d 9 d A 6 b m @ ~ ~ i u u n ~ s n ~ : ~ a u i ~ d r ~ ~ n ~ u ~ ~ o ~ i f n i i a ~ ~ n q idbt~di i i iunlr6'd

(01 iaui~dxi inrun~o~if~~i~af lmq 6a:iiaiunalninu~naiu~aon~l"us:uusauw"~

rnrns:~i~u~nuol:68un1rii~u~~s~n~iu n i r ~ n a o u ~ i d i i u i ~ o y a ~ n n a ~ u n ~ ~ 6 i n ~ x f i n ~ i u d

tuosqnnaou

. ( b ) W k l u i ~ d x i i n r u n l j ~ ~ i i ~ ~ i ? f ~ ~ q <-liiln~flbi3~f~ia:a"i~~lnaiudi~qlunix .

nrounro~niwainxr:uuainna'~fl+~u

(cn) imui~dri~nrulndn:iidi~~plr~insun~oi~d~~a~dxiinsu?dh~driinrui'ul

a"nua:~4ui~uuan"u~uouni~?aJnnouw"aiwo~ dui'u

(d) ~TmuiTllr imrun?oaif nu?flnq de:iirnar:uu<i~an<nis~C (License)

%d14iii--Jf

( 1 ~ i i n u a & ~ a ~ ~ n n ~ n l n u a : i ~ n ~ ~ ? ~ $ n ~ ~ u ~ o f l 7 l % I ~ d f i l l ~ ? ~ b W ~ ~ l : ~ % J iia:/Go dol d

Cdo"Rsrrudr~nolouw~iu"~o~dr~i~a?~ia nrid~$nh.r~biw"ouu~ntsiiunouw"amof

$8 ~iuiYnn?olkiu (Run) 1drunxudr:mn peer-to-peer ~ ~ O W P L L ~ S U ~ ~ ~ ~ ? I U ~ ~ U ~ I U

9- w

4:m"nrL&J'Jn'od ih ld~LM~fi~~Md(~it torrent) , z ~ a (ernule) duiu 6 % 6 6 d ~ : ? ~ ~ ~ ~ ~ l ~ ~ l n ~ ~ d ~ ~ ~ ~ " 1 1 1

-G-

$8 b& n ' l ~ l ~ F ~ ~ ~ o l & l ~ (Run) ~ d ~ l l n ~ l l 0 0 ~ l ~ $ n d 5 : ~ ~ ~&I~~~IUGU~%.I i;~ f l l ~ ( ? w I h

daiwaq inud 68u;u I u s : n i i . r ~ ~ m d ~ G r i ~ n i z

Go bb n'ial+wiwuinr r:uu~ornrl?ndrrm rau~~gdnraiodulnvo~nru~ui?nd~~min7~u A d w In' domrwvilwi C y a Gonaiu ~dmw n%$qduIa nunmtu:ukdobszrunaiu~un~vo~ds:~wa

ngwuiv w7onr:wuionisiio"uo~nzu~ui?ni

66 bd #iul#w?wuinr r:uu$omrrldr:mn r~u~~gdn r~odu la~o~n ru~u i i nd i60n i r

runau rioln'~iianaiui"nvmu w7ola"llmmrlosnsrabyn w"r$dulaoirt9unirlu"adonQwuiu~~ar d

aamsu w7onns:wuioniriio"uo~nsu~uiind

Go b2 &ul~w?w~inr~nds:~nwdlduvo~nru~u~ind~~od~:~u"~~Pddw~~n~r~i a d &

bo b~ n'iunr:iinir~nq iWLonir~in#o~a Iiiiozi8uUYOnaiu r n w i ~ u d wron.rouInIu

1n7o~iur:uuairnuiwa"uo~nru~uiindlnu~$n"uin l i i io:~aa%nirbq i n i u un~a"ul4funisoy~in d 9 1 0 oinnsusui?n~%wni~Gunir

9 M %J u w HWdGl& ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ Y ~ ~ ~ B J ~ Q H B J ~ U ~ L ~ : ~ U O P I ~ ~ P I (Law and Compliance)

. bo mc; ussninpwuiulnq ~ l ~ d r : m a ~ u d r : m a l w u s a u ~ ~ n g r z ~ d u u uo;rnsurlnfnd 9 0.g o ' o $ u d ~ z i i ~ d ~ ~ ~ i u $ o ~ ~ s z n p a " n ~ ~ a : d ~ u ~ n ~ u o e i ~ ~ ~ n ~ ~ a ? a aaz1~ns:iinaiuiinZu ~ Z u r n n

@ k ~ u n r : i i E n ~ i u n ~ n u i u ~ ~ n ~ i ~ i;eiinaiuiinZudunaiuEndauqnna$~@4~1uo:~o~fuEn~ou 29 2

donaiuEnw~nnvuls9

w a r m b 4ihu~ovldlla;lla:2v2w~ (software Licensing and intellectual property)

$8 m s nrusui?nu' ~ ~ ~ n ~ i u d i ~ ~ o d ~ ~ ~ ~ w ~ S u w i ~ ~ ~ ~ i &~u.aod&6?fdnruaui?n$

oyoJ i~ ln?$~ iun?odnru~u i~nu ' ii~uSn: ~ 4 ~ i u m l n r o u o l ~ ~ i o d l ~ n i u n ~ i ~ n a i u ~ i d u lm:

n r u ~ u ~ ~ n l i X i u ~ i ~ r i ~ G ~ i u ~ " i n i s i i n A ~ ? a ~ G ~ i u . a e ~ k ~ a f ~ u ~ n ~ ~ i i ~ " u S w < mniimsnsaonouwu

naiuiinaiua:liina'"u& nrusuiFnr;i;oiidunaiuEnBauqnna $kiuo:&~?ui in.aou~~i~~u~~i~ua

-&-

do mb wd&ni (Software) $ n r u a u i i n ~ ~ ~ ~ m t m ~ u u ~ ~ f i @ ~ d i u o'o~bud.rdi~budorn5n'i~iu

fiiuii'lfi@#diun'in15Sni~ oomnou id$uuudn.r ~~4"lu nion'idiluilw"ou'i!dl#~iu$~u

man d iin"a~lnis~~~n"odbd~1tns~10ids:a~d~ (Preventing MalWare)

do n o u G a m o i u o . ~ ~ $ ~ i u S m ~ ~ F d ~ t t n ~ u ~ od~uiUIZaf anou?iaimo$ m ) m i u $ maauif n d ! ' l lxnidxl# 1~uudnou?ia~oi~udu~n+odiw"on15~n'~11 i a u l r:uuilo.rriuInuiod!Xfuoy~inain

gi'd <u i'q TI -

6 m d ussmdoyn ldd .aodLtai niodddulm $l&?ua~n@kiuodu#o~lXfuni~~~a~aou

!afanou~amoitm:~d5~1n5ulipl~:a~~4riouu'iuil$~iu~?ot~ui'uw"n~nnk~ 9 - do me @~d~u~osn'inisdfud~ddoyadi~?um~aaaou~ta~dfud;id~:ufld~uan~ (Update

d patch) (I#~~IOIUO

6 f l # ~ i u i o ~ i ~ ~ : Q h 5 ' a ~ i a : F d 5 ~ t n ~ u I i d 5 : a ~ ~ 4 n o m t n i sau&tdowud.rijndnS

~Gd1u~odti~dtnqitrigBtta5:uu d 9 I 6 d o tdo@~~iuwuiimko~wou?iatnoiSm!a~n ~ ~ ~ i u ~ ~ ~ R o u ~ o ~ n ~ o ~ n o u ~ a t m o 5 ~ ~ 1 ~

tfl?€l'U'lu Lin: X6dit$dllfj$qLLt15:flfl

6 db hun'nnoun'iditui dduuudnd nu& &doyn bnma tonnis n?oihlnq$lbu

niwGuuodnruauiindnliouo.r$u I n u U l ~ f u o y q i m a ~ n ~ d ~ u ~ a

do d m ~iun'inirtwuttwila~anou?iatnoi linuar' n'ioldrunruoirmnulmq $oiariolfiiiinnaiu

a~uerniuui~~s'wi3u"uo~nsuauifnd

nolan s; a ' i ~ a ~ l n i s I G ~ i u s : ~ 1 ~ 1 a n n ~ i a ~ ~ a " n ~ ~ ~ ~ n 8 (Electronic mail) 4 - M 9 9 do dd dodgunnrovomumoJnuawdl~du!dmiuu~uuiunaiu~un~daow5u~:pI~ni~aut~a

a ' l ~ ~ " a u l 5 % ~ d 1 ~ 5 : ~ ~ ~ ~ ~ ~ l ~ ~ l a " ~ M 5 ~ ~ ~ ~ ~ ( ~ - m a i l Policy)

odbanri~naiuGodn~da~~n~aua~tn~adiala5aia (Fvireless Policy)

6 0 &ttnr:uu (System Administrator) $ D d n a u r l u ~ ~ i n d ( l ( l m ~ ~ 9 Q d ~ 5 d ~ 5 Z ~ l ~ ~ ~ y l ~

(Access Point) ~ ~ ~ a h n o ~ n u o n & ~ l [ ~ s i u 5 ~ u u t n i o ~ 1 e r ~ 5 " a 1 ~ 1 ~ ~ u ~ ~ 1 . 1

{D in &ymr~uu (System Administrator) na5~iln15~d$iu~rii SSID (Service Set Identifier) dQn

d ~ e u n t ~ u n ' i l u ~ (Default) moin&b~ir~7-h1 9 d n 5 d n ~ ~ ~ l t l ~ ~ l m (Access Point) UII&IU $8 m $! LI~S",U (System Administrator) $~~RII~uI.I~~I WEP (Wired Equivalent Privacy) H ~ O

WPA (Wi-Fi Protected Access) ~ u ~ I s ~ & s ~ ~ ~ ~ ~ ~ T : M ~ I ~ Wireless LAN Client Lln: 9dflldfl5101~

~~~1~ (Access Point) I ~ : ~ ~ ~ ~ ~ N U R F ~ ~ ~ M Y ~ ~ L ~ ~ ~ ~ ~ ~ : ~ ~ I ~ ' ~ ~ ' U ' ~ P ] ~ ~ " ~ I ~

-5-

6 d ~ $ u ~ s : ~ I I (System Administrator) ~ ~ S L B O ~ ~ Y % ~ I S R ~ U Q U MAC Address ( ~ e d i a ~ c c e s s P P 9 '

Control Address) L L R : & I ~ Y ~ ~ (Usemame) S ~ % ~ I U (Password) ~ o d ~ ~ u ~ n i s ~ u a , ~ ~ ~ u n i r ~ ~ i ~ ~ d i u r : f l f l

mnToiiulFrnu ~ n u a : o ~ t y i a l a l n z ~ d n s d i i MAC address (Media Access Control Address) LIEIL;O@G p l l &

(Usemame) ~lars$tfhiu (Password) ~iu~ri~nunhmmuul~~$~l#s:uu~nioi~u~ftf~u!~oei~~~n~o~

$0 & iq66tlSt.Il~ (System Administrator) n35~fllS~RF?d!YJj?01dOa" (Firewall) SLW;I~I:UU

~nTosu'ierWtfiun"us~uu~ainsu'iuniulu~~au~iu

$8 b & l l l a 5 ~ ~ ~ (System Admistrator) R ~ ~ T ~ I ~ u R ~ ~ @ ~ ~ ~ ~ ~ ~ ~ s : ' E ~ ' u L ~ " ~ o ~ ~ ' I u ! ~ ~ ~ I ~

iinrio4omsl~~awi:u VPN (Virtual Private Network) l $ 0 ~ ~ ~ f l ~ d ( i ~ n i ~ ~ n ~ n 1 ~ ~ : f l f l l ~ i 0 ~ l ~ ! f ~ l ~

6 d & l m r ~ u u (System Administrator) narlG~oYJj?01dk~al1nTo1iin~~ainra0a,oum1u~ua~

~laon~uuo~rruu~niosu'~uIfa,iu~$oaouaraoa,ou~~a:sJ'u~"n~~~n~r~$dia,~.a"u~~~~ulur:uu~n~~su'~u

Ifmu aa:lunr~~ar?onouwunirl4~iur:uu~niosu'1u!ftfiu~fie\dn~lX~~~~ar:uu (system

Administrator) ~ 1 u 9 1 ~ ~ 0 ~ s J ' d ~ f l s J " f p f 1 NSI~I$U?~

6 2 {$Y~~s:uu (System Administrator) $ ~ ~ R ~ U ~ U ~ ~ ~ ~ ~ U ' ~ ~ ~ " ~ ~ R ~ W ~ ~ H ~ ~ ~ ~ I ~ ~ I ~ U O ~ ? ~

!U'!i%'uoytyin ~~~ iu r~uu~~osu ' iu~~ t f iu~un is~ .U" i~s :uu~u~s~~dn (Intranet) aa:r:uueiu$oya

u1uuianaluiun.r~nan~avaa1diaaaa' wirewau Policy) d a p, d 6 . nrusu15'nv unuinluniru~mmroknir nir8n& imrriinundluo.rIdiaoaa"idwun I A 9.4 6 b mrriinunmlrunuwugiuvo~wgn~ni~siiuo:~n~~fiunird~~a,sw"~nun

d d A $8 r ? n ~ ~ u m ~ A o u ~ o ~ u ~ ~ o i ~ d n ~ ~ a : u ~ n ~ r ~ u ~ ~ o r ~ u n ~ I ~ o ~ t y ~ n n ~ u u ~ u u ~ u o-iYodgn

u i o n (Block) InuIdiaoai

4'a d $ l & ~ u Z u m o h d n ~ : $ o ~ i n ~ ~ Login account ~ ; ~ u n i r l ~ ~ i u w g n a ~ ~

$0 & dinis ld~uwl ldad~dnu~~u~dfaoaa" ~ I W I S I ~ L ~ O ~ n i ~ ~ i ~ u n d i % ~ u ~ n l r Llarn15

Bouiodoqyin o - l ~ d n i r l i u ~ i n n ~ s ~ d ~ u u ~ ~ f l a ~ ~ n ~ ~ ~

6 b mrl.u"lb.rApJnr6;ddldiaoaa" ozn'odmlnsot$lbd~~liaw1~{i~~r"uuoPI~~1~~~~~l~

~ n n l s l s i l ~ u d d pl

$8 a u ' o u a o n a n n ~ n o u W " a ~ ~ o r ~ ~ ~ ~ i o o n Q d n r d ~ d f a o a a " azb.rti.rd1Iflo'n~Au~~dns6;dd

~ m f i u 6 a ~ n o r i o r m ~ n e % ~ ~ a ~ a o f ~auo-$~a<~lffu$o~aonor!irf8un<i 60 Tu I ? % J % J ~ I ~ < I ~ I S ? ~ I ~ T ) (

(Backup) ~n6if~uonlmmu~0~1apa"ou o P R

4 c i o wofanirr~ou~ouani~uomni~un o:$o~1Xfumi~naiu~uuouoinnrusuifnli~iou

$0 6 n i r 6 i ~ u m d i n i r % ~ u ~ n i ~ u o ~ i n ~ o ~ n o u ~ a i n o f i i ~ ~ 1 ~ 1 u i i d a : ~ a u u o ~ i n ~ o ~ 1 u o:#os

n ' i ~ u m d i o ~ ~ i n i a w ~ ~ w o f n n ~ r i ~ o u ~ o ~ < ~ i $ u ~ o n i r ~ ~ u ~ n ~ r i ~ i ~ w " u ~nu$ouhuiuazdio-r~nr:q~Xn"u

i n ~ o ~ ~ o u ~ a l n o f i i i S i 1 u i ~ u r i u i n $ ~ ~ i 1 ~ u ~ n 1 r o ~ ~

$0 Q O a ~ 6 ~ ~ m r d i r o ~ $ ~ ~ a n 1 r 6 1 ~ u m d 1 d i ~ ~ u~~~dnro;lrlhoaL$udrz<i~n~dmi~nio t ci*

r lnnr~mun~rd$uuiida~d~ A 6 oo mro~nouGaino;iii~iu~lXu?nirr:uu.numrnuin~di~~ ~:RYo~Woy~inlXinir

a~oudar~oI4~1uZuamofioa"a i?"wiidZnaiu<ir3u Fnuo:$oan"inwmi$unr~1d 4 4 4 4

bo o b nrusui?nli unms~a:s:~un?oubonnir14~iuuo~i8o~noudai~o~~n~iu~i

nq8nrrunirl+~iu~~nu1u'uiu nioiiina1nn1rii~iuuo~1driinsu~ina1ui~u~~ona1udaon~u ounii

o:1X%niraii?lu

u~uuiu~~iuAnq~aon~u"uo9~ioJa' w a i l Policy)

bo o lumra~n:r~uuG~'a@4u~nisom~uiu5ibn~s~Gn$ (e-mail) $oqdinirnronhyadi

uoi~il~u~mssnnuiu~ibnmsoGn-a" (e-mail) ue~n~au~iu~nuduiiuo~utdinoa"~~ nsusuiinl;

6 b adolAfus~ndiu (Password) nhianlun~ri41r:uuon~uiu5~$nrnsoGnd .(email) ua:

idoijniri~ds:uuluwkqiisntu naridbuur~ni iu (Password) Tmuniri

m ?Bjflarf~'u~n~~o~n"us~~ndiu (Password) %~us:uunou6aimo~ % A*

io fln.lSid6~~3hdlU (Password) yn bo <u ~ ~ o y n f l S J ~ ~ ~ l s i l d j b ~ ~ ~ 1 ~ ~ d 6 ~ ~ 5 ~ ~ d l l d

pld A 6 & l i n 2 r l $ ~ o d a n n u i t l ~ ~ i n \ ~ r o G n a r " (e-mail address) U ~ J ~ ~ I U ~ I I B ~ I U ~ T D ? ~ I M ? Q ~ ~ ~ &nmu m~~ud~:lhYiilmr~u~~uo1n~d1w~~~$f1?msi~a~lX~ei1~~iwo~snnu1a5~~nmroiin~

(e-mail) ~~u~fil&nroudonis%~~~u~uon~uiu~~~n~~r~iinar"(e-n~ail) W D ~ U

6 b naj~inn~s' l~~iur:uf lon~uiu~i innroi inn' (e-mail) in?n~unaraJuir~"noon (Logout) L

ynfl5-3

u~uIIlerflaiol~un9dab(;1X8"~b9~u6rnb~1Pdd (Internet Security Policy)

$8 o !i%$s:~u5uin~&dfl (Internet) v~dniauaiu i~~mds:1~~0dd%ui?dwi~~~i~unisdau P, l d ddd r4)

yma nia~din~siui~iaul.ai~!iinui:au i9.u i%~!.ai;4do"~aalru i?du!.aflnuiuorn6'uoi~

ns:wuns:iw"ounT~i5u61"ui~naiu~un~~~~i~ eriaui ws:uninda3ini~i5~1!.ai$i$ufil"ud~~~nu~?o

a:iiinitn&o.r$u n Y o C B y a B o ~ ~ ~ o ~ f i i ~ n n a ~ u i ~ u ~ ~ ~ ~ ~ ~ ~ n i a u ~ ~ u

$8 b filuiil~i~u~~yadi~q~i~una1ua'fli~ua~fld1u"~~dniaud1u~~d~!~dl:nl~Q(ild~

~ l d ~ ~ ~ l ~ ~ ~ f l f l ~ ~ ~ ~ ~ ~ i d f l (Internet)

$8 m s:45'ns:a"snisniaPddFnan Fdriinsu%$~iu~ins:u'~Gu~no;i~a (Internet) nisniaPddI~.~a~

mroiuinn (Update) hkiunsudidq ~;Q~~$U!~TRUMP:~GW~""~%M<

Q d %urnr~~diuns:niununui~ia"nns~~nar" !iiilniwu#~~aid~~iia:dunalua"fl"u~d

~daudiu - 1 I

$0 & % ~ ~ l ~ % $ d 1 ~ ~ ~ Z ~ 1 ~ ~ ~ ~ ~ 1 ~ i a " ~ ~ ~ Q ~ ~ a r " !iiau~naiu3nidu ~ C f Q % $ ~ Q ~ ~ l ~ ~ h ~ ~ f i

hu B a : , ~ i ~ ~ ~ n n a i u i d ~ u i ~ u ~ ~ 3 o i ~ u ~ " u o ~ n ~ a u ~ i u n i s ~ i a i u n a i u ~ u f i u ~ ~ ~ l ~ n a i n s " ~ o ~ n ~ a u ~ i u

Buy d B P, $8 5 na'98in%$dius:fl11~u6n~fi~a (Internet) ia$~bii% % M ? R ~ $ ' L I L ~ ~ ~ I ~ c ~ ~ D S ~ W Q ~ O ~ ; U ~ I ~ ~ $ I

'~k~iulnuynnnn'u~

d~~l~~~lol~pdfl4d~b~1~~"~b9~19fl~II~ol~191.v"l~49ZIIII (Access control Policy)

i ~ U ~ ~ ~ f l 1 ~ ~ ~ ~ ~ ~ u q ~ n 1 s ~ . u " 1 $ d s : u f l (Access Control Policy) ds:nQ¶J~~fJ b HU?R Tnui 9'

rlua:i;Un;diQldi

$0 nruauifnG riinunui~snunauquni~i.U"i%4~iu s:uumrnum~un.mriau~iub~~~bba

?nuinaiudasn& ~ n u d ~ n n a m n n d a u ~ i u n ~ ~ u s n d ~ o ~ n i s ~ ' ~ ~ < ~ u n i r ~ . u " ~ ~ ~ ~ ~ u s : u f l ~ ~ s a r ~ b ~ ~ ~ ~ " ~ ~ d

vdau~iu~:$o~~os~ y ~ ~ f i u a ~ u a " n ~ ~ ~ n u s i n { u ? n i s n s u ~ u ~ ? n ~ P,d 9

48 b $~66i33rU~ (System Adininistiator) $ a d ~ l n U R ~ l l < n l r b U 1 0 . 1 u ~ y ~ ~ ~ ~ l : ~ ~ . U " 8 3 ~ ~ % ~

mln:au~uni~i&%~d1u"~sd~kd1u~:uuua~n~i~naiu?u~n~su"~adb~~n~i~1un1~d~u~~1uf;8ub.u"1

-6-

6 m $+jlKl~:uu (System Administrator) ~ ? s ~ F ~ ~ $ ~ ~ l l ~ R & S : ~ ~ 1 J " ~ w " ~ l l ~ : ~ R f l l 0 ~ ~ l ~ ~ ~ d l ~

s:uumrarum~uowi~u~iu ~ia:~s~a~nrnsa:Bnnaiudaon$iu ~Gdos:uuCyn

6fl d f$?iltl9:~'~1 (System Administrator) ~ ~ d ~ R $ ~ ~ ~ l 5 1 J " ~ w " ~ ~ l ~ ~ : i ~ ~ ~ ~ l 5 L 6 l ~ ~ 5 : ~ f l ~ l ~ . Y 92 9- ii"ludduulidn.r~wi~ii~~ ~~a:oishulh-oonnoiui~~"uo~s:uu uot&ynlRruoyqliatia:lojli~u

oy onak~odungnqiu~un~snsaaarou

6 b <'$~~QSIUU (System Administrator) #odn'inuRms~~diuszuu6nn1~1a~dlsarulnR#

di;~ idu ~zuunauw'?m8r'~dsi6nsuds:~n~(~~~lication) onnuiuSidnns~iinB (e-rnail) s:uuifiioJiu

! h e (wireless LAN) szuuSu~n~r'iUd~ (Internet) LSU#U I ~ ~ ~ ~ ~ ~ ~ ; ~ [ ~ & Q w I : ~ I s ~ ~ P I ~ ~ I u ~ u H C I G i ~ a z b ~ l n ' i u n ~ i u ~ i i u ~ o u a ~ n $ f l ~ ~ u ~ ~ ~ ~ i S u a ~ u ~ n ~ l d ~ n ~ l s r?uZdiaqnun?uZn<gandiao~i19

a4J"iwuo

th d ('$Y~IS:UY (System Administrator) b d ~ ? ~ i S ~ ~ l ~ ~ ~ < ~ S ~ ~ d 1 ~ ~ : ~ ~ 6 6 ~ Z ~ ~ d ~ l ~ ~ ~ d

4"l"'~i0111d (G) 61nuRniskdI/uulkdadkka:nisuf~ia"ns~aaei1u (Password) k~ofl~dlus:u~a10~n

n~ow"paainiitrnis nioun~a"nnis14diu

( ri.ruousGardiu (Password) hnn~~$~uflGu?nis~au?"snirGdaonn'un?s

n ~ i n ~ ~ u ~ n i r l G ~ n n n d u n i o n i s a i ~ a w n o J i u ~ ~ a " n w s o ~ n (e-mail) #lri~rnrilo.rriulunisi=id

s f i ~ e i l o d (Password)

(m) n?s n"inun~~@~u~nismou8u~unisl$s"sls~areiiu (Password)

( natimu~~I~Q~~iubis~"uw"nwi ~~plsG'arei7pd ~ord)l~us"urLplw~81w"as~o~1u~ d ~ ~ u u i

lil6~osn"Pdnisi.u"iZd

( B ) ~inuR$0~4wi0sG'ar$Gdiu~D~lidin"u A d -

(b) ~ u n s ~ ~ n ? i u u ' i l ~ u ~ ~ d ~ $ ~ ~ ~ ~ ~ ~ f f u n " p l r ~ ~ d i u ~ o ~ a r ~ ~ ~ d ~ $!kiu~ha-&.r VW P, ~n"?un? iu~duaauua :~~u~o in~p l~nus~"~ i T~uiinirn'inu~r:s:~aainislG~iu~~a:s:9'u~is

1G~iuw'u~a~o~"~s:u:~aa i~qni iawio~ui l in~ iLLHiq ~~n:Dnisfi"iHun%w~fu"m~~l$?uiia.u"iZs

lAZss:6'uI~lXsJ"ia ~ ~ a z ~ ~ ~ 6 i ~ u ~ I ~ ~ ~ a r @ ~ ~ i u ~ i ~ 0 1 n s ~ n @ ~ ~ i u a i u d n ~ v a 9 & 1 {tylas:uu (System Administrator) ~~;0.1u^rnis4nisnis~$11a~$1~~aw1%1dsz~n~ku

-00-

9 4 9 naiuti'u lum~naurlumrnin~uoyaudn:d~:mn~miu~uw"~nixi.u"i5~1nunx~iia:n~x~6u"~~~~~u d 44

x:uu.nu xaun~?amxn'imu.u"oyaiida:dx:Lnniunaiua'u &ioldd 9 d 9

(0) #~~~?u~unix~w1n~u~~a~ida:dx:~nn~una1ua'u~~niri6u"i~~~nu~xd6ia:nix

i6u"l~d~lux:uu~lu

) &d~iwu~nu;o@# (username) im:sn'prdiu (Password) i~o1~unirnx?0nau

~ai?aua's.ruo.r@#$o;aluLida:Cunaiua'uuodsu'oya

(m) narn"iwunx:u:iaainixl#~1u~iazx:9"Un1xl~~1uw'uGi~~w'ux:u:~aa1~~nd1a

( a ) ~ l ~ s " l l d d 6 u " ~ ~ ~ d l ~ ~ d 1 ~ ~ : ~ ~ i ~ ? ~ ~ 1 ~ ~ 1 b 1 ~ a d : ~ ~ ~ ~ ~ ? ~ ~ i ~ i . u " 1 ~ ~ d (Encryption)

ii8ulnnrsiumnn du SSL W N 14% XML Encryption du#u

c ; nartiinu~mrldiuux~'nd1~ (Password) niur:u:larnlriinunuod~:~u

naiudit7~uod'o ya a d o

(b) n a x ~ i n u ~ u i n x n i r ~ ~ i n a i u d u n d d a o a $ u u o d . u " o y a 1 u n r ~ o 1 u i i n ~ o d

nouw'aiwaioonuofliuiuodniaudiu i iu ddin~odno~1w'?lnoi~dnra~~ou ~33d158~a:a~

Go;nili;uotjludouirw"nfiou ~bu#u

(Intrusion Detection System / Intrusion Prevention System Policy: IDSIIPS Policy)

$0 L IDSAPS Policy ~ ~ ~ Q P I ~ ~ Q P J ~ ~ I ~ B B ~ (Host) %u~n?oii~uodn~~1~u1fni11a:1n?6i1u.u"6ya

&nun r a u ~ . n # u w i ~ i ~ o ; a o i ~ ~ ~ u w i ~ ~ d ~ i o ~ ~ u 6 n ? o s o u ' l u i u ~ ~ o f ~ i w ~ n l # u w i ~

m s ~ u u ~ ~ n u ~ ~ n i u i s n ~ . u " ~ d ~ ~ ~ ~ ~ n i u ~ w o ~ ~ ~ a n i o ~ n ~ ~ ~ s ~ : ~ ~ ~ ~ ~ ~ ~ u n ~ s w s ~ ~ n o u ~ ~ n

93JPI IDSAPS

&I SZUU'I~~MURIU DMZ (Demilitarized Zone) ~ ~ ~ D P ~ ~ ? U ~ ~ S R I ~ B ~ B U ~ ~ ~ ~ P I P ] ~ ~ S ~ ~ P I ~ ~ I S

fiounis3w~dalaZdRI~u~nis

$8 c; laa&tartn"riie~fdnun$2nisri~w'iuu~o~aiiu IDSAPS o:&o-r~msliu$nnams

$8 b ? J ~ I S ~ S ~ O ~ B U ~ ~ ~ Z Update PatchISignature "UBJ IDSAPS l$ud~:<l

-00-

$0 d ~iinir~sanaau~n~ni5Oj $o;a~ri~r wqlnr5umrlkiu iionssu i~azuirn'nfiu1t.u

Goya~Bl~~iu~n?ohe~~~udszii~niul~e~$~~~arzuu B 6 * msms azdinumuln'npmuQuwuIiu"uo~ld~aoaa" ~ l ~ u r n r ~ ~ i ~ c m ~ o i i u v o ~

szu uaisau~wafliudnl

C 6 ~ n < o ~ ~ d h ~ B i i " i G ~ k ~ Host-based I D S ~ ~ A b ~ i i n i ~ f i f ~ ~ a ~ ~ b ~ ~ a L g ~ d ~ ~ ( ~

$8 00 wqfnrrumrl+qiu iinnrru nio~nqnirdZqnun ~iinmu~$stdonirynln mxlouii

r:uu wqlnrruBljiaq~u nTonirwuiuiu~&rzuu &~drzaunmudi~roLLa:10jdrzaunaiudi~a

azsYo~iirnrnu~iulX~fl~Cufl~vinriuw'u~~flraawu

Go 0. nqf nrru tinnsru~iiwpiu n~orzuunirdinud~ndnl ign#uwu azb~iirnrnuau

I X ~ ~ ~ C u G ~ v i n s i u mulu 0 h~uqinraawu

$8 olnr n i t ~ r a n a o u n i r ~ n ~ n ~ ~ n u n n : i a ~ ~ ~ u f l ~ d n ' n $ o ~ a l ~ i f i o ~ n i o i u ua:irnrdi

diroq (Backup) ~n~~uuona~iu~odi~f iou 0 YR

dd 9 d C om ~~duuumrnouauo.rdo~nqmmn~nnuu lkil~h nu.nuwnmrnraawu"uo~~n~nird d l p, d

si1.r~ ii~iiunirniu~umou~~oannaiu13uniu aurodk~ar~tnunnra~wu ilo~nirmqnird~oia~iin~n

d a u i a n a i ~ r ~ 0 d n ~ d a o ~ 1 ~ e r ~ o ~ ~ ~ ~ o s i i a ~ ~ a z ~ n ~ ~ ~ n a u W " a ~ n a f ,LA JIU

(Network and Server Policy)

-0L-

6 s niruonyodinlkiu&i Web Server imr~olRluurioa (sub Domain Name) inli3uciu

i u i ~ r o u n d Q Z ~ ~ ~ ~ I ~ G ~ ~ ~ ~ Q Q ~ ~ I W ~ O ~ ~ J " ~ ; P I ~ J " ~ ~ I ila:/nio fqliarzuu ua:o:zodlrin'~$d

Idri inrrrl~q dd~wanr:nudonims:ii~o~~:uu~~a:~4u?ni~~uq

6 d hrr@nn~:iininndoudiu n'n~~t8ui i iu ion' ini3ln 7 sio9dn~&d7unmd Iklri r-4 4

qdnr6CniJum.r (Router) qdn~ainr:~iufio~16wsu"oya (Switch) pdnr6wniroudoriu3:uu1n?oaiiuna'n

%R~!~!Xff loy~l~Qlnf~~la3:f l f l (System Administrator)

Cb &' fq66a3:uu (System Administrator) ~ o d n a Y u n 1 3 i ~ d 3 : ~ ~ 6 n ? 8 ~ l ~ 6 ~ 0 ~ ? ~ 1 3 0 k f 1 1 3

~:uu~nToaiiuZXo~i~id~:~n5niw thi01di

(o) Jo~ii%ni~iiEn~n~ni~l4~iuidonau~u@4u?n1~l~ar1u1~0l4~1u~~~1z~:uu

i ~ o i i a B l k i ~ u o ~ %liaiw'i$u

( ) ~o~i%n1~i1~n~du~11~n1~~su"15~~zuu~n?oai1uBin1~l4~1u~auEu 9444 a

(~1 ) ~ o ~ ~ 1 ~ u n % ~ u a ~ 6 ~ o i 1 n ' n n 1 3 ~ ~ i ~ u ~ 1 1 d u u 6 n ~ o a i l u o l n i n f odn~uw"a~ao~in]dd

info.mouw'aiaoh~iaiiu doiril~$4u?nirariui~nl4iduni~~u7 iki ( ) r:uu~~oaiiu$~nanuo~niau~iu~~ni~i$ousio1dd~~:uu1n?oaiiu~u~ rnuuon

niauciunasi$~usiodiu~dn5&3odn'uni3~nn rau$~~o.r in .nuar ia i~nluni~~~aoCu

Id3lln3%1d3:fld6;1~ (Malware) kiau

(6) 3 z u u i n ? 8 ~ l u ~ ~ 0 d ~ ~ & 3 : u u a 1 ? ~ ~ u m r ~ n ~ n (~ntrusion Prevention

SystemlIntrusion Detection System) ~oara~~oun1r~b iuuod~nna i6su" l~~d lu3 :~ l '~16n~o~ lu

uo~nliau~iu%ua"n~l~:~~ndnn'

(b) ni~isu"i \ i~~uuin?o~iunie~lu~~au~~u Inudiurn~r:uuo'umo$16a~idu~o~~

rnra.ruirn"nth (Login) 1iazzodini3w'~~6$u$u~aau (Authentication) iWd~a~aoaro~n?iu~n~od

uo~fi4u?nis .

(d) i a u d o h ~ o ~ (IP Address) mu~uuo~~:uumn?o.u'iun~u~uuo~~~au.riu~ib~u~odfi

n i 3 ~ o d n ' p a ~ % ~ ~ ~ a u d i u n i u u o n ~ b ~ o u d ~ a r i u i ~ n u o d ~ ~ u ~ ~

( ) &.rhdi~lwu$d3zu11~n7oiiu (Network Diagram) ~ ~ ~ ~ I [ I s ~ L I z u R ~ u ? ~ ' L I u B P I ~ " u ~ ~

uo.r~zuu~n7oiiumu9u~bazbnioiiuniuuon aazpdnr&ic7 w~eu~ .rd iud l . r9~~f iu99op~uo~

larue

(6) ni31&n$odiiodi.rq ~ O ~ I T R I ~ Q R B Y I ~ U U I ~ ~ O ~ ~ U R ~ x I $ ? u Y I ~ ~ Y ~ ~ ~ I ~ ~ ~ ~ L ~

3:UU (System Administrator) 6 6 ~ ~ ~ 1 ~ ~ 1 3 % ~ d 1 ~ 6 ~ ~ 1 ~ 6 w ' 1 d ~ 1 ~ ~

&I b & i l t 3 ~ : ~ ~ (System Administrator) $ o d ~ ? M ~ r n ~ ~ ~ ~ l ~ ~ ~ d ~ ~ ~ w " ~ l ~ ~ f l l ~ ~ l ~ (Server)

~m:?uiim.aouluni~~~~a~:uunouw"aimof~~iiiu (Server) lunirn'inumllfiu niod~uuunln.rriiiidq

"~89~~0d6l l ' l f~ :~ (Systems Software)

Go c3 nru~ui?nsi ~inumu1nrn1rna~un1rCn~5u.u"o~aor1orw1~nouw"a~mof ( ~ o g ) litolnY

boyaoriorrn.mouw"alAo; LO^) 8naiugn~*o.run:muirnr:qZ~Ga~nna1~niu1~uawi~G~do1nl~

( 1 nara'RiituGoynosiarwi~nouw"ai~of ( ~ o g ) 11~uigoii;ub~adaiuirn?n~1inaiu c; ¶ J & B nruhu gn$o.r inYo?ai.r na : r :4~qnnnnn~n~ao~~nd~a1~~~a: .u"oya# l~un~rCm~~u $0.1

¶ J & ¶J r i~~umRnnun'ulun~ri"~~n~"uo~ai ia:~~i~ar:uul i l~?uo~ q~n~un~r i i f l~ .u"oYadi5ufn~~

~~un~&~mraaaour:uuaisau~w~"uodn~audiu (IT Auditor) ~ ~ o ~ n n n d ~ l j a u . ~ ~ u u o u ~ ~ ~ ~ u 9 019

(ha n a r ~ i w u n l ~ ~ n i r f l u w " n n ~ r w " ~ ~ ~ u " u o ~ r : u u f l u w " n n ~ r n l ~ u n ~ ~ u " ~ o ~ ~ ~ ~ ~ u

(Application Logs) ~ia:$uw"n~1ua:i~um"u~dr:uu~odn"unirqn~niiu f luw"nnlr i~l -~~f I5:~~

fin'nnirwuiuiui.u"i~r:uu liun'nnirlkiu Command Line 111: Firewall Log i fhz~ lWd8

Jr:Tuaulun~rlkraoaou~ia:&o~ii;ufluw"nG~nd~al~oeii~fiou GO i u u'ukuidnirl~u?nimmr 2 ~u~ma~auiid8mrw"lilrod (Backup) ~k~Auuonan~u#oeii~fiou o TR

(0)) narnsaoaou$uw"nnirnl~u3~1u"~o~@4~1ur:uuoeii~aJi~au~

C ; &.r8flnirl lo~nirnir~~~"~inl~uu1inla~Cuw"n~i~ im:iih2w<niriu~ilb~Cuw"n

mdi~ul law~:~nnn#i~ua .u"o~i i i~u

&I nru~u1fn~riinu~lnnrn1mau~un1rl4~1ur:uuinioi1u~~a:in~o~nouw"ainoiiiii1u

-oG-

u~auianaiu~un.rda8n~p16u~.rn15f i%b.r6v"bya (Backup Paticy)

&I o akn'iintuibyattaz.a~d~tta~t~u!a" Tnua'nPru.r~iun'i~unaioJdi~q imzn~ia( i t~uuod