Sgsi
Páginas: 2 (380 palabras)
Publicado: 19 de abril de 2011
created with
Information Security Assessment Report
Group
Company Location Address Website Short description of company Scope D&B D-U-N-S® Nr. Date of assessment Contact Contact phone Contactemail Creator Creator phone Creator email vie, 15.04.2011 Cepsa
1 / 3
printed 15/04/2011 14:48
Details
Topic 5.1 Information Security Policy 6.1 Information Security Responsibilities Assigned6.2 Risks resulting through external parties 6.3 Contracts with third parties 7.1 Inventory sheet 7.2 Description and handling of information 8.1 Employment contract 8.2 Awareness and key usertraining 8.3 Access control implementations 9.1 Security areas 9.2 Protection against external and environment related threats 9.3 Access Control Management 9.4 Protection of delivered and dispatched goods9.5 Resources removal authorization 10.1 Hardware and software documentation (Change Management) 10.2 Separation of development, test and production environments 10.3 Audits of services provided byexternal companies 10.4 Antivirus Program 10.5 Firewall on local systems 10.6 Protective measures against active contents 10.7 Information Backup 10.8 Administration of networks 10.9 Policies for modemoperations 10.10 Network services: Definition of the security requirements 10.11 Network services: Service Level Agreement 10.12 Administration of removable media 10.13 Media disposal 10.14 Physicaltransport of media 10.15 Electronic information exchange 10.16 Monitoring: logging 10.17 Monitoring: legal retention period 11.1 User registration 11.2 Rights management 11.3 User password utilization11.4 Password complexity 11.5 Clean Desk and Clear Screen policy 11.6 User authentication for remote users / connections 11.7 Protection of configuration ports and remote monitoring 11.8 Separation ofnetworks 11.9 User identification and authentication
2 / 3
Maturity Remark 5 1 printed 15/04/2011 14:48
Topic 11.10 Mobile data processing and communication 12.1 Encryption of information...
Information Security Assessment Report
Group
Company Location Address Website Short description of company Scope D&B D-U-N-S® Nr. Date of assessment Contact Contact phone Contactemail Creator Creator phone Creator email vie, 15.04.2011 Cepsa
1 / 3
printed 15/04/2011 14:48
Details
Topic 5.1 Information Security Policy 6.1 Information Security Responsibilities Assigned6.2 Risks resulting through external parties 6.3 Contracts with third parties 7.1 Inventory sheet 7.2 Description and handling of information 8.1 Employment contract 8.2 Awareness and key usertraining 8.3 Access control implementations 9.1 Security areas 9.2 Protection against external and environment related threats 9.3 Access Control Management 9.4 Protection of delivered and dispatched goods9.5 Resources removal authorization 10.1 Hardware and software documentation (Change Management) 10.2 Separation of development, test and production environments 10.3 Audits of services provided byexternal companies 10.4 Antivirus Program 10.5 Firewall on local systems 10.6 Protective measures against active contents 10.7 Information Backup 10.8 Administration of networks 10.9 Policies for modemoperations 10.10 Network services: Definition of the security requirements 10.11 Network services: Service Level Agreement 10.12 Administration of removable media 10.13 Media disposal 10.14 Physicaltransport of media 10.15 Electronic information exchange 10.16 Monitoring: logging 10.17 Monitoring: legal retention period 11.1 User registration 11.2 Rights management 11.3 User password utilization11.4 Password complexity 11.5 Clean Desk and Clear Screen policy 11.6 User authentication for remote users / connections 11.7 Protection of configuration ports and remote monitoring 11.8 Separation ofnetworks 11.9 User identification and authentication
2 / 3
Maturity Remark 5 1 printed 15/04/2011 14:48
Topic 11.10 Mobile data processing and communication 12.1 Encryption of information...
Leer documento completo
Regístrate para leer el documento completo.