Isu lokuphepha kwe-inthanethi: okhiye, izinhlaka kanye nokusetshenziswa okusebenzayo

  • Isu lokuphepha kwe-cyber kumele lihlanganise ukuphathwa kwezingozi, ubuchwepheshe, izinqubomgomo, ukuqeqeshwa kanye nokuphathwa okuhambisana nezinhlaka zaseYurophu nezesizwe.
  • I-EU neSpain zikhuthaza amasu nezinhlelo ezithile (i-ENCS, i-NIS2, i-National Cybersecurity Plan) ukuze kuqiniswe ukuqina kwezinsizakalo ezibalulekile namabhizinisi.
  • Izinhlangano, ezinkulu noma ezincane, kumele zivumelanise lezi zinhlaka nezimo zazo ngokuhlola ukuvuthwa, ukusebenzisa izindinganiso, kanye nokugxila ekuvimbeleni kanye nokuqina kwe-inthanethi.
  • Ukuhlanganiswa kwamathuluzi, ukwamukelwa kwamamodeli e-Zero Trust, kanye nokulungiselela ukuphendula nokululama ezigamekweni kuyinsika yokusebenza ngokuphephile ngokuhamba kwesikhathi.

isu lokuphepha kwe-inthanethi

Eminyakeni yamuva, i Ukuphepha kwe-inthanethi sekuyinkinga ebaluleke kakhulu Kohulumeni, amabhizinisi, kanye nezakhamuzi. Ukwenziwa kwedijithali okukhulu, ukubalwa kwamafu, ukusebenza kude, kanye nokukhula kwe-IoT kuvule amathuba amaningi, kodwa futhi kwandise inkundla yokudlala yabahlaseli. Namuhla, asisakhulumi nje ngama-virus acasulayo, kodwa sikhuluma nangawo ukuhlaselwa kwe-cyber okuyinkimbinkimbi, i-ransomware (ungayivikela kanjani idatha yakho), ubunhloli bedijithali kanye nemisebenzi eqhutshwa ngisho yiMibuso.

Uma sibheka lesi simo, ukufaka nje isofthiwe ye-antivirus nokuphambanisa iminwe yakho akusanele. Kubalulekile ukuba ne- isu lokuphepha kwe-inthanethi elicatshangelwe kahle, elibhalwe phansi futhi elihambisana nezinhloso zebhizinisi kanye nezinqubomgomo zezwe nezaseYurophu. Leli cebo kumele lihlanganise ubuchwepheshe, izinqubo, ukubusa, ukuqeqeshwa, kanye nokubambisana, kusukela ezingeni le-European Union kuze kufike ebhizinisini elincane neliphakathi nendawo (ama-SME) elithengisa ku-inthanethi.

Iyini ngempela isu lokuphepha kwe-cyber?

Una isu lokuphepha kwe-inthanethi Empeleni, uhlelo oluhlelekile oluchaza indlela inhlangano, uhulumeni, noma ngisho nezwe elivikela ngayo izinhlelo zolwazi, amanethiwekhi, idatha kanye nezimpahla zedijithali lapho ubhekene nezinsongo ze-inthanethi. Akuyona nje incwadi yemfundiso: luhlaka oluqondisa izinqumo zokutshalwa kwezimali, izinto eziza kuqala, imithwalo yemfanelo, kanye nendlela yokusabela lapho kukhona okungahambi kahle.

Ngokombono wokusebenza, isu elihle linquma ukuthi izinto zizokwenziwa kanjani ukuphatha izingozi, ukugcina ubuqotho kanye nokutholakala kwezinhlelokanye nokuvikela ulwazi olubucayi ekufinyeleleni okungagunyaziwe, ukuvuza, noma ukuguqulwa. Endabeni yezikhungo zomphakathi noma izifundazwe, leli cebo liphakanyiswe kakhulu laze lafika ezingeni ukuphepha kwezwe, ukuzivikela, ubudlelwano bezombusazwe kanye nokuvikelwa kwengqalasizinda ebalulekile.

Kumabhizinisi, ikakhulukazi, isu lokuphepha kwe-inthanethi lixhumanisa imisebenzi yezobuchwepheshe yansuku zonke nezinkinga ezibonakalayo ezifana ukuqhubeka kwebhizinisi, idumela lomkhiqizo, izigwebo zomthetho, kanye nokwethenjwa kwamakhasimende nabalinganiNgaphandle kwalolo hlaka, izinyathelo zokuphepha zivame ukuba ama-patches ahlukene kanye nokusabela okungekuhle okufika sekwephuzile.

Kungani isu lokuphepha kwe-cyber libalulekile namuhla

Ukwamukelwa ngobuningi kwezixazululo zedijithali eminyakeni yamuva nje kube nonya. Ukushintshela kwezentengiselwano ze-e, ezenzakalelayo, efwini (ubukhosi bamafuFuthi umsebenzi wokude washesha nakakhulu ngenxa yobhubhane. Izinhlangano eziningi zandisa ingqalasizinda yazo yenethiwekhi ngokuzumayo, zasakaza i-Wi-Fi yonke indawo, futhi zaxhuma zonke izinhlobo zamadivayisi ngaphandle kokukhulisa ukuzivikela kwazo ngesivinini esifanayo.

Ngesikhathi esifanayo, Abantu bahlanganise umhlaba we-inthanethi cishe kukho konke.Ukubhanga ku-inthanethi, ukuthenga, izinkundla zokuxhumana, amadivayisi ahlakaniphile ekhaya, ukusebenza kude usebenzisa omakhalekhukhwini kanye nama-laptop akho... Konke lokhu kuphindaphinde amaphuzu okungena kubahlaseli, ngokunengqondo, abasebenzise lesi sikhathi.

Kulesi simo, bavele ngamandla. Izinsongo ezifana ne-ransomware, ukwebiwa kobunikazi, ukukhwabanisa kokuzenza ongeyena umuntu, kanye nemikhankaso yobugebengu bokweba imininingwane eyimfihlo noma eqondiweIzigebengu ze-inthanethi ziye zathuthukisa amasu azo, kuyilapho izinhlangano eziningi ziqhubeka nokuthembela ezindleleni zokuphepha eziyisisekelo noma eziphelelwe yisikhathi. Umphumela: izehlakalo ezivame kakhulu nezingathi sína ezithinta ngqo ezezimali nasedumeleni.

Nakuba ukuqwashisa sekuthuthukile futhi izinhlangano eziningi zinezinqubomgomo kanye nezilawuli zokuphepha, Izinsongo ziyashintsha nsuku zonke futhi ingozi ayisoze yehle iye ku-zeroKuyohlala kukhona amaphutha abantu, ukulungiselelwa okungalungile, noma ubuthakathaka obusanda kutholwa. Yingakho, ukuba nesu elicacile nelibuyekezwayo elisekelwa abaphathi Akusekho ukukhetha: kuyimfuneko yokuqhubeka nokusebenza ngokuthula kwengqondo.

Ngaphezu kwalokho, emazingeni aseYurophu nakazwelonke, kuyaqashelwa ukuthi I-Cyberspace iyisizinda esibalulekile sokuphepha kanye nobukhosi kwezobuchwephesheKusukela eBrussels kuya kohulumeni bezifundazwe, amasu athile, iziqondiso kanye nezinhlelo ziyavunywa ukuqinisekisa ukwenziwa kwedijithali okuphephile nokuqinile.

Umbono we-European Union mayelana nokuphepha kwe-inthanethi

IKhomishini yaseYurophu kanye noMmeli Ophakeme Wezindaba Zangaphandle banikeze Isu Lokuphepha Kwe-inthanethi le-EU okuphendula esimweni esiyinkimbinkimbi kakhulu sokusongela. Umqondo oyinhloko ukuthi iNyunyana kumele ukuhola ukwenziwa kwedijithali okuphephile, ngezindinganiso eziphezulu kanye nemithethonqubo edingayo ngezinsizakalo ezibalulekile kanye nengqalasizinda ebalulekile.

Leli qhinga laseYurophu lihlose ukusebenzisa amandla aphelele e-EU ukuqinisa ubukhosi bezobuchwephesheLokhu kuqondwa njengekhono lokunquma nokulawula ubuchwepheshe balo obubalulekile ngaphandle kokuthembela ngokweqile kubantu besithathu, kuyilapho kuqinisekiswa ukuqina kwazo zonke izinsizakalo nemikhiqizo exhunyiwe. Ukuze kufezwe lokhu, isu liphakamisa ukuthi imiphakathi emine emikhulu ye-cyber —imakethe yangaphakathi, amabutho ezokuphepha, izingxoxo zobumbano kanye nezokuvikela— zisebenza ngendlela ehlelekile kakhulu.

Ukubambisana kwangaphakathi kupheleliswa ukuqinisa ukubambisana kwamazwe ngamazwe nabalingani ababelana ngezindinganiso zentando yeningi, ukubusa komthetho, kanye nokuhlonipha amalungelo abantuUmgomo uwukuqhubekela endaweni ye-inthanethi yomhlaba wonke evulekile, kodwa futhi ephephile futhi ezinzile, lapho kunemithetho ecacile kanye namandla okusabela ngokubambisana ekuhlaselweni okukhulu.

Ngokwezinto ezingokoqobo, isu le-EU ligxile ezindaweni ezintathu eziyinhloko: Ukuqina, ubukhosi bezobuchwepheshe kanye nobuholi; amakhono okusebenza okuvimbela, ukuvimbela nokuphendula; kanye nokubambisana kwamazwe ngamazwe ukugcina indawo ye-inthanethi evulekileUkuze kusekelwe lokhu, i-EU izibophezele ezingeni eliphezulu kakhulu lokutshalwa kwezimali kunasezinkathini zangaphambilini, iphinda kane inani elabelwe ukuguquka kwedijithali kanye nokuphepha kwe-inthanethi.

Esinye isici esiphawulekayo yisiphakamiso se- Iyunithi Ye-Cyber ​​​​Ehlangene okwazi ukuxhumanisa impendulo ezigamekweni ezinkulu usebenzisa izinsiza kanye nobuchwepheshe bamazwe angamalungu kanye nezikhungo zaseYurophu. Umqondo uwukuthi, uma kwenzeka ukuhlaselwa okukhulu, Impendulo ye-EU kumele ibe ngeyombumbano ngempela hhayi isamba semizamo yomuntu ngamunye engahlelekile..

Isu Likazwelonke Lokuphepha Kwe-inthanethi eSpain

ESpain, i- Isu Lokuphepha Kwezwe lika-2021 Iqaphela i-cyberspace njengenye yezingozi ezinkulu ekuphepheni kwezwe. Kusukela lapho, kulandele uchungechunge lwemicimbi ehlukene. Amasu Kazwelonke Okuphepha Kwe-inthanethi (2013, 2019 kanye nenqubo ye-ENCS entsha) ebeka inkambo yenqubomgomo kazwelonke kule ndaba.

Isu lika-2019 lisebenze njengomhlahlandlela wokuqhubekela phambili I-cyberspace ethembekile ezingeni likazwelonke, laseYurophu kanye nelamazwe ngamazweKodwa-ke, eminyakeni yamuva nje kube nokwanda okungakaze kubonwe kwendawo yosongo: ukwanda kwezigameko ze-inthanethi, ukuhlaselwa yizinhlaka zikahulumeni kanye nezinhlangano ezingezona ezikahulumeni, kanye nokugxila okukhethekile ku- izimpahla ezibalulekile njengokuphathwa komphakathi, ingqalasizinda ebalulekile, kanye nabaqhubi bezinsizakalo eziyisisekelo.

Ngaphezu kwalokhu kunezinselele zobuchwepheshe ezisafufusa ezifana nokuthi ukuthuthukiswa okusheshayo kobuhlakani bokwenziwa (ukuphepha kwe-inthanethi kukhodi ekhiqizwe yi-AI), okungaba ithuluzi lokuzivikela kanye nendlela entsha yokuhlasela, kanye nokuvela kwe- i-quantum computing, enekhono lokuphula ama-algorithms okubethela amanjeKonke lokhu kwenza kube nesidingo sokuvuselela uhlaka lwesu lukazwelonke ukuze luhambisane nezinguquko zobuchwepheshe kanye nemithetho.

Kulokhu, isu elisha likazwelonke kumele lihambisane eduze neziqondiso zaseYurophu: Isu Lokuphepha Kwe-Cyber ​​laseYurophu lika-2020, Inqubomgomo Yokuvikela I-Cyber ​​​​yase-EU ka-2022 kanye nezinye izinqubomgomo zomkhakha njengalezo ezihlobene namanethiwekhi e-5G, isitifiketi, ukuvikelwa kwezintambo zasolwandle noma izinhlelo ezifana nalokho okubizwa ngokuthi "isivumelwano se-quantum".

Insika eyinhloko yi- Isiqondiso (i-EU) 2022/2555, esaziwa ngokuthi yi-NIS2okudinga ukuthi amazwe angamalungu alondoloze izinga eliphezulu nelivamile lokuphepha kwe-inthanethi. I-NIS2 ichaza izinto okumele zifakwe emasu kazwelonke: Izinqubomgomo ezimelene ne-ransomware, ukukhuthazwa kokuvikelwa kwe-cyber okusebenzayo, kanye nezinyathelo ezithile zokuvikela izinsizakalo zomphakathi ezidijithaliESpain, ukuguqulwa kwayo kuqaliswa ngokusebenzisa umthethosivivinywa ohlongozwayo wokuhlanganisa kanye nokuphatha kwezokuphepha kwe-inthanethi, ohlinzeka ngokwakhiwa kwe- National Cybersecurity Center.

Ngaphezu kwalokho, isu elisha lizohlanganiswa neminye imithethonqubo efana ne- Umthetho Wezokuphepha Kwe-inthanethi we-5G, i-National 5G Network and Services Security Scheme kanye nomthetho waseYurophu mayelana ukuqina kwe-inthanethi kanye nobumbano lwe-inthanethiIzophinde ihlanganise neziqondiso ezivela ezinhlanganweni ezifana ne-ENISA, i-European Cybersecurity Competence Centre, i-OSCE, kanye ne-ITU, futhi izokhuthaza Imisebenzi ye-R&D esebenzisa ubuchwepheshe obusha ngenkathi ihlonipha ukuvikelwa kwedatha.

Indlela Isu Elisha Lokuphepha Kwe-inthanethi Likazwelonke elithuthukiswa ngayo

Inqubo yokudala i-ENCS entsha eSpain ichazwe ngokucacile. UMkhandlu Wezokuphepha Kazwelonke ekugcineni unesibopho sokulungiselela, ngokusebenzisa UMkhandlu Kazwelonke Wokuphepha Kwe-inthanethi njengenhlangano ekhethekile. Lokhu, nakho, kwakha Iqembu Lokusebenza Lobuchwepheshe obhala izinguqulo ezahlukene.

Abameleli abavela kuzo zonke iminyango nezinhlaka zikahulumeni ezifanele bangahlanganyela kuleli qembu, uma nje livunyiwe yiNational Cybersecurity Council. Imiphakathi Ezimele kanye namaDolobha Azimele nawo ayabandakanyeka, ehlanganyela eNgqungqutheleni Yezindaba Zokuphepha Kuzwelonke.

Le nqubo ihlanganisa futhi Ukuqoqwa kwemibono evela kochwepheshe emphakathini, emkhakheni ozimele, kanye nasezikoleni zemfundo ephakemeNgokusebenzisa ubuchwepheshe bayo besayensi nobuchwepheshe, uMnyango Wezokuphepha Kwasekhaya uhlela lezi zigaba, uqoqe impendulo mayelana nohlaka, futhi uqinisekise ukuthi umbhalo wokugcina ubonisa ukuvumelana okubanzi ngangokunokwenzeka.

Izigaba eziyinhloko yilezi: ukubhala phansi yiQembu Lobuchwepheshe, ukubonisana nochwepheshe bangaphandle, ukulethwa kohlaka eNgqungqutheleni Yemikhakha ukuze kuqoqwe iziphakamiso ezivela emiphakathini ezimele, kanye nokwethulwa kombhalo wokugcina kuMkhandlu Kazwelonke Wokuphepha Kwe-Cyber. Uma usuqinisekisiwe, umbhalo uthunyelwa ku- INational Security Council ukuze kuvunyelwe ngokusemthethweni.

Ngokuphathelene nokuqukethwe, isu elisha kufanele ukuhlaziya umongo wamanje wezinsongo zokuphepha kwe-inthanethi kuzwelonkeUkuhlonza izingozi ezibalulekile, ukubeka imigomo yamasu kanye nezinsizakusebenza ezidingekayo, kanye nokuchaza izinhlelo zokwenza ukunciphisa lezo zingozi. Konke lokhu kumele kwenziwe ngokuhambisana nemithethonqubo nezinqubomgomo ezikhona zaseYurophu nezesizwe, kanye nokucabangela umsebenzi wangaphambilini wokubambisana komphakathi kanye nezizimele, njengalezo zeNational Cybersecurity Forum.

Uhlelo Lukazwelonke Lokuphepha Kwe-inthanethi kanye nokwakhiwa kwamandla

Kanye nohlaka lwesu, iSpain yethule uhlelo Uhlelo Lukazwelonke Lokuphepha Kwe-inthanethi ihlelwe nguMnyango Wezokuphepha Kwezwe. Lolu hlelo luhlanganisa izinhlelo ezingaba ngu-150 esikhathini seminyaka emithathu futhi lunesabelomali esingaphezu 1.000 million euro, futhi beyibeka ngaphakathi kwempendulo yemiphumela yezomnotho nezenhlalo yempi e-Ukraine.

Phakathi kwezinyathelo ezifanele kakhulu, okulandelayo kuyaphawuleka: Ukudalwa Kwepulatifomu Kazwelonke Yezaziso Nokuqapha Izehlakalo Nezinsongo Ze-CyberLokhu kuzokwenza kube lula ukushintshana kolwazi lwesikhathi sangempela phakathi kwezinhlangano zomphakathi nezizimele. Inhloso ukuthuthukisa amakhono okuthola kusenesikhathi kanye nokusabela ngokubambisana.

Esinye isenzo esibalulekile ukukhuthaza Isikhungo Sokusebenza Kwezokuphepha Kwe-inthanethi Sokuphathwa Kwezwe Jikelele kanye nezinhlangano zaso zomphakathiokuzosebenza njengesikhungo sokuqapha nokuphendula ngaphakathi kohulumeni bomphakathi. Kuzophinde kwakhiwe [iyunithi/uhlelo/njll.] uhlelo oluhlanganisiwe lwezinkomba zokuphepha kwe-inthanethi ezingeni likazwelonke (ukubonwa okuvulekile kakhudlwana), ukuze kulinganiswe izinga lokuvikelwa kanye nokuvela kwezinsongo.

Uhlelo luhlanganisa futhi Ukuqinisa ingqalasizinda yokuphepha kwe-inthanethi emiphakathini ezimele kanye nasemadolobheni kanye nasezinhlanganweni zasendawenikanye nokuthuthukiswa okunamandla kokuphepha kwe-inthanethi kwe Ama-SME, amabhizinisi amancane kanye nabantu abazisebenzayoabavame ukuba sengozini enkulu. Ngaphezu kwalokho, inhloso ukukhuthaza isiko elikhulu lokuphepha kwe-inthanethi emphakathiningokusebenzisa imikhankaso yokuqwashisa kanye nezenzo.

Ekugcineni, uhlelo luyasungulwa Ukuqapha nokulawula UhleloLokhu kusenza sikwazi ukulandelela inqubekela phambili yezinyathelo futhi silungiselele umbiko wonyaka wokuhlola. Lokhu kusenza sikwazi ukulungisa izinto eziza kuqala futhi siqinisekise ukuthi ukutshalwa kwezimali kuholela emiphumeleni ebonakalayo.

Izingxenye ezibalulekile zesu lokuphepha kwe-inthanethi lenkampani

Ezweni lebhizinisi, isu eliqinile livame ukusekelwe ezinsikeni eziningana eziyisisekelo. Ngamafuphi, singakhuluma izingxenye eziyishumi ezibalulekile okufanele kube khona cishe kunoma iyiphi inhlangano, evunyelaniswe nobukhulu bayo kanye nomkhakha wayo.

Ibhulokhi yokuqala yi- ukuhlola ingoziUmgomo lapha ukuhlonza ukuthi yiziphi izimpahla ezibalulekile (izinhlelo, idatha, izinqubo), yiziphi izinsongo ezingaba khona kakhulu (i-malware, i-phishing, i-ransomware, izinsongo zangaphakathi), nokuthi umthelela ongaba khona ungaba yini uma kukhona okungahambi kahle. Kusukela lapho, amathuba nemiphumela kuyahlolwa ukuze kubekwe phambili imizamo.

Ingxenye yesibili yi- izinqubomgomo nezinqubo zokuphephaUkuba namathuluzi akwanele: udinga ukuchaza ukuthi asetshenziswa kanjani, ukuthi izigameko ziphathwa kanjani, ukuthi ubani owenza ini, nokuthi ukuhambisana nemithetho efana ne-GDPR, i-HIPAA, noma amazinga emboni kuqinisekiswa kanjani. Lezi zinqubomgomo kumele zibhalwe, zibuyekezwe, futhi zidluliselwe kuyo yonke inhlangano.

Okwesithathu sithola ukuthi ubuchwepheshe namathuluzi yokuvikela. Sikhuluma ngama-firewall, izinhlelo zokuthola ukungena kanye nokuvimbela (i-IDS/IPS), ukubethela idatha ngesikhathi sokuthutha kanye nokuphumula, izixazululo zokulawula ukufinyelela kanye nokuphathwa kobunikazi (ezinokuqinisekiswa kwezinto eziningi kanye nokufinyelela okusekelwe ezindimeni), kanye namathuluzi okuphepha e-antimalware kanye ne-endpoint.

Esinye isisekelo esibalulekile yi- ukuqwashisa nokuqeqeshwa ngokuphephaElinye lamaphuzu abuthakathaka kakhulu ngokuvamile yisici somuntu, ngakho-ke kubalulekile ukunikeza ukuqeqeshwa njalo, ukulingisa ukuhlaselwa kwe-phishing kanye nemikhankaso ekhuthaza isiko lokuphepha langempela, lapho wonke umsebenzi eqonda khona ukubaluleka kokulandela imikhuba emihle kakhulu.

Kubalulekile futhi ukuba izindlela zokuqapha nokuthola okuqhubekayoLokhu kuhilela ukuqoqa nokuhlaziya izingodo, ithrafikhi yenethiwekhi, kanye nomsebenzi womsebenzisi kusetshenziswa izixazululo ezifana ne-SIEM, ezikwazi ukubona ukungalingani ngesikhathi sangempela futhi zivuse izexwayiso ezivumela ukusabela ngaphambi kokuba umonakalo ube mkhulu.

Isu kumele futhi lifake phakathi uhlelo lokuphendula esigamekweni kanye nokulungisaOkusho ukuthi, inqubo ecacile yokuthi yini okufanele uyenze uma kutholwa ukuhlaselwa: indlela yokukulawula, indlela yokukukhulumisana ngaphakathi kanye nabantu besithathu, indlela yokusebenzisana neziphathimandla, kanye nendlela yokubuyisela izinhlelo kanye nedatha (kufaka phakathi ama-backups kanye nezinhlelo zokulungisa inhlekelele).

Ngokombono womthetho, inkampani kufanele ihlanganise izinto ezicatshangelwayo zomthetho kanye nokuthobela imithethoLokhu kuhilela ukuqinisekisa ukuthi izinyathelo zokuphepha ziyahambisana nemithetho yokuvikela idatha, izidingo zemboni, kanye nezinkontileka namakhasimende kanye nabaphakeli, okusekelwa ukuhlolwa okuvamile kanye nokubuyekezwa kwenqubomgomo.

Esinye isici esibalulekile yi- izivivinyo kanye nezibuyekezo ezivamileIzinhlangano kumele zenze ukuhlolwa kobuthakathaka, ukuhlolwa kokungena, ukuphathwa kwama-patch, kanye nokubuyekezwa kwamasu njalo ukuze zivumelane nezinsongo nobuchwepheshe obusha.

La ukubambisana kanye nokushintshana ngolwazi Ukubambisana nezinye izinkampani, izinhlangano, kanye nemiphakathi ekhethekile kusiza ekubikezeleni izingozi ezivelayo ngokwabelana ngemikhuba emihle kanye nobuhlakani bezinsongo. Okokugcina, konke lokhu kumele kuhlelwe ngaphakathi kwe-a ukubusa okucacile ngokusekelwa kobuholilapho abaphathi abaphezulu bekhuthaza ukuphepha kwe-inthanethi njengento eza kuqala futhi bachaza izindima nemithwalo yemfanelo kuzo zonke izigaba.

Indlela yokuthuthukisa isu lokuphepha kwe-cyber isinyathelo ngesinyathelo

Inqubo yokuklama isu lokuphepha kwe-cyber Akuhlukile kangako kwezinye izinhlelo zebhizinisi ezihlelekileNgokuvamile ihlelwe ngezigaba ezine eziyinhloko: ukuhlonza nokuhlola, ukukhethwa kwezinyathelo zokumelana, incazelo yohlelo lomgwaqo, kanye nokusetshenziswa ekugcineni.

Esigabeni se ukuhlonza nokuhlolaImigomo nemigomo yokuphepha iyabekwa, kusungulwa izindlela zokulinganisa impumelelo, izimpahla okufanele zivikelwe zibhalwe ohlwini (isb., izinhlelo zezimali, idatha yamakhasimende, noma impahla yobuhlakani), ubuthakathaka obaziwayo kanye nezinsongo ezingaba khona ziyahlonzwa, futhi amathuba kanye nomthelela zinikezwa ukuze zihlukaniswe.

Okulandelayo kuza isigaba se ukukhethwa kwezindlela zokumelanaLesi sigaba sihlaziya izixazululo zesofthiwe ezitholakala emakethe, izindleko zokusebenzisa nokulungisa, kanye nokufaneleka kwazo enhlanganweni. Abahlinzeki bezinkampani zangaphandle abakhethekile bavame ukusetshenziswa. Ngesikhathi esifanayo, izinqubomgomo nezinqubo zangaphakathi ziyabuyekezwa futhi zilungiswe ukuze kuqiniswe ukunciphisa nokuvimbela.

Isigaba sesithathu siqukethe ukuthuthukisa isu kanye nohlelo lomgwaqoLokhu kuhilela ukuchaza uhlelo lokuqalisa olunomthelela ezindaweni eziningana: izinsizakusebenza zabantu (ukwabiwa kwabasebenzi, izinhlelo zokuqeqesha kanye nemikhankaso yokuqwashisa), ingqalasizinda yezobuchwepheshe kanye neyomzimba (isibonelo, izilawuli zokufinyelela ezindaweni ezibalulekile), kanye nemisebenzi ephindaphindayo edingekayo ukuze isu lihlale liphila futhi lisesikhathini.

Ekugcineni, i ukusetshenziswa kwesu Kubhekwa njengephrojekthi yokuphathwa koshintsho: ukuhlela okuningiliziwe, izikhathi ezibekiwe, isabelomali, ukuthunyelwa kobuchwepheshe, ukulungiswa kwengqalasizinda, ukuqaliswa kwezinhlelo zokuqeqesha, njll. Futhi, okubalulekile, akuyona "iphrojekthi yesikhathi esisodwa": Isu kufanele libuyekezwe njalo, ikakhulukazi lapho kuqaliswa izinqubo ezintsha ze-IoT, izinhlelo, noma amadivayisi. ezikhulisa indawo yokuhlasela.

Izinkampani ezinkulu vs ama-SME: umehluko kusu lokuphepha kwe-cyber

Izinhloso eziyisisekelo ziyafana kunoma iyiphi inhlangano: ukuvimbela umonakalo ovela ezigamekweni ezibeka engcupheni izinhlelo kanye nedathaUmehluko omkhulu phakathi kwezinkampani ezinkulu namabhizinisi amancane ubukhulu, kokubili ngokwezinsizakusebenza kanye nokuchayeka. Lokhu kuthonya kakhulu indlela isu lokuphepha kwe-inthanethi eliklanywa futhi lisetshenziswa ngayo.

Kepha izinsiza ezikhonaIzinkampani ezinkulu ngokuvamile zinamaqembu azinikele e-IT kanye nezokuphepha kwe-cyber, isabelomali esanele, kanye nekhono lokutshala imali ezikhungweni zokusebenza kwezokuphepha (ama-SOC), ubuhlakani bokusongela, kanye nokuqapha amahora angama-24 ngosuku, izinsuku eziyi-7 ngesonto. Ngakolunye uhlangothi, ama-SME avame ukuthembela eqenjini elincane le-IT elenza konke, noma anikeze abathengisi ukuphepha okuthile, okunciphisa amandla abo okuthola okuthuthukile.

Mayelana ne izinhlobo zezinsongoIzinhlangano ezinkulu ziyizisulu ezikhanga kakhulu zokuhlaselwa okuyinkimbinkimbi njenge-APTs, izehlakalo zochungechunge lokuhlinzekwa kwempahla, noma ukuhlaselwa okuxhaswe nguhulumeni, okungenzeka kube nokwephulwa kwedatha okukhulu noma ukubhujiswa. Izinkampani ezincane zivame ukubhekana nokuhlaselwa "okuphezulu" okuningi njengobugebengu bokweba imininingwane ebucayi, i-ransomware, noma ubunjiniyela bezenhlalo, ngoba abahlaseli bayazi ukuthi abaningi abanazo izindlela zokuzivikela eziqinile.

El umthelela wesigameko Okuhlangenwe nakho nakho kuhlukile. Inkampani enkulu ingabhekana nokulahlekelwa okukhulu, izinhlawulo zomthetho, kanye nokulimala kwedumela, kodwa ngokuvamile inezinsizakusebenza zezimali nezokusebenza zokubuyisa. Ku-SME, ukuhlaselwa okukhulu kungalimaza kakhulu ukusebenza kwayo, kuholele ekuvalweni kwesikhashana okuhlala isikhathi eside, noma ngisho nokuvalwa unomphela uma umthelela wezomnotho uphezulu kakhulu futhi kungekho umshuwalense noma izinqolobane ezanele.

Mayelana ne- ingqalasizinda yezokuphephaIzinhlangano ezinkulu zivame ukuba nezakhiwo ze-IT eziyinkimbinkimbi, ezinezindawo eziningi, izindawo zamafu ezihlanganisiwe, kanye nemisebenzi yamazwe ngamazwe, okwandisa indawo yazo yokuhlasela. Yingakho zitshala imali kumathuluzi athuthukile njenge-EDR, i-IDS, i-SIEM, kanye namapulatifomu okuphatha ahlanganisiwe. Ngakolunye uhlangothi, ama-SME avame ukuba nengqalasizinda elula kodwa ngezinye izikhathi awanazo izisekelo ezifana nokubethela okuhle, ama-backups aqinile, noma ukucushwa okuphephile kwezinsizakalo zawo zamafu.

Emkhakheni we ukuqwashisa abasebenziIzinkampani ezinkulu zivame ukusebenzisa izinhlelo zokuqeqesha ezivamile, ukulingisa i-phishing, kanye nemikhankaso yangaphakathi ukuze kugcinwe ukuphepha kuyinto eza kuqala kuzo zonke izigaba zenhlangano. Ama-SME amaningi, anezinsiza ezimbalwa, anikela ngesikhathi esincane ekuqeqeshweni, futhi amaqembu awo asengozini enkulu yokukhwabanisa okuyisisekelo, yize isitifiketi esisodwa esithintekile singaholela esigamekweni esingathi sína.

El ukuhambisana okujwayelekile Umthelela nawo uyahlukahluka. Izinkampani ezinkulu zivame ukuba ngaphansi kwemithethonqubo exubile (i-PCI-DSS, i-HIPAA, i-SOX, i-GDPR, njll.) futhi zinamaqembu azinikele kwezomthetho kanye nokuthobela imithetho. Ama-SME angase abe nezidingo ezimbalwa ezisemthethweni, kodwa lokho akuwakhululi ekuthobeleni imithetho yokuvikela idatha noma eminye imithethonqubo ethile embonini, futhi avame ukungawunaki lo mbandela, ethatha izingozi zomthetho nezezimali ezingadingekile.

Kepha amathuluzi okuphepha kwe-inthanethiIzinkampani ezinkulu zingasebenzisa amasudi asezingeni lebhizinisi, zenze izivivinyo zokungena njalo, futhi zenze izivivinyo zeqembu elibomvu. Amabhizinisi amaningi amancane kufanele athembele ezixazululweni ezingabizi kakhulu noma amaphakheji aphelele, yize ngokuhlanganisa izinto ezifana nama-VPN, ama-firewall, i-antimalware, kanye nabaphathi bamaphasiwedi ngempumelelo, izinga elifanele lokuphepha lingafinyelelwa ngezindleko eziphansi.

Ekugcineni, umehluko uyabonwa ku impendulo yesigameko kanye nokululamaIzinkampani ezinkulu ngokuvamile zinamaqembu asemthethweni okusabela ezigamekweni, umshwalense we-inthanethi, kanye nezinhlelo eziningiliziwe zokuqhubeka kwebhizinisi. Nokho, kuma-SME amaningi, impendulo isabela kakhulu futhi ingenziwa ngendlela ehlelekile, okuholela esikhathini sokungasebenzi, ukulahleka kwedatha, kanye nobunzima obukhulu ekubuyiseleni ukusebenza okuvamile ngemva kokuhlaselwa.

Iziqondiso ezisebenzayo zokwakha isu ebhizinisini lakho

Ngale kohlaka lwaseYurophu noma lwesizwe, inkampani ngayinye kumele ivumelanise le mibono neqiniso layo elithile. Isinyathelo sokuqala yilesi ukuqonda indawo ethile eyingozi yenhlangano: umkhakha, usayizi, indawo, ukusetshenziswa kwefu noma i-IoT, uhlobo lwedatha ephathwayo, umlando wokuhlaselwa okuhlangatshezwane nakho noma izehlakalo ezifanayo ezinkampanini ezikuleyo nsimu, kanye nemithombo yobuhlakani obusongelayo etholakalayo.

Bese kuba yisihluthulelo hlola ukuvuthwa kwamanje kokuphepha kwe-inthanethiLokhu kuhilela ukubala ingqalasizinda ye-IT (amaseva, izinhlelo zokusebenza, amadivayisi, amanethiwekhi, izinsizakalo zamafu), ukuhlukanisa idatha ngokuya ngokuzwela kwayo (ezezimali, ezempilo, ezomuntu siqu, njll.) nokuhlaziya ukuthi yiziphi izilawuli zokuphepha esezivele zisetshenzisiwe nokuthi yiziphi ezingekho ukuze kufinyelelwe izinga elifanele lokuvikela, kuthathwa izindinganiso eziqashelwayo njengereferensi.

Ukuze ugweme ukuqala phansi, kuyasiza kakhulu. thembela ezimisweni nasezindinganisweni ezikhonaUma inhlangano ingaphansi kwemithethonqubo ethile, izidingo ze-HIPAA, i-PCI DSS, i-GDPR, noma eminye imithetho yobumfihlo zilawula ingxenye yenqubo ngempumelelo. Ngaphezu kwalokho, amazinga afana nalawa I-ISO 27001 noma i-SOC 2, noma ozimele abanjengo I-NIST Cybersecurity Framework noma izilawuli ze-CIS, ezihlinzeka ngemikhuba emihle ehlelekile ehambisana nemithethonqubo eminingi.

Isimiso esiyinhloko yilesi ukuvimbela nokuthola ukulinganiselaNakuba amasu amaningi ayegxile ekutholeni izinsongo ukuze asabele ngesikhathi, iqiniso liwukuthi ngesikhathi kukhishwa isexwayiso, umhlaseli usevele usengaphakathi. Isu lesimanje lihlose ukuvimbela, ngangokunokwenzeka, izithasiselo zokuhlasela okungenzeka kakhulu, ligcwalisa lezi zinyathelo ngamakhono okuthola nokuphendula aqinile kulabo abadlula ngokungenakugwenywa.

Esinye isici esiyinhloko ukwakheka kwe- Ukwakhiwa kwezokuphepha kwe-cyber okusekelwe ku-Zero Trust kanye nokuzivikela okujulileImodeli ye-zero-trust icabanga ukuthi akukho sicelo sokufinyelela esinikezwa ngokuzenzakalelayo, iqinisekisa njalo ubunikazi, izimo, kanye nezimvume. Ukuzivikela okujulile kuhlanganisa izendlalelo eziningana zokuphepha ukuze uma isithiyo esisodwa sehluleka, esinye sikwazi ukubona noma ukuvimba umhlaseli.

Ekugcineni kuyanconywa ukuqinisa ingqalasizinda yezokuphepha Noma nini lapho kungenzeka. Ukuba namathuluzi amaningi angaxhunyiwe kuholela ekukhathaleni emaqenjini okuphepha, ezindaweni ezingabonakali, kanye nokuhlangana. Ukuhlanganisa izixazululo ngaphansi kwepulatifomu ehlangene kakhulu kuthuthukisa ukubonakala, kuzenzakalelayo izimpendulo, kunciphisa izindleko eziphelele zobunikazi, futhi kusebenzisa kangcono izinsizakusebenza zabantu ezitholakalayo.

Ukuqina kwe-cyber: itshe lesisekelo lesu lesimanje

Kulesi simo samanje, okubaluleke kakhulu akusekho nje ukuvimbela ukuhlaselwa, kodwa ukuqinisekisa ikhono lokuqhubeka nokusebenza ngisho noma umuntu ephumelelaLokhu kwaziwa ngokuthi ukuqina kwe-cyber: ikhono lokumelana, ukumunca, ukuzivumelanisa nezimo, nokululama ezigamekweni ezenzeka endaweni ye-inthanethi, ukunciphisa umthelela ebhizinisini noma ezinkonzweni ezibalulekile.

Isibonelo esicacile yindawo ye- imeyiliLena enye yezindlela ezikhethwayo zabahlaseli zokusebenzisa i-ransomware, i-spear-phishing, i-phishing, noma ukwebiwa kweziqinisekiso. Izinhlangano zidinga kokubili izivikelo eziqinile zomphetho kanye nezihlungi ezisongelayo ezithuthukisiwe njengezixazululo eziqinisekisa ukuqhubeka kwesevisi kanye nokubuyiselwa kwedatha okusheshayo uma kukhona okungahambi kahle. Izibonelo zangempela ze ukuzibophezela ngeposi Zibonisa ukubaluleka kwezinyathelo ezibanzi.

Kulesi simo, abahlinzeki abakhethekile banikeza Izinsizakalo zamafu ezihlanganisa ukuphepha, ukuqhubeka, ukugcinwa kwengobo yomlando, kanye nokuqeqeshwaPhakathi kwamakhono abaluleke kakhulu kukhona: ukuvikelwa kwezinsongo okuthuthukisiwe (ukutholwa kwe-malware, ubugebengu bokweba imininingwane ebucayi, ukuvuza kwedatha), ukuqhubeka kwe-imeyili ukuze abasebenzisi baqhubeke nokusebenza ngesikhathi sezehlakalo, ukugcinwa kwengobo yomlando kwangaphandle ukuze bahlale benamakhophi afinyelelekayo futhi kube lula ukuthobela imithetho kanye nokutholwa kwe-e, kanye nezinhlelo zokuqwashisa eziguqula umsebenzisi abe "i-firewall yabantu".

Le ndlela iqinisa umqondo wokuthi isu elisebenzayo lokuphepha kwe-inthanethi kumele Dlula ngamathuluzi ngamanye bese ucabanga ngomjikelezo wonke: vimbela, thola, phendula, futhi ululameUmgomo oyinhloko ukuthi ibhizinisi eliyinhloko lenhlangano lingawi ngenxa yesigameko, kodwa kunalokho lingagcinwa, lilungiswe, futhi lifunde kulokho okwenzekile ukuze liphume liqinile.

Isimo sengozi esishintsha njalo, ingcindezi yokulawula, kanye nokwanda kokuthembela kwedijithali kusho ukuthi ukuba Isu eliphelele lokuphepha kwe-inthanethi, elihambisana nezinqubomgomo zaseYurophu nezezwe, elenzelwe ubukhulu benhlangano futhi eliqhutshwa abaphathi Kuzoba yisici esibalulekile sokusinda nokuncintisana. Labo abathatha le nselele ngokungathi sína, abahlanganisa ubuchwepheshe obuqinile nemikhuba emihle kanye nokuqeqeshwa, futhi abathembele ezinhlakeni eziqashelwayo kanye nokubambisana komphakathi nezizimele bazoba sesimweni esingcono kakhulu sokubhekana nezinselele ze-cyberspace eminyakeni ezayo.

izinsizakalo ze-IT eziphethwe
Isihloko esihlobene:
Izinsizakalo ze-IT eziphethwe: Umhlahlandlela Ophelele Wamabhizinisi

Engeza njengomthombo okhethwayo ku-Google