|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/acsc-essential-eight-assessment-process-guide/
课程评论：没有评论
课程名称：ACSC 必要八项评估（E8）流程指南 课程概述：澳大利亚网络安全中心（ACSC）制定了优先缓解策略，形成了减少网络安全事件的策略，以帮助组织保护自己免受各种网络威胁。这些缓解策略中最有效的便是“必要八项”。必要八项成熟度模型于2017年6月首次发布，并定期更新，旨在支持必要八项的实施。该模型基于ACSC在生成网络威胁情报、响应网络安全事件、进行渗透测试以及协助组织实施必要八项方面的经验。 必要八项列举了一套最低限度的预防措施，组织在其环境条件下需实施额外措施。此外，尽管必要八项能有效缓解大多数网络威胁，但并无法应对所有威胁。因此，组织需要考虑额外的缓解策略和安全控制措施，包括来自减少网络安全事件策略和信息安全手册（ISM）的内容。组织还应考虑实施网络安全成熟度模型，以帮助识别现有安全态势中的优势与不足。这将允许组织随时间跟踪进展，并在必要时做出进一步投资的明智决策。此外，组织必须建立快速有效响应网络事件的流程。
The Australian Cyber Security Centre (ACSC) has developed prioritised mitigation strategies, in the form of the Strategies to Mitigate Cyber Security Incidents, to help organisations protect themselves against various cyber threats. The most effective of these mitigation strategies are the Essential Eight.The Essential Eight Maturity Model, first published in June 2017 and updated regularly, supports the implementation of the Essential Eight. It is based on the ACSC's experience in producing cyber threat intelligence, responding to cyber security incidents, conducting penetration testing and assisting organisations to implement the Essential Eight.As the Essential Eight outlines a minimum set of preventative measures, organisations need to implement additional measures where it is warranted by their environment. Further, while the Essential Eight can help to mitigate the majority of cyber threats, it will not mitigate all cyber threats. As such, additional mitigation strategies and security controls need to be considered, including those from the Strategies to Mitigate Cyber Security Incidents and the Information Security Manual (ISM). Organisations should also consider implementing a cyber security maturity model to help them identify areas of strength and weakness in their existing security posture. This will allow organisations to track progress over time and make informed decisions about where further investment is needed. Additionally, it is important for organisations to have processes in place for responding quickly and effectively when a cyber incident does
