30_Ситай_5.207-2

1.

Д5:;4@8@>64=85 A>>B65BAB68O :4:
A?>A>5 C?@46;5=8O 8=D>@<4ц8>==>9
557>?4A=>ABьN.
П>@O4>: 459AB68O 6 8=D>@<4ц8>==>9
557>?4A=>AB8.
С<Fа= А?<=а А?5>Eа=4D>в=а 5.207-2

2.

[ 02 ]
Ц9;P 8 7484G8 @45>BO
ЦелP р45отO:
ИAA;98>64BP ?@>F9AA D>@<4;874F88 B@95>64=89
8=D>@<4F8>==>9 597>?4A=>AB8 (ИБ) G9@97 @47@45>B:C 8
6=98@9=89 6=CB@9==8E 8>:C<9=B>6 (89:;4@8@>64=89) 8
>?@989;8BP ?@4:B8G9A:89 ?>@я8>: 899AB689 8;я
?>AB@>9=8я A8AB9<O ИБ 6 >@74=874F88.

3.

[ 03 ]
Ц9;P 8 7484G8 @45>BO
4A:@OBP ACI=>ABP
89:;4@8@>64=89 :4: <9B>8
C?@46;9=8S ИБ
И7CG8BP AB@C:BC@C 8 688O
8>:C<9=B>6, A>AB46;SRI8E
>A=>6C A8AB9<O ИБ.
@>4=4;878@>64BP ?>H47>6O9
?>@S8>: ?>AB@>9=8S
QDD9:B86=>9 A8AB9<O
8=D>@<4F8>==>9 597>?4A=>AB8.
!D>@<C;8@>64BP 6O6>8O >
7=4G9=88 8>:C<9=B8@>64==OE
?@>F98C: 6 C?@46;9=88 "Б.

4.

[ 04]
А>FG4?PABEFP F9@O
А>FGа?ь=>EFь
&ЕМЫ
ИAHBD@4Fия -
Р4EFGщее GиE?B
>?NG96B= 4>F<6 EB6D9@9AAB7B
5<;A9E4 < 7BEG84DEF64.
><59D4F4> < <AF<89AFB6,
E6O;4AAOE E GF9G>B= 84AAOE.
&Dе5B64Aия
'CD46?еAие ИБ
D97G?OFBDB6 (Ф%&ЭК,
$BE>B@A48;BD, 54A> $BE<<) <
@9:8GA4DB8AOE EF4A84DFB6
(ISO 27000)
A9 @B:9F 5OFP D9>F<6AO@ ("BF
E?GG4O > E?GG4N"), BAB FD95G9F
E<GF9@AB7B,
8B>G@9AF<DB64AAB7B CB8EB84.

5.

[ 05]
К?NK96O9 CBAOF<O
ИAфBD@4ц8BAA4я
5е7BC4EABEFь -
EBEFBOA<9 ;4щ<щёAABEF< <AHBD@4J<BAAB=
ED98O, B59EC9K<64Nщ99 >BAH<A89J<4?PABEFP,
J9?BEFABEFP , 8BEFGCABEFP
Де>?4D8DB64A8е
(6 >BAFе>EFе ИБ) 6AGFD9AAOO HBD@4?<;4J<O < 8B>G@9AF4?PAB9
CB8F69D:89A<9 FB7B, KFB 89OF9?PABEFP
BD74A<;4J<<, 9ё CDBJ9EE < E<EF9@O EBBF69FEF6GNF
GEF4AB6?9AAO@ FD95B64A<O@ (;4>BA4@,
EF4A84DF4@, 6AGFD9AA<@ CB?<F<>4@).
УCD46?еA8е ИБ A9CD9DO6AO= CDBJ9EE, A4CD46?9AAO=
A4 @<A<@<;4J<N D<E>B6, E6O;4AAOI E
<ECB?P;B64A<9@ <AHBD@4J<BAAOI
E<EF9@.

6.

[ 06]
Д9>?4D<DB64A<9 EBBF69FEF6<я: BF HBD@4?PABEF< > E<EF9@9
A4?B7<я E F9I.
D97G?<DB64A<9@:
!B89D:4A<9
"89>?4D4J<<" 6 И :
К4> CDB<;6B8<F9?P 89>?4D<DG9F
EBBF69FEF6<я CDB8G>J<<
F9IA<K9E>B@G D97?4@9AFG (TP
TC), F4> < BD74A<;4J<я 8B?:A4
89>?4D<DB64FP EBBF69FEF6<9
E6B9= 89яF9?PABEF< FD95B64A<я
И .
Н9 98<AO= 8B>G@9AF, 4 >B@C?9>E
6AGFD9AA<I ABD@4F<6AOI 4>FB6.
ꢂB?<F<><, <AEFDG>J<<,
D97?4@9AFO, CB?B:9A<я.
Ц9?P: !B;84FP 98<AB9 CD46B6B9
CB?9, EF4A84DF<;<DB64FP
89=EF6<я, ;4H<>E<DB64FP
BF69FEF69AABEFP.
9;G?PF4F:
!<EF9@4 GCD46?9A<я И
C9D9EF4ёF 5OFP 89>?4D4F<6AB=
(A4 5G@479) < EF4AB6<FEя
D45BK<@ <AEFG@9AFB@
GCD46?9A<я.

7.

[ 07]
ꢀ B>G@9AF4ц<BAA4яꢀBEAB64
Д>кG<е=FаFи>==ая
>E=>ва EиEFе<ы ИБ:
иеDаDEия
1. ꢀ 5M<9 (6A9LA<9) 8B>G@9AFO:
2.ꢀЧ4EFAO9 (6AGFD9AA<9) 8B>G@9AFO:
ꢃ4>BAO Ф (№152-Фꢃ,ꢀ№149-Фꢃ,ꢀ№187-Фꢃ).
КBAц9Cц<яꢀ<?<ꢀꢄB?<F<>4 ꢅБ BD74A<;4ц<<.
М9:8GA4DB8AO9 < A4ц<BA4?PAO9ꢀEF4A84DFOꢀ(ISO,
ꢂ !"O.
97?4@9AFO,ꢀCDBц98GDO,ꢀ<AEFDG>ц<<ꢀ(8?я
EBFDG8A<>B6, 48@<A<EFD4FBDB6).
"D95B64A<яꢀD97G?яFBDB6ꢀ(Ф!"ЭК,ꢀБ4A> BEE<<).
ꢄ?4AO @9DBCD<яF<=ꢀ< D947<DB64A<яꢀA4 <Aц989AFO.

8.

[ 08 ]
ꢀ 88ы 6=CB@9==8E 8>:C<9=B>6 8 8E =47=4G9=89
ꢀ B?иFи>аꢀИБ:
ꢀ 9@E>6=ы9 8>:C<9=B,ꢀCAB4=46;864щ89 F9;8,
?@8=F8?ыꢀ8ꢀ?>8E>8ы.
ꢁ 84ы в=GFр5==8х
4>кG<5=F>в Иꢁ 8 8х
=а7=ач5=85
5г?а@5AFыꢀиꢀиAEFDG>Fии:
К>=:@9B=ы9 ?@468;4 8;яꢀA>B@C8=8:>6 (@45>B4 A
?>GB>9,ꢀ?4@>;я<8,ꢀ84==ы<8).
ДB?6ABEFAы5ꢀиAEFDG>Fии:
ꢃ4:@9?;9=89ꢀ>5я74==>AB99 8 >B69BAB69==>AB8 6
>5;4AB8 ꢂꢁ (=4?@8<9@, 8;яꢀ48<8=8AB@4B>@4 A9B8).
ꢀ ?аAы:
П;4=ꢀ<9@>?@8яB89 ?> ꢂꢁ, ?;4= @9478@>64=8яꢀ=4
8=F889=Bы.
ꢀ FGёFыꢀиꢀ6GDAа?ы:
ꢄC@=4;ыꢀCG9B4ꢀA>5ыB89,ꢀ>BGёBыꢀ>ꢀ?@>6989==ыE
?@>69@:4E.

9.

[ 09 ]
%D46A<F9?PA4я F45?<F4: ꢂ5I<9 vs. Ч4EFAO9 8B>G@9AFO
КD<F9D<=
ꢂ5I<9 8B>G@9AFO
Ч4EFAO9 8B>G@9AFO
EFBGA<>
ꢅBEG84DEF6B, @9:8GA4DB8AO9
BFABH9A<я
%4@4 BD74A<;4F<я
%H9D4 89=EF6<=
ꢆE9 BD74A<;4F<< (BFD4E?<)
КBA>D9FA4я BD74A<;4F<я,
CB8D4;89?9A<9
%B89D:4A<9
ꢂ5I<9 FD95B64A<я ("GFB 89?4FP")
КBA>D9FAO9 CDBF98GDO (">4> 89?4FP")
152-Фꢇ, ISO, ꢅꢂ%&O, CD<>4;O Ф%&ЭК
AEFG>F<< CB C4DB?PAB= ;4I<F9,
D97@9AF D45BFO ꢃꢄA
ꢃD<@9DO

10.

[ 10]
П>@S4>: 459AB689: ?>G5<C
=5>5E>48< A8AB5<=O9 ?>4E>4?
ТиCиGA4я BHи5>4:
ПоDя4о>
45=EFв<=:
П>G5<Cꢁ=5>5E>48< A8AB5<=O9 ?>4E>4?
5H5Aи5:
"?>64@=O9" ?>4E>4 - 459AB68S
?>A;5 8=F845=B4
ꢁ =54@5=85 F8:;4 C?@46;5=8S
Иꢁ : >F5=:4 @8A:>6 ->
?;4=8@>64=85 -> 6=54@5=85 ->
:>=B@>;P -> C;CGH5=85.
BE?54EF6ия
E4BFиGAыE @5D:
EAB64 4?я
Fи>?4 -
?@>5;5<O 6 74I8B5,
=5QDD5:B86=>5 8A?>;P7>64=85
@5AC@A>6, =5A>5;R45=85
74:>=>6.
4>:C<5=B8@>64==O5
?@>F54C@O (45:;4@8@>64=85
?>4E>4>6).

11.

[ 11 ]
Ш47 1. ꢀ A4?<; D<E>B6 <
BCD989?9A<9 4>F<6B6
Ша7 1. А=а?87 @8A>>6
8 >?@989?9=89
а>B86>6
Цель: ꢂOя6<FP, KFB < BF K97B ;4M<M4FP
Де9EFв8я:
1.ꢀИA69AF4D<;4J<яꢀ<AHBD@4J<BAAOIꢀ4>F<6B6
(E9D69DO, 54;O 84AAOI, 8B>G@9AFO).
2.ꢀОJ9A>4ꢀ<IꢀJ9AABEF<ꢀ<ꢀ>D<F<KABEF<ꢀ8?я
5<;A9E4.
3. ꢂOя6?9A<9ꢀG7DB;ꢀ<ꢀGя;6<@BEF9=ꢀ(6A9LA<9
4F4><, BL<5>< C9DEBA4?4, E5B<).
4.ꢀОJ9A>4ꢀ69DBяFABEF<ꢀ<ꢀ6B;@B:AB7B
GM9D54 (H<A4AEB6B7B, D9CGF4J<BAAB7B).
Ре7GльFаF: Р4A:<DB64A<9ꢀC9D9K9APꢀD<E>B6
Иꢀ , A4 >BFBDOI 5G89F EHB>GE<DB64A4
E<EF9@4.

12.

[ 12 ]
Ш47 2. 4;D45BF>4 < GF69D:89A<9
CB?<F<>< ИБ
Ш47 2. Р4;@45>F>4 <
GF69@:89=<9
?>?<F<>< ИБ
Ц5?ь: !B;84FP BEAB6BCB?B74NM<=
8B>G@9AF, ;484NM<= 69>FBD
С>45@6а=и5 ?>?ити>и:
1. Ц9?< < CD<AJ<CO ИБ 6 BD74A<;4J<<.
2. 4ECD989?9A<9 DB?9= < BF69FEF69AABEF<
(DG>B6B8EF6B, 6?489?PJO 4>F<6B6, И" E?G:54).
3. 5M<9 CB8IB8O> >?4EE<H<>4J<<
<AHBD@4J<< < GCD46?9A<N 8BEFGCB@.
4. 5O;4F9?PEF6B DG>B6B8EF64 6O89?OFP
D9EGDEO A4 ИБ.
Ва6=>: B?<F<>4 GF69D:849FEO6OEL<@
DG>B6B8EF6B@, KFB 89@BAF<DG9F 64:ABEFP
F9@O.

13.

[ 13 ]
Ш47 3.ꢀК?4EE<H<>4J<Oꢀ<AHBD@4J<<ꢀ<
D97G?<DB64A<9 8BEFGC4
Ша7 3. К?аEEиHи>ация
иAHBD@ации и
D97G?иDB6аAи9
8BEFGCа
Це?ь: ꢀ CD989?<FP GDB6A<
>BAH<89AJ<4?PABEF< < CD46<?4 8BEFGC4 >
84AAO@.
Де=EF6<я:
1.ꢀСFDG>FGD<DB64FPꢀ<AHBD@4J<N
(H<A4AEB64O, C9DEBA4?PAO9 84AAO9,
>B@@9DK9E>4O F4=A4).
2. ꢀ D<E6B<FP @9F>< >BAH<89AJ<4?PABEF<
(BF>DOF4O, 8?O E?G:95AB7B CB?P;B64A<O,
EFDB7B >BAH<89AJ<4?PA4O).
3.ꢀУEF4AB6<FP "CD<AJ<C @<A<@4?PAOI
CD<6<?97<=": 8BEFGC CD98BEF46?O9FEO
FB?P>B 6 B5N9@9, A9B5IB8<@B@ 8?O D45BFO.
4. ꢀ C<E4FP CDBJ98GDO ;4CDBE4,
CD98BEF46?9A<O < ;4>DOF<O 8BEFGC4.
Ош<5>4:ꢀИ;?<LA99ꢀ;4E9>D9K<64A<9,
>BFBDB9 @9L49F 5<;A9E-CDBJ9EE4@.

14.

[ 14]
Ш47 4. 4;D45BF>4 >BA>D9FAOE D97?4@9AFB6
< <AEFDG>F<=
Ш47 4. Р47D45>F:4
:>=:DеF=ыE
Dе7;4<е=F>6 8
8=EFDG:F89
Це?P: ꢂ9D969EF< CB?<F<>G 6 >BA>D9FAO9
<AEFDG>F<< 8?я >4:8B7B EBFDG8A<>4.
ПD<@еDO Dе7?а@еAтB6:
1. Д?я 6E9EEBFDG8A<>B6: 45BF4 E
Q?9>FDBAAB= CBGFB=, CD46<?4 EB;84A<я
C4DB?9=, 89=EF6<я CD< B5A4DG:9A<<
<AF<89AF4.
2. Д?я 48@<A<EFD4FBDB6:ꢃ5E?G:<64A<9
E9F<, D947<DB64A<9 A4 4F4><, GCD46?9A<9
CD464@< 8BEFGC4.
3. ꢂB A4CD46?9A<я@: 4M<F4 BF6<DGEB6,
D45BF4 EB EN9@AO@< ABE<F9?я@<,
G84?9AA4я D45BF4.
К?юGе6B= CD<AF<C: AEFDG>F<< 8B?:AO
5OFP CBAяFAO@<, >BA>D9FAO@< <
8BEFGCAO@<.

15.

[ 15 ]
Ш47 5. ВA98D9A<9 F9IA<K9E><I @9D ;4M<FO
Ша7 5. В=98D9=89
F9х=8ч9Eк8х <9D
7ащ8Fы
Ц5?ь: B8>D9C<FP BD74A<;4J<BAAO9 @9DO
F9IA<K9E><@< D9L9A<S@<.
НаCDа6?5Aия (Aа BEAB65 D57?а@5AFB6):
1. !9F964S 59;BC4EABEFP:М9:E9F96O9
Q>D4AO (5D4A8@4GQDO), E<EF9@O
B5A4DG:9A<S 6FBD:9A<= (! В).
2. З4M<F4 >BA9KAOI FBK9>:АAF<6<DGEAB9
, L<HDB64A<9 8<E>B6.
3. #CD46?9A<9 8BEFGCB@:!<EF9@O
4GF9AF<H<>4J<< (86GIH4>FBDA4S), ED98EF64
>BAFDB?S CD<6<?97<=.
4. 9;9D6AB9 >BC<DB64A<9:
А6FB@4F<;<DB64AAO9 E<EF9@O EB;84A<S
5Q>4CB6.
Ва6AB: "9IA<K9E><9 @9DO 6A98DSRFES A4
BEAB69 BJ9A9AAOI D<E>B6 < GF69D:89AAOI
D97?4@9AFB6.

16.

[ 16 ]
(47 6. ꢀ 5GK9A<9 < CB6OL9A<9
BE698B@?9AABEF< C9DEBA4?4
Ш47 6. О5GG9Aи9 и
CB6ыH9Aи9
BE698B@?9AABEFи
C9DEBA4?4
ПDB5?9@4: '9?B69K9E><= H4>FBD — B8A4 <;
7?46AOIꢀCD<K<Aꢀ<AJ<89AFB6ꢀИꢃ.
Ц9?P CDB7D4@@O B5уч9Aия: %89?4FP
EBFDG8A<>B6ꢀA9ꢀ«E?45O@ꢀ;69AB@»,ꢀ4ꢀC9D6O@
DG59:B@ B5BDBAO.
ФBD@O:
1. ꢂ6B8AO=ꢀ<AEFDG>F4:ꢀ8?яꢀAB6OI
EBFDG8A<>B6.
2.ꢀ$97G?яDAO9ꢀFD9A<A7<ꢀ(H<L<A7,
EBJ<4?PA4яꢀ<A:9A9D<я).
3. $4EEO?><, C?4>4FO, 6AGFD9AA<9 F9EFO.
СB89D:4Aи9: ꢀ 9ꢀFB?P>Bꢀ«KFBꢀA9?P;я»,ꢀABꢀ<
«CBK9@GꢀQFBꢀ64:AB»ꢀ<ꢀ«>4>ꢀCD46<?PAB».

17.

[ 17 ]
Ш47 7. МBA<FBD<A7, 4G8<F < >BAFDB?P
Ша7 7. М>=иF>ри=7,
аG8иF и >>=Fр>?ь
Ц9?P: 59EC9ч<FP D45BFBECBEB5ABEFP
E<EF9@O < B5A4DG:<64FP BF>?BA9A<O.
МBA<FBр<A7 6 р9а?PAB@ 6р9@9A<: АA4?<;
:GDA4?B6 EB5OF<= (?B7B6), E9F96B7B
FD4H<>4, ED454FO64A<= ED98EF6 ;4щ<FO.
Р97G?ярAO= аG8<F:
1. DB69D>4 EB5?N89A<O D97?4@9AFB6
(6O5BDBчAO9 CDB69D>< D45Bч<I @9EF).
2. Т9EF<DB64A<9 A4 CDBA<>AB69A<9 (pentest)
8?O CB<E>4 GO;6<@BEF9=.
3. АG8<F EBBF69FEF6<O FD95B64A<O@
EF4A84DFB6 < ;4>BAB6.
ДB>G@9AF<рB6аA<9: ВE9 CDB69D>< < <I
D9;G?PF4FO 8B?:AO H<>E<DB64FPEO.

18.

[ 18]
(47 8. УCD46?9A<9 <AF<89AF4@< И
Ша7 8. У?@а6?9Aи9
иAци89Aта@и ИБ
ИAFи89Aт ИБ — ?R5B9 A4DGH9A<9 CB?<F<>
59;BC4EABEF< <?< GEC9HA4S 4F4>4.
Ц9?P: М<A<@<;<DB64FP GI9D5 <
6BEEF4AB6<FP ABD@4?PAGRD45BFG.
К?RG96O9 Q?9@9AтO:
1. 97?4@9AF D947<DB64A<S:'9F><= C?4A
89=EF6<= — BF B5A4DG:9A<S 8B ?<>6<84F<<
CBE?98EF6<=.
2. ꢃF69FEF69AA4S 7DGCC4 (CERT/CSIRT):КFB <
GFB 89?49F.
3. !<EF9@4 BCB69I9A<S:К4> < >B7B
<AHBD@<DB64FP.
4. ꢂA4?<; C9D6BCD<G<AO: BG9@GQFB
CDB<;BH?B?К4> CD98BF6D4F<FP
CB6FBD9A<9?
ИтB7: К4:8O= <AF<89AF — GDB> 8?S
G?GGH9A<S E<EF9@O.

19.

[ 19]
Ш47 9. ꢀ 9D9E@BFD < CBEFBSAAB9 G?GKL9A<9
ПDиAциC: !<EF9@4ꢀИꢂ A9ꢀEF4F<KA4.ꢀУ7DB;O
< 5<;A9E-CDBJ9EEO @9ASRFES.
Шаг 9. ПеDеE@BFD и
CBEFBяAABе
G?GGHеAие
ТDи779Dы 8?я C9D9E@BFDа:
1. 97G?SDAB (A9 D9:9 D4;4 6 7B8).
2. ꢀ BE?9 E9DP9;AB7B <AJ<89AF4.
3. ꢀ D< <;@9A9A<< ;4>BAB84F9?PEF64 <?<
6A98D9A<< AB6OI F9IAB?B7<=.
4. ꢀ D< D9BD74A<;4J<< 5<;A9E4.
ЧFB C9D9E@аFDи6а9FEя: ꢀ >FG4?PABEFP
CB?<F<>, QHH9>F<6ABEFP @9D,
D4ECD989?9A<9 D<E>B6, D9;G?PF4FO 4G8<FB6.

20.

[ 20 ]
Ш47 10. ꢀ 59EC9K9A<9 EBBF69FEF6<S
D97G?SFBDAO@ FD95B64A<S@
Ш47 10. О5еECечеAие
EBBF6еFEF6ия
Dе7G?яFBDAы@
FDе5B64Aия@
Цель: ꢀ B8F69D8<FP 6A9LA<@ CDB69DSRM<@
(Ф!"ЭК, BE>B@A48;BD), KFB E<EF9@4 ꢃБ
EBBF69FEF6G9F B5S;4F9?PAO@ ABD@4@.
Де9EFв8я:
1. ꢃ89AF<H<>4J<S CD<@9A<@OI FD95B64A<=
(A4CD<@9D, ꢀ D<>4;OꢀФ!"ЭКꢀ№21/17/152-Фꢂ).
2. !BCBEF46?9A<9 6AGFD9AA<I 8B>G@9AFB6 <
@9D E QF<@< FD95B64A<S@< (EB;84A<9
@4FD<JO EBBF69FEF6<S).
3. ꢀ B87BFB6>4 8B>4;4F9?PAB= 54;O:
CDBFB>B?O CDB69DB>, :GDA4?O, CD<>4;O,
BFK9FO.
Ре7GльFаF: ГBFB6ABEFPꢀ>ꢀCDB69D>9,
EA<:9A<9 D<E>4 LFD4HB6 < D9CGF4J<BAAOI
CBF9DP.

21.

[ 21 ]
!6я7P QB4?>6:>B 89:;4@4F88 :
?@4:B8:9
Свя7L Mта?>в: >т
45>?а@ац88 > ?@а>т8>5
>;8B8:4 И
(89:;4@8@>64=89)
97;4<9=BO 8 8=AB@C:F88
(89B4;874F8я B@95>64=89)
"9E=8G9A:89 <9@O 8 >5CG9=89
(@94;874F8я =4 ?@4:B8:9)
М>=8B>@8=7, 4C88B, 8=F889=BO
(?@>69@:4 QDD9:B86=>AB8)
ꢂ=4;87 8 C;CGH9=89

22.

[ 22 ]
КBAFDB?PAO= 6BCDBE 1.
ЧB> O6;O9BAO >A=>6=>9 ц9;ьN
6=CB@9==97> «89:;4@8@>64=8O
A>>B69BAB68O» 6 A8AB9<9 C?@46;9=8O
8=D>@<4ц8>==>9 597>?4A=>ABьN
>@74=874ц88?
1. ПB?GK9A<9
>D4E<6B7B
E9DF<H<>4F4 8?O
D4;@9щ9A<O A4 E4=F9.
2. ФBD@4?PAB9
6OCB?A9A<9
FD95B64A<= BF89?4
>48DB6.
3.ФBD@4?<;4J<O,
8B>G@9AF<DB64A<9 <
6AGFD9AA99 CB8F69D:89A<9
FB7B, KFB 89OF9?PABEFP <
CDBJ9EEO BD74A<;4J<<
EBBF69FEF6GNF
GEF4AB6?9AAO@ FD95B64A<O@
ИБ.
4. ПB?A4O ;4@
F9IA<K9E><I
ED98EF6 ;4щ<
<AHBD@4J<<.

23.

[ 23 ]
КBAFDB?PAO= 6BCDBE 1.
ЧB> O6;O9BAO >A=>6=>9 ц9;PN
6=CB@9==97> «89:;4@8@>64=8O
A>>B69BAB68O» 6 A8AB9<9 C?@46;9=8O
8=D>@<4ц8>==>9 597>?4A=>ABPN
>@74=874ц88?
П@468;P=O9 >B69B
3.ФBD@4?<;4F<O,
8B>G@9AF<DB64A<9 <
6AGFD9AA99 CB8F69D:89A<9
FB7B, GFB 89OF9?PABEFP <
CDBF9EEO BD74A<;4F<<
EBBF69FEF6GNF
GEF4AB6?9AAO@ FD95B64A<O@
ИБ.

24.

[ 24 ]
КBAFDB?PAO= 6BCDBE 2.
К4:>9 87 ?5@5G8A;5==ыE 4>:C<5=B>6
я6;я5BAя ЧА%&ꢁ Ыꢁ (6=CB@5==8<)
4>:C<5=B>< ?> 8=D>@<4F8>==>9
557>?4A=>AB8?
1. Ф989Dа?PAO= ;а>BA
№152-Ф «О
C9DEBAа?PAO E
8аAAOE».
2. М9:8GAаDB8AO=
EFаA8аDF ISO/IEC
27001.
3. AEFDG>F<S 8?S
EBFDG8A<>B6 CB CDа6<?а@
<ECB?P;B6аA<S Q?9>FDBAAB=
CBGFO < EB;8аA<R Aа89:AOE
CаDB?9=.
4. Т9EA<G9E><
D97?а@9AF
Та@B:9AAB7B
EBR;а.

25.

[ 25 ]
КBAFDB?PAO= 6BCDBE 2.
К4:>9 87 ?5@5G8A;5==OE 4>:C<5=B>6
я6;я5BAя ЧА%&ꢁ Ыꢁ (6=CB@5==8<)
4>:C<5=B>< ?> 8=D>@<4F8>==>9
557>?4A=>AB8?
П@468;P=O9 >B65B
3.ИAEFDG>F<S 8?S
EBFDG8A<>B6 CB CDа6<?а@
<ECB?P;B6аA<S Q?9>FDBAAB=
CBGFO < EB;8аA<R Aа89:AOE
CаDB?9=.

26.

[ 26 ]
КBAFDB?PAO= 6BCDBE 3.
Ка:>9 Hа7 6 ?>@я8:9 ?>AB@>9=8я A8AB9<O
ИБ я6;я9BAя ?9@68G=O< 8
DC=8а<9=Bа;P=O< 8;я >?@989;9=8я
8а;P=99H8E 899AB689 8 7аB@аB?
1. З4>GC>4 E4@B7B
8BDB7B7B
4AF<6<DGEAB7B
CDB7D4@@AB7B
B59EC9K9A<я.
3.Н9@98?9AAB9 B5GK9A<9 6E9I 4. УEF4AB6>4
2. ПDB6989A<9
EBFDG8A<>B6 BEAB64@
4A4?<;4 D<E>B6
6<89B>4@9D 6
>D<CFB7D4H<<.
<AHBD@4J<BAAB=
E9D69DAB= >B
59;BC4EABEF< <
<89AF<H<>4J<я
>D<F<K9E>< 64:AOI
4>F<6B6.

27.

[ 27 ]
К>=B@>;P=O9 6>?@>A 3.
Ка:>9 Hа7 6 ?>@я8:9 ?>AB@>9=8я A8AB9<O
ИБ я6;я9BAя ?9@68G=O< 8
DC=8а<9=Bа;P=O< 8;я >?@989;9=8я
8а;P=99H8E 899AB689 8 7аB@аB?
2. П@>6545=85
4=4;874 @8A:>6
8=D>@<4F8>==>9
557>?4A=>AB8 8
845=B8D8:4F8я
:@8B8G5A:8 646=OE
4:B86>6.
П@а68;P=O9 >B69B

28.

[ 28 ]
ОA=>6=O9 6O6>8O
Д9:;4@8@>64=89 6 ИБ — QB> =9 @47>64S ?@>F98C@4, 4 A8AB9<=O9
?@>F9AA 8>:C<9=B8@>64=8S ?>8E>8>6, ?>;8B8: 8 ?@>F98C@,
>59A?9G864Rщ89 ?9@96>8 B@95>64=89 6 ?@4:B8G9A:CR ?;>A:>ABP 8
D>@<8@CRщ89 >A=>6C 8;S C?@46;9=8S.
Д>:C<9=B4F8>==4S 5474 (?>;8B8:8, @97;4<9=BO, 8=AB@C:F88) 6OABC?49B
«?>76>=>G=8:><» A8AB9<O ИБ, A6S7O64S AB@4B978G9A:89 F9;8 A
:>=:@9B=O<8 899AB68S<8 A>B@C8=8:>6 8 B9E=8G9A:8<8 <9@4<8.

29.

[ 29 ]
Ос=>в=ы5 выв>4ы
ЭHH9>F<6AO= CBDS8B> 89=EF6<= CB CBEFDB9A<R E<EF9@O И 8B?:9A
ABE<FP J<>?<K9E><= < D<E>-BD<9AF<DB64AAO= I4D4>F9D. ꢃA A4K<A49FES
E 4A4?<;4 D<E>B6 < ;4>4AK<649FES CBEFBSAAO@ G?GKL9A<9@ A4 BEAB69
@BA<FBD<A74 < 4G8<F4.
К?RK > GEC9IG — <AF97D4J<S FD9I >B@CBA9AFB6: BD74A<;4J<BAAOI @9D
(8B>G@9AFO), F9IA<K9E><I ED98EF6 < K9?B69K9E>B7B H4>FBD4 (B5GK9A<9).
ꢂD9A95D9:9A<9 ?R5O@ <; A<I EB;849F >D<F<K9E>GR GS;6<@BEFP.
A98D9A<9 E<EF9@O И , BEAB64AAB= A4 8B>G@9AF<DB64AAOI CDBJ98GD4I
(89>?4D<DB64A<< CB8IB8B6), CB;6B?S9F BD74A<;4J<< C9D9=F< BF
D94>F<6AB= (?<>6<84J<S CBE?98EF6<=) > CDB4>F<6AB= (CD98GCD9:89A<9
G7DB;) @B89?< ;4M<FO <AHBD@4J<<, KFB 6 8B?7BEDBKAB= C9DEC9>F<69
Q>BAB@<F D9EGDEO < ;4M<M49F D9CGF4J<R.

30.

[ 30 ]
ИA?>;ь7>64==4O ;8B9@4BC@4
1. И=AB@C:F88 ?> 8=D>@<4F8>==>9 597>?4A=>AB8 // SearchInform. – 2020. – 9 8N=O. – URL:
https://searchinform.ru/informatsionnaya-bezopasnost/osnovy-ib/dokumenty-poinformatsionnoj-bezopasnosti/instruktsii-po-informatsionnoj-bezopasnosti/ .
2. 9:;4@4F8O > A>>B69BAB688 &$ &% / АЭ% =4 :=878 8 ?9G4B=CN ?@>8C:F8N 8;O 89B99 //
RC Test. – URL: https://www.rctest.ru/sertifikaciya-produkcii/dlya-detey-i-podrostkov/knigi-ipechatnaya-produktsiya-dlya-detey/deklaratsiya-o-sootvetstvii-tr-eaes-tr-ts-na-knigi-ipechatnuyu-produktsiyu-dlya-detey/ .
3. 10 H47>6 : 8=D>@<4F8>==>9 597>?4A=>AB8 // ITGLOBAL.COM. – 2019. – 23 >:B. (О5=>6;9=>:
28 <4O 2025). – URL: https://itglobal.com/ru-ru/company/blog/10-steps-cybersecurity/ .
4. К=878 – A9@B8D8:4B A>>B69BAB68O B@95>64=8O< 597>?4A=>AB8 // OfSert. – URL:
https://ofsert.ru/articles/810/ .

31.

[ 31 ]
ИECB?P;B64AA4O ?<F9D4FGD4
5. КBCF9?B6 А. К4> CBEFDB<FP J<HDB6GN >D9CBEFP. Д9EOFP L47B6 > A489:AB= E<EF9@9
<AHBD@4J<BAAB= 59;BC4EABEF< // koptelov.info. – URL:
https://koptelov.info/publikatsii/informatsionnoj-bezopasnosti/ .
6. D46<?4 <AHBD@4J<BAAB= 59;BC4EABEF<: D97?4@9AF ... // StaffCop. – URL:
https://www.staffcop.ru/blog/reglament-informatsionnoy-bezopasnosti/ .
7. ИAHBD@4J<BAA4O 59;BC4EABEFP < F9IAB?B7<< ;4M<FO <AHBD@4J<< // ProductStar. – 2025.
– 24 OA6. – URL: https://productstar.ru/blog/informaczionnaya-bezopasnost-princzipy-metody-itekhnologii .
8. EAB6AO9 8B>G@9AFO CB <AHBD@4J<BAAB= 59;BC4EABEF< // Falcongaze. – URL:
https://falcongaze.com/ru/pressroom/publications/dokumenty-po-ib/dokumenty-poinformatsionnoj-bezopasnosti.html .