在信息技术高度发展的今天,云技术因为其规模大、虚拟化、可靠性高、通用性强、高可扩展性和廉价的特点在越来越多的领域展示出优势,将云技术运用于广电融媒体建设是广电人越来越关注的话题。与此同时,云技术构架的特点也使其面临新的风...在信息技术高度发展的今天,云技术因为其规模大、虚拟化、可靠性高、通用性强、高可扩展性和廉价的特点在越来越多的领域展示出优势,将云技术运用于广电融媒体建设是广电人越来越关注的话题。与此同时,云技术构架的特点也使其面临新的风险,因为庞大的数据在云端集中管理和控制,如何有效、安全管控数据是融媒体云平台能够有效使用的基础。本文介绍了美国国家标准与技术研究院(National Institute of Standards and Technology,以下简称NIST)的理念,将云计算模型化,认为云是一种可以方便地通过网络访问一个可配置的计算资源的公共集,来探索和研究广电融媒体云合理的安全架构。展开更多
Saudi Arabian banks are deeply concerned about how to effectively monitor and control security threats. In recent years, the country has taken several steps towards restructuring its organizational security and, conse...Saudi Arabian banks are deeply concerned about how to effectively monitor and control security threats. In recent years, the country has taken several steps towards restructuring its organizational security and, consequently, protecting financial institutions and their clients. However, there are still several challenges left to be addressed. Accordingly, this article aims to address this problem by proposing an abstract framework based on the National Institute of Standards and Technology (NIST) Cybersecurity Framework and International Organization for Standardization/International Electrotechnical Commission (ISO/IEC 27001). The framework proposed in this paper considers the following factors involved in the security policy of Saudi banks: safety, Saudi information bank, operations and security of Saudi banks, Saudi banks’ supplier relationships, risk assessment, risk mitigation, monitoring and detection, incident response, Saudi banks’ business continuity, compliance, education, and awareness about all factors contributing to the framework implementation. This way, the proposed framework provides a comprehensive, unified approach to managing bank security threats. Not only does the proposed framework provide effective guidance on how to identify, assess, and mitigate security threats, but it also instructs how to develop policy and procedure documents relating to security issues.展开更多
文摘在信息技术高度发展的今天,云技术因为其规模大、虚拟化、可靠性高、通用性强、高可扩展性和廉价的特点在越来越多的领域展示出优势,将云技术运用于广电融媒体建设是广电人越来越关注的话题。与此同时,云技术构架的特点也使其面临新的风险,因为庞大的数据在云端集中管理和控制,如何有效、安全管控数据是融媒体云平台能够有效使用的基础。本文介绍了美国国家标准与技术研究院(National Institute of Standards and Technology,以下简称NIST)的理念,将云计算模型化,认为云是一种可以方便地通过网络访问一个可配置的计算资源的公共集,来探索和研究广电融媒体云合理的安全架构。
文摘Saudi Arabian banks are deeply concerned about how to effectively monitor and control security threats. In recent years, the country has taken several steps towards restructuring its organizational security and, consequently, protecting financial institutions and their clients. However, there are still several challenges left to be addressed. Accordingly, this article aims to address this problem by proposing an abstract framework based on the National Institute of Standards and Technology (NIST) Cybersecurity Framework and International Organization for Standardization/International Electrotechnical Commission (ISO/IEC 27001). The framework proposed in this paper considers the following factors involved in the security policy of Saudi banks: safety, Saudi information bank, operations and security of Saudi banks, Saudi banks’ supplier relationships, risk assessment, risk mitigation, monitoring and detection, incident response, Saudi banks’ business continuity, compliance, education, and awareness about all factors contributing to the framework implementation. This way, the proposed framework provides a comprehensive, unified approach to managing bank security threats. Not only does the proposed framework provide effective guidance on how to identify, assess, and mitigate security threats, but it also instructs how to develop policy and procedure documents relating to security issues.
