xx信息系統(tǒng)安全風(fēng)險(xiǎn)分析與評估報(bào)告模板(公開)

1、說明文字說明文字：大致內(nèi)容如此，根據(jù)具體：大致內(nèi)容如此，根據(jù)具體情況增刪情況增刪第3頁共22頁目錄1評估工作概述............................................................................................................................31.1評估目標(biāo)................................

2、..............................................................................................31.2評估組織......................................................................................................................

3、........31.3評估對象..............................................................................................................................31.3.1業(yè)務(wù)職能與組織結(jié)構(gòu)...............................................................

4、................................31.3.2系統(tǒng)定級(jí)...................................................................................................................61.3.3物理環(huán)境.....................................................

5、..............................................................61.3.4網(wǎng)絡(luò)結(jié)構(gòu)...................................................................................................................91.3.5安全保密措施.....................

6、....................................................................................121.3.6重要XX部門、部位.............................................................................................132評估依據(jù)和標(biāo)準(zhǔn).................

7、.....................................................................................................133評估方案................................................................................................................

8、..................144資產(chǎn)識(shí)別..................................................................................................................................154.1資產(chǎn)重要性等級(jí)定義...................................................

9、.....................................................154.2資產(chǎn)分類............................................................................................................................164.2.1服務(wù)器情況列表....................

10、.................................................................................164.2.2交換機(jī)情況列表.....................................................................................................194.2.3用戶終端和XX單機(jī)........

11、.....................................................................................194.2.4特種設(shè)備.................................................................................................................204.2.5軟件平臺(tái)

12、.................................................................................................................204.2.6安全保密設(shè)備..............................................................................................

13、...........204.2.7應(yīng)用系統(tǒng)情況列表.................................................................................................284.2.8試運(yùn)行應(yīng)用系統(tǒng)情況列表...............................................................................

14、......295威脅識(shí)別..................................................................................................................................305.1威脅分類....................................................................

15、........................................................305.2威脅賦值............................................................................................................................316脆弱性識(shí)別.......................

16、.......................................................................................................336.1脆弱性識(shí)別內(nèi)容.........................................................................................................

17、.......336.2脆弱性賦值........................................................................................................................336.3脆弱性專向檢測.......................................................................

18、.........................................346.3.1病毒木馬專項(xiàng)檢查.................................................................................................346.3.2網(wǎng)絡(luò)掃描專項(xiàng)測試....................................................

19、.............................................347風(fēng)險(xiǎn)分析..................................................................................................................................448風(fēng)險(xiǎn)統(tǒng)計(jì)...............................

20、...................................................................................................489評估結(jié)論..................................................................................................................