AXBOROT XAVFSIZLIGIGA TAHDIDLAR VA ULARNING MANBALARI
Keywords:
Audit jarayoni doirasida axborot xavfsizligi auditi axborot tizimlari (AT)ning himoyasini ta’minlash, xavfsizlikka tahdidlar va tahdid manbalari, ichki va tashqi tahdidlar, mavjud zaifliklar, axborot jinoyatlari va kompyuter jinoyatlari bo‘yicha tahdid tahlili va hujum modellashtirish orqali risklarni tahlil qilish, dalillar tahlili hamda axborot resurslarini himoyalash uchun himoya strategiyalarini ishlab chiqishni nazarda tutadi;Abstract
: Ushbu maqolada axborot xavfsizligiga tahdidlar va ularning texnik,
ijtimoiy hamda tabiiy manbalari tahlil qilinagan undan tashqari, tahdidlarning ichki va
tashqi omillari, inson omili va texnologik xatoliklar asosida yuzaga kelish sabablari
ko‘rib chiqilgan. Shuningdek, ularni aniqlash va bartaraf etish bo‘yicha zamonaviy
usullar hamda xavfsizlik siyosatining ahamiyati yoritilgan.
References
1.
ISO/IEC 27001:2022 — Information Security, Cybersecurity and Privacy
Protection – Information Security Management Systems – Requirements.
International Organization for Standardization.
2.
ISO/IEC 15408:2009 — Information Technology – Security Techniques –
Evaluation Criteria for IT Security (Common Criteria).
3.
ISO 19011:2018 — Guidelines for Auditing Management Systems
