《等级保护数据库管理技术要求》
第四章“数据库管理系统安全技术要求”中第四节“数据库安全审计”中明确提出数据库管理系统的安全审计应:建立独立的安全审计系统;定义与数据库安全相关
的审计事件;设置专门的安全审计员;设置专门用于存储数据库系统审计数据的安全审计库;提供适用于数据库系统的安全审计设置、分析和查阅的工具。
法规控制在一些领域起了关键性的作用,例如在业务变更、业务流程验证、系统故障、人为违规 *** 作等方面。因为数据库作为各项资产或者业务的核心,所以数据库审计在各类标准法规中非常重要。
《萨班斯法案》强调加强与财务报表相关的IT系统内部控制,其中,IT系统内部控制是紧密围绕信息安全审计这一核心的。
巴赛尔新资本协定(Basel II)要求全球银行必须做好风险控管(risk management),而这项“金融作业风险”的防范正需要业务信息安全审计为依托。
《企业内部控制具体规范》明确要求计算机信息系统应采取权责分配及职责分工、建立访问安全策略等审计措施以加强提高信息系统的可靠性、稳定性、安全性及数据的完整性和准确性。
《等级保护数据库管理技术要求》 第四章“数据库管理系统安全技术要求”中第四节“数据库安全审计”中明确提出数据库管理系统的安全审计应:建立独立的安全审计系统;定义与数据库安全相关的审计事件;设置专门的安全审计员;设置专门用于存储数据库系统审计数据的安全审计库;提供适用于数据库系统的安全审计设置、分析和查阅的工具。
《ISO15408-2 安全功能要求》明确要求数据库安全审计应包括:识别、记录、存储和分析 那些与安全相关活动(即由TSP 控制的活动)有关的信息;检查审计记录结果可用来判断发生了哪些安全相关活动以及哪个用户要对这些活动负责。
Now the social rapid development, the administration relates in thesociety appears the unusual unimportance, however, in the very manyadministrative chain of command, neglected has carried on the dailyadministration of office using computer software this essential link,therefore, created in the management to be chaotic, the workingefficiency low inferior event occurrence, along with the IT industrydevelopment, replaced the inevitable trend using computer softwarewhich the manual work the way already now the society develops,therefore, the administration system software arose at the historicmoment At present, in each mid- and small-scale enterprise company'sadministration, administrative personnel's work load big, the workingefficiency is low; Causes between the company various departments tolink up the difficulty; The inquiry and the statistics is tedious andso on In view of this present situation, for the full usemodernization information processing technology and the sciencemanagement method, in the full analysis administration department'sactual demand foundation, this article used JBuilder90 + SQL Sever2,000 to design based on the C/S structure small administrationsystem System function consummation practical, is easy to operate,the management and the maintenance, may the expansion be good This article altogether divides into the administration system whichfive chapter of detailed discussions designs, the first chapterdescribed the administration system outline, the existence condition,and elaborates the domestic and foreign OA tendency comparison Secondchapter in detail elaborated the system technology analysis, thenintroduced the present enterprise's demand, has analyzed thedevelopment kit and the database which this system uses Third chapterdescribed the system overall analysis, introduced this systemfunction, the demand analysis and this system need module design,frame chart Fourth chapter is elaborated the database design part,and the introduction data bank technology has carried on a morethorough study and the application Fifth chapter in detail describedthe system design and the realization, also is the this article keypart, elaborated the system key are partial, how namely administrationsystem some modules design and its the realization Last the chapterwill be to the full text summary as well as the later forecast
以上就是关于《等级保护数据库管理技术要求》中对数据库审计有什么说明吗全部的内容,包括:《等级保护数据库管理技术要求》中对数据库审计有什么说明吗、数据库审计法规要求有哪些、有哪位大侠能帮我翻译这短短文章呢等相关内容解答,如果想了解更多相关内容,可以关注我们,你们的支持是我们更新的动力!
欢迎分享,转载请注明来源:内存溢出
评论列表(0条)