безперервний моніторинг інформаційної безпеки (ISCM)
Визначення
Maintaining ongoing awareness of information security, vulnerabilities, and threats to support organizational risk management decisions. Note: The terms “continuous” and “ongoing” in this context mean that security controls and organizational risks are assessed and analyzed at a frequency sufficient to support risk-based security decisions to adequately protect organization information. See organizational information security continuous monitoring and automated security monitoring.
Український переклад (UK)Use of automated procedures to ensure security controls are not circumvented or the use of these tools to track actions taken by subjects suspected of misusing the information system.
Український переклад (UK)Use of automated procedures to ensure security controls are not circumvented or the use of these tools to track actions taken by subjects suspected of misusing the information system.
Український переклад (UK)See information security continuous monitoring (ISCM).
Український переклад (UK)See information security continuous monitoring (ISCM).
Український переклад (UK)Maintaining ongoing awareness of information security, vulnerabilities, and threats to support organizational risk management decisions. [Note: The terms “continuous” and “ongoing” in this context mean that security controls and organizational risks are assessed and analyzed at a frequency sufficient to support risk-based security decisions to adequately protect organization information.]
Український переклад (UK)- automated security monitoring · NIST CSRC
- ISCM · NIST CSRC
- ISO · NIST CSRC
- ongoing assessment and authorization · NIST CSRC
- ongoing authorization · NIST CSRC
- automated security monitoring · NIST CSRC
- continuous monitoring · NIST CSRC
- Continuous Monitoring · NIST CSRC
- organizational information security continuous monitoring · NIST CSRC
Запропонувати виправлення
Пов’язані терміни
ISCM
Сторінка терміна →NIST SP 800-53 Rev. 4ISO
Note: Organizations subordinate to federal agencies may use the term Senior Information Security Officer or Chief Information Security Officer to denote individuals filling positions with similar responsibilities to Senior Agency Information Security Officers.
Сторінка терміна →CNSSI 4009-2015ongoing assessment and authorization
Maintaining ongoing awareness of information security, vulnerabilities, and threats to support organizational risk management decisions. Note: The terms “continuous” and “ongoing” in this context mean that security controls and organizational risks are assessed and analyzed at a frequency sufficient to support risk-based security decisions to adequately protect organization information. See organizational information security continuous monitoring and automated security monitoring.
Сторінка терміна →NIST SP 800-137Organizational Information Security Continuous Monitoring
Ongoing monitoring sufficient to ensure and assure effectiveness of security controls related to systems, networks, and cyberspace, by assessing security control implementation and organizational security status in accordance with organizational risk tolerance – and within a reporting structure designed to make real-time, data-driven risk management decisions.
Сторінка терміна →