ISO 27001:2005

1
????????? ?????????? ??????? ??????????????
???????????? ?? ?????? ISO 270012005

• ???????? ???????, ?.?.?., PMP IPMA, QMS
  Auditor???????? ???????????? ?????? ??????????
  ????24.?? (???)???? ??????????? ?????? ???????
  ???? ??????????
• ???? ??????? ?????? ?? ??????????????? ????????
  ??????????? ??? ???

2
????24.?? - ?????? ???? ? ??????
3
????????

• ????????? ???????
• ??????? ????-???????????
• ?????????? ? ????? ??????? ??????????
  ???????????? ??????
• ????????????? ????????

4
??????????????? ??????? ???????????

• ISO 90012000 ??????? ???????? ?? ???????
  ?????????? (??????? ?????????? ??????????)(2004)
• ??????? ?????????? ????????? (2004 ?? ??????
  ?????? Organizational Project Management Maturity
  Model)
• ??????? ??????????? ?????????????? ????????????
  (ISO 270012005)
• ??????? ?????????? ???????????? ?????? (ISO 9001)
• ??????? ?????????????? ?????????? (IFC standards)

5
??????? ?????????
????????????
???????????? (??????????)
??????????????? ? ??????????
6
??????? ????-???????????
????? ? ???? ?? ???????????
?????????? ??????
????????? ??????
????? ?????????????? ????????????
?????????? ???????? ?????
7
????????? ??????
8
ISO 270012005

• ????????????? ???????? ?? ??????? ???????????
  ?????????????? ????????????
• ??????? ISO ? 2005 ????
• ??????????? ??????????? ? ???????????
  ?????????????? ????????????
• ??????? ????-???????????

9
?????? ???????
10
???????? ???????
11
??? ?????????

• ?????????????? ??????
• ??????????????????
• ???????????
• ???????????
• ???? ??????, ???????, ?????????? ? ?.?.

12
?????????? ??????????????? ????????
13
????????? ?????????? ??????????????? ???????
14
????? ?????????????? ????????????
15
??? ? ?? ???? ?? ?????????

• ?????? ?????????????? ???????
• ??????? ?????? ?????????????? ????????????

16
????????? ?????????? ???????
17
????????? ? ???????????? ?????????
18
??? ???????? - ???????? (????????? ??????)

• Information Security Policy
• IT support procedure
• Software development, implementation and
  modification requests management
• Asset Inventory Management Procedure
• Procedures for protection of confidential
  information (information of limited access)
• Use of informational assets and recourses

19
???????? (????????? ??????)

• Instruction for personnel employment
• Physical Security Procedure
• Procedures for back-up
• Software development
• Procedures for antivirus management
• Removable media management procedure
• Information Security implementation in the
  Internet Bank for private clients service
  provision

20
????????? ?????????? ????????????? ??????????
21
?????????

• ??????? ?????????
• ??????????????? ?????????? ??????? ??????????????
  ???????????? (???? ???????? ??????????? ???)
• ??????????, ?????????????, ????????????? ??????