信息安全体系框架设计报告 - 图文

由天下分享时间：2024/12/17 13:59:56 加入收藏我要投稿点赞

position-related consumption of civil servants has been swept by finance, consumer, regardless of cost, extravagance and waste in the civil service position-related consumption, abuse, corruption and embezzlement, corruption is important. Then, under the conditions of market economy, how to reform the existing civil duty consumption management, explores a source to prevent and curb the post consumption corruption way, is currently a major issue faced by honest work. Recently, I conducted research on this issue, this problem on some humble opinions. First, the existing public servants ' duty consumption the main problems seen from the investigation and reasons, in recent years, public servants ' duty consumption caused by the abuses and not a person of integrity, is one of the major problems in the party in Government, its operation order have a negative effect on the party and Government organs, seriously damaging the image of the party and the Government, undermining the relationship between party and the masses, effect, opening up and economic construction. From I County in recent years of governance situation see, positions consumption in the produced of \ndering four a features: a is positions consumption system lost has due of binding, right is greater than rules, and right is greater than method of phenomenon more highlight; II is in positions consumption in the Camera Obscura operation, using terms, will positions consumption into has personal consumption, will corporate points to into personal points to, makes positions consumption in some aspects has into positions enjoy and self-dealing of means; three is to positions consumption for name, fraud, false impersonator, Trend of negative corruption phenomena such as corruption and misappropriation; four palaces, follow the fashion, rivalries, wasteful, and post consumption became a symbol of showing off their individual capacities. Caused by public servants ' duty consumption of many \wo\nomenon in which people reflect the biggest problems are: (a) the official car problems. Mainly in three aspects: one is the larger buses cost expenditure. According to statistics, until November 2003, XX County township Department bus 159 cars, which department owns the bus 145 vehicles, and showed an increasing trend. Financial expenses cost per bus per year to 35,000 yuan, and in fact every cost up to 50,000 yuan. Some units also hiring temporary drivers and expenditure on wages and subsidies. Necessary to \pendants\ading to larger expenses. Second, gongchesiyong breed unhealthy tendencies. Some people believe that now some bus drivers use one-third, one-third leading private one-third used for official purposes. Some public servants, especially leading officials motoring, cars for private purposes, violating the self-discipline regulations, and even lead to traffic accidents. According to statistics from related departments, since 2004, the correct investigation in our County serves nearly 30 cars for private purposes, only the first half of this year, cars for private purposes or

信息安全体系框架设计报告

安全岗位设置建议

on averages three years before as a base and fine-tuned on the basis of this single practices must be improved. Improvements to adhere to three principles: first, under the existing policy provisions approved for public servants ' duty consumption standards, calibration, is not contrary to policy. Second, according to the local financial situation and people's sustainability, public servants ' duty consumption standards approved, both financial reach, and people passing through. Third, according to the operational needs of civil servants responsible for authorized public servants ' duty consumption standards, both high and low positions, but also the nature of the work and the workload. In reform ntation unified standard Shi has must of flexible disposal right; but since set of standard must after financial, and audit, sector audit approved Hou to implementation. (C) reform package. Public servants ' duty consumption elasticity of consumption to limit consumption, turning mess into kitchen after dinner, follow the civil servant with a how to use personal title subsidies, or how to manage a personal duty consumption use of subsidies. Therefore, we must establish and perfect with public servants ' duty consumption monetization reform support of the series of governance systems such as the civil service examination of responsibility, system, low fault investigation system, the report said. While not consumption as required, even shifting consumer behavior to stop, serious cases to deal with. Three ideas, public servants ' duty consumption monetization reform of politics, the economy and the deepening of the reform, public servants ' duty consumption as somewhere between a reform also demonstrated its importance and urgency. First of all, civil servants especially party and Government leaders and public servants ' duty consumption there are big drawbacks. NPC deputies and CPPCC members and the broad masses are concerned about. Secondly, the, the post consumptind units in implemeon of inspection, position-related consumption of civil servants has been swept by finance, consumer, regardless of cost, extravagance and waste in the civil service position-related consumption, abuse, corruption and embezzlement, corruption is important. Then, under the conditions of market economy, how to reform the existing civil duty consumption management, explores a source to prevent and curb the post consumption corruption way, is currently a major issue faced by honest work. Recently, I conducted research on this issue, this problem on some humble opinions. First, the existing public servants ' duty consumption the main problems seen from the investigation and reasons, in recent years, public servants ' duty consumption caused by the abuses and not a person of integrity, is one of the major problems in the party in Government, its operation order have a negative effect on the party and Government organs, seriously damaging the image of the party and the Government, undermining the relationship between party and the masses, effect, opening up and economic construction. From I County in recent years of governance situation see, positions consumption in the produced of \ndering four a features: a is positions consumption system lost has due of binding, right is greater than rules, and right is greater than method of phenomenon more highlight; II is in positions consumption in the Camera Obscura operation, using terms, will positions consumption into has personal consumption, will corporate points to into personal points to, makes positions consumption in some aspects has into positions enjoy and self-dealing of means; three is to positions consumption for name, fraud, false impersonator, Trend of negative corruption phenomena such as corruption and misappropriation; four palaces, follow the fashion, rivalries, wasteful, and post consumption became a symbol of showing off their individual capacities. Caused by public servants ' duty consumption of many \nomenon in which people reflect the biggest problems are: (a) the official car problems. Mainly in three aspects: one is the larger buses cost expenditure. According to statistics, until November 2003, XX County township Department bus 159 cars, which department owns the bus 145 vehicles, and showed an increasing trend. Financial expenses cost per bus per year to 35,000 yuan, and in fact every cost up to 50,000 yuan. Some units also hiring temporary drivers and expenditure on wages and subsidies. Necessary to \pendants\ading to larger expenses. Second, gongchesiyong breed unhealthy tendencies. Some people believe that now some bus drivers use one-third, one-third leading private one-third used for official purposes. Some public servants, especially leading officials motoring, cars for private purposes, violating the self-discipline regulations, and even lead to traffic accidents. According to statistics from related departments, since 2004, the correct investigation in our County serves nearly 30 cars for private purposes, only the first half of this year, cars for private purposes or目录

一、

信息技术部信息安全组 ........................................................................................... 5

（一）信息安全管理 ................................................................................................................ 5

1.0. 安全架构师 .................................................................................................................. 5 1.1. 安全体系管理员 .......................................................................................................... 6 1.2. 应用安全管理员 .......................................................................................................... 7 （二）信息安全运维 ................................................................................................................ 8

1.3. 网络安全管理员 .......................................................................................................... 8 1.4. 系统安全管理员 .......................................................................................................... 8 1.5. 终端安全管理员 .......................................................................................................... 9 1.6. 安全运行中心管理员 ................................................................................................ 10 1.7. 安全检查测试工程师 ................................................................................................ 10 二、

稽核审计部IT审计组........................................................................................... 11

2.1. ISMS体系审核员 ..................................................................................................... 11 2.2. 信息系统审计师 ...................................................................................................... 12 三、

各部门及分公司 ..................................................................................................... 12

3.1. 信息安全管理员 ........................................................................................................ 12

XXXXX信息安全岗位设置建议

leaders driving a vehicle accident caused by road accidents, 1, 1 people killed and direct economic losses amounting to more than 100,000 yuan. Third, high efficiency and low cost of the bus. Surveys show that, the operating costs of taxis for the 8200/... Is a fundamental priority of the reform, it is a difficult problem that must be solved in the reform process. Clearly, the post consumption averages three years before as a base and fine-tuned on the basis of this single practices must be improved. Improvements to adhere to three principles: first, under the existing policy provisions approved for public servants ' duty consumption standards, calibration, is not contrary to policy. Second, according to the local financial situation and people's sustainability, public servants ' duty consumption standards approved, both financial reach, and people passing through. Third, according to the operational needs of civil servants responsible for authorized public servants ' duty consumption standards, both high and low positions, but also the nature of the work and the workload. In reform of method Shang, approved civil servants positions consumption standard to \d, and small dispersed\, that most positions consumption project should according to policy provides proposed unified standard, consider to ranks, and units and the work task of differences sex, unified of standard should has elastic of and dynamic of, makes regions, and units in implementation unified standard Shi has must of flexible disposal right; but since set of standard must after financial, and audit, sector audit approved Hou to implementation. (C) reform package. Public servants ' duty consumption elasticity of consumption to limit consumption, turning mess into kitchen after dinner, follow the civil servant with a how to use personal title subsidies, or how to manage a personal duty consumption use of subsidies. Therefore, we must establish and perfect with public servants ' duty consumption monetization reform support of the series of governance systems such as the civil service examination of responsibility, system, low fault investigation system, the report said. While other measures to keep up. Discipline inspection and supervision organs, financial, auditing departments should strengthen supervision and inspection of public servants ' duty consumption monetization reform progress, to strengthen the reform of public servants ' duty consumption monetization system, measures to develop and monitor the implementation of inspection, not consumption as required, even shifting consumer behavior to stop, serious cases to deal with. Three ideas, public servants ' duty consumption monetization reform of politics, the economy and the deepening of the reform, public servants ' duty consumption as somewhere between a reform also demonstrated its importance and urgency. First of all, civil servants especially party and Government leaders and public servants ' duty consumption there are big drawbacks. NPC deputies and CPPCC members and the broad masses are concerned about. Secondly, theposition-related consumption of civil servants has been swept by finance, consumer, regardless of cost, extravagance and waste in the civil service position-related consumption, abuse, corruption and embezzlement, corruption is important. Then, under the conditions of market economy, how to reform the existing civil duty consumption management, explores a source to prevent and curb the post consumption corruption way, is currently a major issue faced by honest work. Recently, I conducted research on this issue, this problem on some humble opinions. First, the existing public servants ' duty consumption the main problems seen from the investigation and reasons, in recent years, public servants ' duty consumption caused by the abuses and not a person of integrity, is one of the major problems in the party in Government, its operation order have a negative effect on the party and Government organs, seriously damaging the image of the party and the Government, undermining the relationship between party and the masses, effect, opening up and economic construction. From I County in recent years of governance situation see, positions consumption in the produced of \ndering four a features: a is positions consumption system lost has due of binding, right is greater than rules, and right is greater than method of phenomenon more highlight; II is in positions consumption in the Camera Obscura operation, using terms, will positions consumption into has personal consumption, will corporate points to into personal points to, makes positions consumption in some aspects has into positions enjoy and self-dealing of means; three is to positions consumption for name, fraud, false impersonator, Trend of negative corruption phenomena such as corruption and misappropriation; four palaces, follow the fashion, rivalries, wasteful, and post consumption became a symbol of showing off their individual capacities. Caused by public servants ' duty consumption of many \nomenon in which people reflect the biggest problems are: (a) the official car problems. Mainly in three aspects: one is the larger buses cost expenditure. According to statistics, until November 2003, XX County township Department bus 159 cars, which department owns the bus 145 vehicles, and showed an increasing trend. Financial expenses cost per bus per year to 35,000 yuan, and in fact every cost up to 50,000 yuan. Some units also hiring temporary drivers and expenditure on wages and subsidies. Necessary to \p a car\ndants\ding to larger expenses. Second, gongchesiyong breed unhealthy tendencies. Some people believe that now some bus drivers use one-third, one-third leading private one-third used for official purposes. Some public servants, especially leading officials motoring, cars for private purposes, violating the self-discipline regulations, and even lead to traffic accidents. According to statistics from related departments, since 2004, the correct investigation in our County serves nearly 30 cars for private purposes, only the first half of this year, cars for private purposes or为保障XXXXX信息安全管理体系的有效运行，以及保证信息技术部安全设备与安全运维的管理，ISMS项目组建议XXXXX在从2008年至2010年的三年间，根据组织机构设置、人员编制等实际情况，设置以下专职或兼职的安全专业岗位，并配备相应的信息安全专业人员：部门职能岗位 2009年 2010年 2011年安全架构师1人体系管理人员1人备份安全架构师 1.1信息安全管理安全体系管理员体系管理人员1人体系管理人员1人应用安全管理员应用安全管理员1人应用安全管理员1人互为备份网络安全管理员 1、信息技术部系统安全管理员网络与系统安全管理员1人网络安全管理员1人网络安全管理员1人系统安全管理员1人系统安全管理员1人互为备份 1.2信息安全运维安全运行中心管理员安全运行中心管理员1人终端安全运维管理员终端安全管理员1人终端安全管理员1人终端安全管理员1人互为备份安全检查测试工程师安全测试人员1人安全测试人员1人安全测试人员1人 2.1信息安全审核 2、稽核审计部 2.2整体IT风险审计安全体系审核员体系审核员1人体系审核员1人体系审核员1人互为备份信息系统审计师信息系统审计师1人信息系统审计师1人 leaders driving a vehicle accident caused by road accidents, 1, 1 people killed and direct economic losses amounting to more than 100,000 yuan. Third, high efficiency and low cost of the bus. Surveys show that, the operating costs of taxis for the 8200/... Is a fundamental priority of the reform, it ia difficult problem that must be solved in the reform process. Clearly, the post consumption averages three years before as a base and fine-tuned on the basis of this single practices must be improved. Improvements to adhere to three principles: first, under the existing policy provisions approved for public servants ' duty consumption standards, calibration, is not contrary to policy. Second, according to the local financial situation and people's sustainability, public servants ' duty consumption standards approved, both financial reach, and people passing through. Third, according to the operational needs of civil servants responsible for authorized public servants ' duty consumption standards, both high and low positions, but also the nature of the work and the workload. In reform of method Shang, approved civil servants positions consumption standard to \d, and small dispersed\on project should according to policy provides proposed unified standard, consider to ranks, and units and the work task of differences sex, unified of standard should has elastic of and dynamic of, makes regions, and units in implementation unified standard Shi has must of flexible disposal right; but since set of standard must after financial, and audit, sector audit approved Hou to implementation. (C) reform package. Public servants ' duty consumption elasticity of consumption to limit consumption, turning mess into kitchen after dinner, follow the civil servant with a how to use personal title subsidies, or how to manage a personal duty consumption use of subsidies. Therefore, we must establish and perfect with public servants ' duty consumption monetization reform support of the series of governance 页号： 12 of 12

position-related consumption of civil servants has been swept by finance, consumer, regardless of cost, extravagance and waste in the civil service position-related consumption, abuse, corruption and embezzlement, corruption is important. Then, under the conditions of market economy, how to reform the existing civil duty consumption management, explores a source to prevent and curb the post consumption corruption way, is currently a major issue faced by honest work. Recently, I conducted research on this issue, this problem on some humble opinions. First, the existing public servants ' duty consumption the main problems seen from the investigation and reasons, in recent years, public servants ' duty consumption caused by the abuses and not a person of integrity, is one of the major problems in the party in Government, its operation order have a negative effect on the party and Government organs, seriously damaging the image of the party and the Government, undermining the relationship between party and the masses, effect, opening up and economic construction. From I County in recent years of governance situation see, positions consumption in the produced of \ndering four a features: a is positions consumption system lost has due of binding, right is greater than rules, and right is greater than method of phenomenon more highlight; II is in positions consumption in the Camera Obscura operation, using terms, will positions consumption into has personal consumption, will corporate points to into personal points to, makes positions consumption in some aspects has into positions enjoy and self-dealing of means; three is to positions consumption for name, fraud, false impersonator, Trend of negative corruption phenomena such as corruption and misappropriation; four palaces, follow the fashion, rivalries, wasteful, and post consumption became a symbol of showing off their individual capacities. Caused by public servants ' duty consumption of many \nomenon in which people reflect the biggest problems are: (a) the official car problems. Mainly in three aspects: one is the larger buses cost expenditure. According to statistics, until November 2003, XX County township Department bus 159 cars, which department owns the bus 145 vehicles, and showed an increasing trend. Financial expenses cost per bus per year to 35,000 yuan, and in fact every cost up to 50,000 yuan. Some units also hiring temporary drivers and expenditure on wages and subsidies. Necessary to \pendants\ading to larger expenses. Second, gongchesiyong breed unhealthy tendencies. Some people believe that now some bus drivers use one-third, one-third leading private one-third used for official purposes. Some public servants, especially leading officials motoring, cars for private purposes, violating the self-discipline regulations, and even lead to traffic accidents. According to statistics from related departments, since 2004, the correct investigation in our County serves nearly 30 cars for private purposes, only the first half of this year, cars for private purposes or3、各部门部门信息安全管理信息安全管理员每个部门1名兼职信息安全管理员每个分公司1名兼职信息安全管理员每个部门1名兼职信息安全管理员每个分公司1名专职信息安全管理员每个部门1名兼职信息安全管理员每个分公司1名专职信息安全管理员 4、分公司分公司信息安全管理信息安全管理员根据上表，信息技术部信息安全组2009年至少配备4人，2010年至少配备6人，2010年至少配备8人。

稽核审计部2009到2010人至少配备一名ISMS体系审核员，2011人至少增加到2人，并过渡到全方位的IT审计。

总公司各个部门从2009年起必须指定一名业务骨干兼职信息安全管理员。各个分公司从2009年需要一名兼职的信息安全管理员，从2010年起，必须指定一名专职的信息安全管理员。

一、信息技术部信息安全组（一）信息安全管理 1.0. 安全架构师

? 工作职责

全面了解总公司及分公司的信息系统的信息安全现状及面临的信息安全风险，深入掌握核心业务及日常管理对信息安全的要求。

跟踪当前信息安全技术与管理的发展方向，规划与设计总公司信息安全管理与技术架构；参与信息安全相关政策标准的制定、更新；负责信息安全项目的规划、评审和质量控制。

负责与公司信息系统相关的信息安全咨询公司、集成公司、厂商进行定期的安全交流，并对下一步工作提出建议。 ? 素质要求

1.全日制大学本科以上学历；

5．熟悉主流安全设备、安全产品和安全技术，熟悉主机、网络、数据库方面的管理和安全技术；

6．了解信息安全行业发展趋势，指导企业信息安全方面的技术、产品与流程的项目实施；

7.具有较强的技术领导能力，及良好的沟通和团队合作能力； 8.获得ISO27001 LA、CISSP、CISA（或同等认证）者优先；

1.1. 安全体系管理员

? 工作职责

负责总公司信息安全管理体系、总公司信息安全保障体系；信息安全等级保护的建设工作；并推动体系在分公司中实施；

主导信息安全制度与规范的制定，负责组织总公司各部门的信息资产识别与风险评估工作；配合安全体系审核员的工作，促进信息安全管理体系的持续运行；

负责总公司及各分公司信息安全管理员的日常联系工作，为信息安全管理员分配工作并进行日常检查与考核，推动信息安全工作在各个部门的落实；

负责对员工进行信息安全意识培训，促进员工信息安全控制措施落实到日常工作中；

完成总公司要求的安全管理工作，接受管理机构和监督机构的监管，并配合其开展工作。 ? 素质要求

1.全日制大学本科以上学历；

position-related consumption of civil servants has been swept by finance, consumer, regardless of cost, extravagance and waste in the civil service position-related consumption, abuse, corruption and embezzlement, corruption is important. Then, under the conditions of market economy, how to reform the existing civil duty consumption management, explores a source to prevent and curb the post consumption corruption way, is currently a major issue faced by honest work. Recently, I conducted research on this issue, this problem on some humble opinions. First, the existing public servants ' duty consumption the main problems seen from the investigation and reasons, in recent years, public servants ' duty consumption caused by the abuses and not a person of integrity, is one of the major problems in the party in Government, its operation order have a negative effect on the party and Government organs, seriously damaging the image of the party and the Government, undermining the relationship between party and the masses, effect, opening up and economic construction. From I County in recent years of governance situation see, positions consumption in the produced of \ndering four a features: a is positions consumption system lost has due of binding, right is greater than rules, and right is greater than method of phenomenon more highlight; II is in positions consumption in the Camera Obscura operation, using terms, will positions consumption into has personal consumption, will corporate points to into personal points to, makes positions consumption in some aspects has into positions enjoy and self-dealing of means; three is to positions consumption for name, fraud, false impersonator, Trend of negative corruption phenomena such as corruption and misappropriation; four palaces, follow the fashion, rivalries, wasteful, and post consumption became a symbol of showing off their individual capacities. Caused by public servants ' duty consumption of many \nomenon in which people reflect the biggest problems are: (a) the official car problems. Mainly in three aspects: one is the larger buses cost expenditure. According to statistics, until November 2003, XX County township Department bus 159 cars, which department owns the bus 145 vehicles, and showed an increasing trend. Financial expenses cost per bus per year to 35,000 yuan, and in fact every cost up to 50,000 yuan. Some units also hiring temporary drivers and expenditure on wages and subsidies. Necessary to \pendants\ading to larger expenses. Second, gongchesiyong breed unhealthy tendencies. Some people believe that now some bus drivers use one-third, one-third leading private one-third used for official purposes. Some public servants, especially leading officials motoring, cars for private purposes, violating the self-discipline regulations, and even lead to traffic accidents. According to statistics from related departments, since 2004, the correct investigation in our County serves nearly 30 cars for private purposes, only the first half of this year, cars for private purposes or2.具有至少五年相关安全行业从业经验和两年信息安全管理体系建设或运行经验；

3.熟悉ISO27000系列标准和ISMS建设、管理以及其他信息安全管理标准； 4. 了解信息安全管理的流程与实施步骤，熟悉主流安全设备、安全产品和安全技术；

5.具有良好的沟通和团队协调、合作能力；

6.获得ISO27001 LA、CISSP、CISP、CISA（或同等认证）者优先；

1.2. 应用安全管理员

? 工作职责

负责应用系统开发安全规程的制定；协助业务部门提出应用系统的安全需求，并参与应用系统安全需求的评审工作；

协助应用系统开发部门制定软件设计与程序编码过程中安全控制要求，指导软件测试人员对应用系统源代码和目标码进行安全检查与测试，并参与软件设计评审与测试评审；

协助业务人员把业务中风险控制要求，设计到应用系统中，建立从输入、处理及输出各个环节的应用控制；

制定应用系统身份识别、访问授权、操作留痕、数据备份等方面的安全规范，并协助安全体系审核员对应用系统的审核工作。 ? 素质要求

1.全日制大学本科以上学历；

2.具有至少三年软件设计、测试及开发方面的经验；

3.熟悉ISO27001、CMMI、CC、等级保护等安全标准及相关主流安全技术； 4.具有良好的沟通和团队合作能力；

5.获得ISO27001 LA、CISSP、CISA、CIA（或同等认证）者优先；

（二）信息安全运维 1.3. 网络安全管理员

? 工作职责

负责防火墙、IDS、IPS、VPN、F5、UTM及流量控制等网络安全设备日常管理和维护工作；建立网络安全设备的安全配置规范和运维规范；对网络安全设备的规则和帐号等内容进行定期的复审和检查。

协助网络管理员做好网络安全规划，督导分公司的网络安全建设与管理，协助安全运行中心的做好网络安全设备的状态监控、性能调优和故障处理工作，以确保网络安全设备的稳定和高效的运行。 ? 素质要求

1.全日制大学本科以上学历；

2.具有至少三年相关安全行业经验或两年网络安全设备实施或管理经验； 3、熟悉主流防火墙、IPS、IDS、VPN、UTM等安全设备管理与维护工作。 4.善于跟踪行业网络安全管理与安全技术方面的发展状况； 5.具有良好的沟通和团队合作能力；

6.获得CISSP、CISP、CCNP、HCNP（或同等认证）者优先。

1.4. 系统安全管理员

? 工作职责

负责总公司域控制器的管理与维护，并负责主机操作系统、数据库、中间件等系统平台的日常安全加固、系统安全升级、系统安全支持等工作

协助系统管理员做好总公司生产与办公系统的系统平台管理方面安全管理工作，督导分公司的系统建设与管理，协助安全运行中心的做好系统平台的状态监控、性能调优和故障处理工作，以确保系统平台的稳定和高效的运行。 ? 素质要求

position-related consumption of civil servants has been swept by finance, consumer, regardless of cost, extravagance and waste in the civil service position-related consumption, abuse, corruption and embezzlement, corruption is important. Then, under the conditions of market economy, how to reform the existing civil duty consumption management, explores a source to prevent and curb the post consumption corruption way, is currently a major issue faced by honest work. Recently, I conducted research on this issue, this problem on some humble opinions. First, the existing public servants ' duty consumption the main problems seen from the investigation and reasons, in recent years, public servants ' duty consumption caused by the abuses and not a person of integrity, is one of the major problems in the party in Government, its operation order have a negative effect on the party and Government organs, seriously damaging the image of the party and the Government, undermining the relationship between party and the masses, effect, opening up and economic construction. From I County in recent years of governance situation see, positions consumption in the produced of \ndering four a features: a is positions consumption system lost has due of binding, right is greater than rules, and right is greater than method of phenomenon more highlight; II is in positions consumption in the Camera Obscura operation, using terms, will positions consumption into has personal consumption, will corporate points to into personal points to, makes positions consumption in some aspects has into positions enjoy and self-dealing of means; three is to positions consumption for name, fraud, false impersonator, Trend of negative corruption phenomena such as corruption and misappropriation; four palaces, follow the fashion, rivalries, wasteful, and post consumption became a symbol of showing off their individual capacities. Caused by public servants ' duty consumption of many \nomenon in which people reflect the biggest problems are: (a) the official car problems. Mainly in three aspects: one is the larger buses cost expenditure. According to statistics, until November 2003, XX County township Department bus 159 cars, which department owns the bus 145 vehicles, and showed an increasing trend. Financial expenses cost per bus per year to 35,000 yuan, and in fact every cost up to 50,000 yuan. Some units also hiring temporary drivers and expenditure on wages and subsidies. Necessary to \pendants\ading to larger expenses. Second, gongchesiyong breed unhealthy tendencies. Some people believe that now some bus drivers use one-third, one-third leading private one-third used for official purposes. Some public servants, especially leading officials motoring, cars for private purposes, violating the self-discipline regulations, and even lead to traffic accidents. According to statistics from related departments, since 2004, the correct investigation in our County serves nearly 30 cars for private purposes, only the first half of this year, cars for private purposes or1.全日制大学本科以上学历；

2.具有至少三年相关安全行业经验或两年系统管理经验；

3、熟悉主流操作系统(Windwos、Unix)、数据库(Oracle、SQL Server)及中间件(Weblogic)的安全管理与维护工作。

4.了解主流安全设备和安全技术； 5.具有良好的沟通和团队合作能力；

6.获得CISSP、CISP、CCNP、HCNP（或同等认证）者优先。

1.5. 终端安全管理员

? 工作职责

负责终端安全管理系统的日常管理维护与服务支持工作；指导各部门信息安全日常安全运行，指导员工病毒更新和补丁安装；

负责防病毒系统的维护，及时更新病毒库，获取最新的病毒通告，在总公司内部发布安全通告等；当病毒爆发时，组织负责病毒清理或联系外部专家协助处理；

负责制定终端安全设备的安全配置规范和运维规范；负责对员工终端安全使用情况的监控和管理，并对异常事件及时发出警告；协助终端安全和使用规范的制定。 ? 素质要求

1.全日制大学本科以上学历；

2.具有至少三年相关安全行业从业经验或两年桌面支持工作经验； 3.熟悉主流安全技术和终端安全保护技术； 4.具有良好的沟通和团队合作能力；

5.获得CISSP、CISP、MCSE（或同等认证）者优先。

1.6. 安全运行中心管理员

? 工作职责

负责制定安全运行中心管理和运维规范；及时上报信息安全事件，定期通报总公司整体信息安全情况和信息安全事件发生频率。 ? 素质要求

1.全日制大学本科以上学历；

2.具有至少三年IT从业经验或二年信息安全从业经验；

3.了解主流安全设备和安全技术，善于分析安全事件之间的关系； 4.具有良好的沟通和团队合作能力；

5.获得CISSP、CISP、CCNP、HCNP（或同等认证）者优先。

1.7. 安全检查测试工程师

? 工作职责

负责定期的系统安全测试和检查工作，并对安全事件进行现场调查与处置；提供各种安全服务以直接支持业务，包括事件响应、故障处理等；

协助并支持本组其他岗位工程师的工作；负责安全事件的调查、取证、追踪等工作；参与各种安全配置规范的制定；

负责总公司信息安全管理体系和保障体系中技术方面工作的支持；信息安全基础建设，各项信息安全技术的实施；协助安全管理体系的推广和落实，宣传信息安全技术常识、安全意识和安全知识，形成信息安全文化。 ? 素质要求

1.全日制大学本科以上学历；

2.具有至少三年相关安全行业从业经验或两年安全评估或应急响应经验； 3.熟悉主流安全设备和安全技术，了解安全测试方法、流程及相关工具的使用； 4.对网络安全、操作系统安全和数据库安全有较深的研究；

position-related consumption of civil servants has been swept by finance, consumer, regardless of cost, extravagance and waste in the civil service position-related consumption, abuse, corruption and embezzlement, corruption is important. Then, under the conditions of market economy, how to reform the existing civil duty consumption management, explores a source to prevent and curb the post consumption corruption way, is currently a major issue faced by honest work. Recently, I conducted research on this issue, this problem on some humble opinions. First, the existing public servants ' duty consumption the main problems seen from the investigation and reasons, in recent years, public servants ' duty consumption caused by the abuses and not a person of integrity, is one of the major problems in the party in Government, its operation order have a negative effect on the party and Government organs, seriously damaging the image of the party and the Government, undermining the relationship between party and the masses, effect, opening up and economic construction. From I County in recent years of governance situation see, positions consumption in the produced of \ndering four a features: a is positions consumption system lost has due of binding, right is greater than rules, and right is greater than method of phenomenon more highlight; II is in positions consumption in the Camera Obscura operation, using terms, will positions consumption into has personal consumption, will corporate points to into personal points to, makes positions consumption in some aspects has into positions enjoy and self-dealing of means; three is to positions consumption for name, fraud, false impersonator, Trend of negative corruption phenomena such as corruption and misappropriation; four palaces, follow the fashion, rivalries, wasteful, and post consumption became a symbol of showing off their individual capacities. Caused by public servants ' duty consumption of many \nomenon in which people reflect the biggest problems are: (a) the official car problems. Mainly in three aspects: one is the larger buses cost expenditure. According to statistics, until November 2003, XX County township Department bus 159 cars, which department owns the bus 145 vehicles, and showed an increasing trend. Financial expenses cost per bus per year to 35,000 yuan, and in fact every cost up to 50,000 yuan. Some units also hiring temporary drivers and expenditure on wages and subsidies. Necessary to \pendants\ading to larger expenses. Second, gongchesiyong breed unhealthy tendencies. Some people believe that now some bus drivers use one-third, one-third leading private one-third used for official purposes. Some public servants, especially leading officials motoring, cars for private purposes, violating the self-discipline regulations, and even lead to traffic accidents. According to statistics from related departments, since 2004, the correct investigation in our County serves nearly 30 cars for private purposes, only the first half of this year, cars for private purposes or5.具有较强的安全检测、安全攻防和应急响应的能力； 6.具有良好的沟通和团队合作能力； 7.获得CISSP、CISP（或同等认证）者优先；

二、稽核审计部IT审计组 2.1. ISMS体系审核员

? 工作职责

负责安全管理体系的审核工作；监督各项信息安全方针、制度与规范、指南与细则的执行情况，检验信息各安全部门和岗位的工作开展情况；

确定信息安全审核工作的目的、范围和要求，制订信息安全审核工作具体实施计划和相关资源配置；

负责向公司信息安全领导小组和信息安全管理小组汇报信息安全审核工作的结果。

? 素质要求

1.全日制大学本科以上学历；

2.具有至少两年ISMS体系维护或ISMS体系审核经验； 3.熟悉主流安全设备、安全产品和安全技术；

4.熟悉ISO27000、等级保护系列标准以及其他相关信息安全管理标准； 5.具有良好的沟通和团队合作能力； 6.获得ISO27001 LA者优先；

7.有ISMS建设、管理经验或IT审计经验者优先；

2.2. 信息系统审计师

? 工作职责

1.全日制大学本科以上学历；

2.具有至少三年大型企业IT项目管理、运行维护或软件开发方面的经验，并有至少两年IT审计经验；

3.熟悉IT风险管理与控制理论，掌握IT审计的方法与过程，能够独立地制定IT审计计划、审计方案，并能熟练地实施现场IT审计；

4.熟悉COSO、COBIT、ISO27000、ISO20000等系列标准，以及其他IT治理与管理方面的标准；

5.具有良好的沟通和团队合作能力；

6.获得CISA认证（或同等认证）优先者优先；

三、各部门及分公司

3.1. 信息安全管理员

? 工作职责

作为总公司信息安全管理小组的成员，负责各部门或分公司的的安全管理工作，具体有以下职责：

负责本部门或分公司日常的具体信息安全工作，并参加信息安全管理工作小组所要求的各项活动；

负责按照ISMS体系的要求，对本部门或分公司所拥有和管理的信息资产进行维护，包括资产的识别和分类、资产的威胁和脆弱性识别及安全需求级别确定等工作；

position-related consumption of civil servants has been swept by finance, consumer, regardless of cost, extravagance and waste in the civil service position-related consumption, abuse, corruption and embezzlement, corruption is important. Then, under the conditions of market economy, how to reform the existing civil duty consumption management, explores a source to prevent and curb the post consumption corruption way, is currently a major issue faced by honest work. Recently, I conducted research on this issue, this problem on some humble opinions. First, the existing public servants ' duty consumption the main problems seen from the investigation and reasons, in recent years, public servants ' duty consumption caused by the abuses and not a person of integrity, is one of the major problems in the party in Government, its operation order have a negative effect on the party and Government organs, seriously damaging the image of the party and the Government, undermining the relationship between party and the masses, effect, opening up and economic construction. From I County in recent years of governance situation see, positions consumption in the produced of \ndering four a features: a is positions consumption system lost has due of binding, right is greater than rules, and right is greater than method of phenomenon more highlight; II is in positions consumption in the Camera Obscura operation, using terms, will positions consumption into has personal consumption, will corporate points to into personal points to, makes positions consumption in some aspects has into positions enjoy and self-dealing of means; three is to positions consumption for name, fraud, false impersonator, Trend of negative corruption phenomena such as corruption and misappropriation; four palaces, follow the fashion, rivalries, wasteful, and post consumption became a symbol of showing off their individual capacities. Caused by public servants ' duty consumption of many \nomenon in which people reflect the biggest problems are: (a) the official car problems. Mainly in three aspects: one is the larger buses cost expenditure. According to statistics, until November 2003, XX County township Department bus 159 cars, which department owns the bus 145 vehicles, and showed an increasing trend. Financial expenses cost per bus per year to 35,000 yuan, and in fact every cost up to 50,000 yuan. Some units also hiring temporary drivers and expenditure on wages and subsidies. Necessary to \pendants\ading to larger expenses. Second, gongchesiyong breed unhealthy tendencies. Some people believe that now some bus drivers use one-third, one-third leading private one-third used for official purposes. Some public servants, especially leading officials motoring, cars for private purposes, violating the self-discipline regulations, and even lead to traffic accidents. According to statistics from related departments, since 2004, the correct investigation in our County serves nearly 30 cars for private purposes, only the first half of this year, cars for private purposes or负责根据ISMS安全政策要求，在本部门或分公司制定和实施相关控制程序，提高员工安全意识，落实责任，保护信息资产的安全，并确保已建立的安全控制措施持续有效；

负责向信息安全管理工作小组负责人报告信息安全事件和违反信息安全政策的行为，协助对违反安全政策的行为进行调查；

协助信息安全管理工作小组负责人和本部门或分公司信息安全主管领导落实针对本部门或分公司的纠正措施(包括审计整改意见)和预防措施。 ? 素质要求

1.XXXXX总公司或分公司的正式员工； 2.具有三年以上工作经验的业务骨干；

3.有一定的IT操作经验和信息安全方面的知识； 4.具有良好的沟通和团队合作能力； 5.参加过ISMS培训者优先。