ÊÀ¼Í»¥ÁªOBÊÓѶ»ñTISAXÈÏÖ¤
¿ËÈÕ£¬Æ¾Ö¤ TISAX AL3 ÐÅÏ¢Çå¾²ºÍÊý¾Ý±£»¤ÒªÇó£¬ÊÀ¼Í»¥ÁªÔÚÖйú´ó½ÔËÓª Microsoft ÔÚÏß·þÎñµÄËùÓÐÊý¾ÝÖÐÐÄͨ¹ýÁË TISAX ÆÀ¹À¡£ÕâЩ TISAX ÈÏÖ¤µÄÊý¾ÝÖÐÐÄΪÊÀ¼Í»¥ÁªÔËÓªµÄ Microsoft Azure¡¢Microsoft Dynamics 365 ºÍ Microsoft Power Platform ÌṩÎïÀí»ù´¡ÉèÊ©¡£ÕâÒâζ×Å£¬ÊÀ¼Í»¥ÁªOBÊÓѶ»ñµÃÁËΪÆû³µÐÐÒµÌṩÇå¾²ÔÆ·þÎñµÄÖ÷Òª×ÊÖÊ£¬½«ÎªÆû³µÐÐÒµ¿Í»§Çå¾²ÉÏÔÆÓÃÔÆÌṩ¼áʵµÄÇå¾²ºÏ¹æ°ü¹Ü¡£
TISAX
TISAX£¨Trusted Information Security Assessment Exchange£¬¿ÉÐÅÐÅÏ¢Çå¾²ÆÀ¹À½»Á÷£©ÓÉÅ·ÖÞÆû³µ¹¤ÒµÇå¾²Êý¾Ý½»Á÷лᣨ ENX лᣩ´ú±íµÂ¹úÆû³µ¹¤ÒµÍŽá»á(Verband der Automobilindustrie, VDA)¾ÙÐÐÖÎÀí¡£TISAX ±»Å·ÖÞÆû³µ¹«Ë¾ÓÃÓÚΪÄÚ²¿·ÖÎö£¬¹©Ó¦ÉÌÆÀ¹ÀºÍÐÅÏ¢½»Á÷ÌṩͨÓõÄÐÅÏ¢Çå¾²ÆÀ¹À¡£
Ëæ×ÅÔÆÉÏÊý¾ÝµÄ¼¤Ôö£¬¸÷ÐÐÒµ¶ÔÐÅÏ¢Çå¾²Óú·¢¹Ø×¢¡£Ëæ×ÅÆû³µÐÐÒµÏòÊý×Ö»¯¡¢ÖÇÄÜ»¯¡¢½ÚÄÜ»¯Æ«ÏòµÄ¿ìËÙÉú³¤£¬Ïà¹ØÊÖÒÕÑз¢ºÍ·þÎñÀú³ÌÖеÄÊý¾ÝÇå¾²£¬Ò²³ÉΪÆû³µ¹©Ó¦Á´³§É̹Ø×¢µÄÖØÖÐÖ®ÖØ¡£»ñµÃTISAX AL3 ÐÅÏ¢Çå¾²ºÍÊý¾Ý±£»¤ÈÏÖ¤£¬Òâζ×Å£¬ÊÀ¼Í»¥ÁªOBÊÓѶÒÀ¸½¶àÄê¶ÔÇå¾²ºÏ¹æÔÆÔËÓªµÄÂÄÀú»ýÀÛ£¬Òѽ«¸ÃÄÜÁ¦ÑÓÕ¹µ½±ÊÖ±ÐÐÒµ³¡¾°ÖУ¬Äܹ»ÎªÆû³µÐÐÒµ¿Í»§Çå¾²ÉÏÔÆÓÃÔÆÌṩ¼áʵµÄºÏ¹æ°ü¹Ü£»Ëæןü¶àÐÐÒµ¿Í»§¶ÔÊý¾ÝÇå¾²ÐèÇóµÄÌáÉý£¬ÊÀ¼Í»¥ÁªOBÊÓѶδÀ´Ò²½«³ä·ÖÑéÕ¹ÔںϹæÔËÓª·½Ãæ»ýÀÛµÄÂÄÀúÄÜÁ¦£¬Îª¸ü¶à±ÊÖ±ÐÐÒµ¿Í»§µÄÇå¾²ÉÏÔƱ£¼Ý»¤º½¡£
×Ô2014ÄêÓÉÊÀ¼Í»¥ÁªÔËÓªµÄµÚÒ»¶ä¹ú¼Ê¹«ÓÐÔƺϹæÂäµØÖйú£¬ÊÀ¼Í»¥ÁªOBÊÓѶÔÚÊý¾ÝÇå¾²ºÏ¹æ·½ÃæµÄ°ü¹ÜÄÜÁ¦Ê¼ÖÕ×ßÔÚÐÐҵǰÏߣº
- ×Ô2014Äê»ñµÃÊ×Åú¿ÉÐÅÔÆÈÏÖ¤£¬ÊÀ¼Í»¥ÁªOBÊÓѶÖÁ½ñÒÑÀۼƻñµÃ11Ïî¿ÉÐÅÔÆÈÏÖ¤£»
- ³ÉΪÊ×Åúͨ¹ýÐÅϢϵͳÇ徲Ʒ¼¶±£»¤Èý¼¶ÆÀ²âµÄÆóÒµÖ®Ò»£¬ÖÜÈ«ÁýÕÖ IaaS£¬PaaS£¬SaaS ÔÆ·þÎñ£»
- Ò»Á¬¶àÄêͨ¹ý ISO/IEC 20000¡¢ISO/IEC 27001 ÈÏÖ¤£»ÔÚ2018ÄêÂÊÏÈͨ¹ýÓÐ×Å¡°ÔÆÒþ˽±£»¤ÈÏÖ¤¡±Ö®³ÆµÄ ISO/IEC 27018 ÈÏÖ¤£¬²¢Ò»Á¬6Äêͨ¹ý¸ÃÈÏÖ¤£¬Ò»Á¬ÎªÆóÒµÓû§ÌṩÇå¾²ºÏ¹æµÄÔËÓª°ü¹Ü£»
- Ò»Á¬4Äêͨ¹ýÓÉ×ÔÁ¦µÄµÚÈý·½Éó¼Æ»ú¹¹¾ÙÐÐµÄ SOC Éó¼Æ£¬»ñµÃ SOC1 Type 2 ±¨¸æ¡¢SOC2 Type 2 ±¨¸æºÍ SOC3 ±¨¸æ¡£ÕâÒ²Òâζ×Å£¬ÊÀ¼Í»¥ÁªOBÊÓѶ´Ó²úÆ·ÊÖÒÕ¡¢ÔËάÔËÓª¡¢Êý¾ÝÇå¾²¡¢Òþ˽Çå¾²¡¢Ö°Ô±ÖÎÀíµÈ¶àά¶È£¬ÖÜÈ«°ü¹Ü¿Í»§ÔÆÉÏÊý¾ÝÇå¾²ºÏ¹æ¡£
Êý¾ÝÊÇÐÂʱ´úµÄÄÜÔ´£¬ºÏ¹æÊÇÐÂʱ´úµÄÄÜÔ´ÊØÎÀ¡£ÊÀ¼Í»¥ÁªOBÊÓѶʼÖÕ½«¿Í»§Êý¾ÝÇ徲ʼÖÕÊÓΪ×îÌåÌùµÄÎÊÌâÖ®Ò»£¬²¢Ê¼ÖÕÖÂÁ¦ÓÚÔÚÇå¾²ÐÔ¡¢Òþ˽Óë¹Ü¿Ø¡¢ºÏ¹æÐÔºÍ͸Ã÷¶È·½Ãæ¼á³ÖÒµ½çÁìÏÈְ룬ÓþµÃÆðÄ¥Á·µÄÀÖ³Éʵ¼ù£¬ÎªÓû§ÌṩֵµÃÐÅÍеÄÇå¾²ºÏ¹æÔÆÔËÓª°ü¹Ü¡£
ÐÐÒµÏà¹Ø¿Í»§¿ÉÒԵǼENX ÃÅ»§ÅÌÎÊ TISAX ÆÀ¹ÀЧ¹û¡£
»á¼ûÊÀ¼Í»¥ÁªµÄ TISAX ÆÀ¹ÀЧ¹û£¬¿ÉÒÔͨ¹ýÈçÏÂÐÅÏ¢¾ÙÐÐÅÌÎÊ£º
Assessment ID: APWVC2-1
Assessment Level 3(AL3) scope ID: STPTNZ