|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/ciscenter-for-internet-security-controls-version-8/
课程评论：没有评论
**课程名称：** CIS（互联网安全中心）针对 IT、OT 和 IoT 的控制措施 **课程概述：** 本课程将介绍互联网安全中心（CIS）及其核心使命：通过协作和创新，让人们、企业和政府的网络世界更加安全。CIS 是一个由社区驱动的非营利组织，成立于 2000 年 10 月。 课程将重点讲解 CIS 的关键控制措施，包括： 1. **企业资产的清点与控制：** 管理企业基础设施中所有物理、虚拟、远程以及云环境中的互联资产，以准确了解需要监控和保护的资产总数。 2. **软件资产的清点与控制：** 管理网络上的所有软件，确保只安装和运行授权软件，并能发现和阻止未经授权和不受管理的软件的安装或执行。 3. **数据保护：** 制定流程和技术控制措施，以识别、分类、安全处理、保留和处置数据。 4. **企业资产和软件的安全配置：** 建立和维护企业资产和软件的安全配置。 5. **账户管理：** 利用流程和工具，为用户账户（包括管理员账户）和服务账户在企业资产和软件上的授权和凭证分配进行管理。 6. **访问控制：** 利用流程和工具，为用户、管理员和系统账户在企业资产和软件上的访问凭证和权限进行创建、分配、管理和撤销。 **教学大纲：** （无）
What is CIS?CIS stands for The Center for Internet Security.It is a community-driven non profitable organization formed in Oct,2000.It makes the connected world a safer place for people, businesses, and governments through our core competencies of collaboration and innovation.Few CIS Controls1. Inventory and Control of Enterprise Assets - Manage all enterprise assets connected to the infrastructure physically, virtually, remotely, and those within cloud environments, to accurately know the totality of assets that need to be monitored and protected within the enterprise.2. Inventory and Control of Software Assets - Manage all software on the network so that only authorized software is installed and can execute, and that unauthorized and unmanaged software is found and prevented from installation or execution.3. Data Protection - Develop processes and technical controls to identify, classify, securely handle, retain, and dispose of data.4. Secure Configuration of Enterprise Assets & Software - Establish and maintain the secure configuration of enterprise assets and software.5. Account Management - Use processes and tools to assign and manage authorization to credentials for user accounts, including administrator accounts, as well as service accounts, to enterprise assets and software.6. Access Control - Use processes and tools to create, assign, manage, and revoke access credentials and privileges for user, administrator, and service accounts for enterprise assets and software.
