INFORMATIEBEVEILIGIN
G & RECHT
Boek: Basiskennis informatiebeveiliging
ISO 27001
, Inhoud
H1 introductie..............................................................................................2
H2 Case Spring Books..................................................................................2
H3 Termen en definities...............................................................................3
3.1 Definities.............................................................................................3
3.3 Fundamentele principes binnen informatiebeveiliging.......................5
3.4 Vertrouwelijkheid (exclusiviteit)..........................................................5
3.5 Integriteit............................................................................................5
3.6 Beschikbaarheid..................................................................................6
3.7 Parkerian Hexad..................................................................................6
3.8 Risico’s................................................................................................6
3.10 kwetsbaarheid..................................................................................6
3.11 Blootstelling......................................................................................6
3.12 Tegenmaatregelen of bescherming...................................................7
3.13 Beoordelen van veiligheidsrisico’s....................................................7
3.15 Maatregelen om risico’s te verminderen...........................................7
3.16 Soorten dreigingen...........................................................................8
3.17 Soorten schade.................................................................................8
3.18 Soorten risico strategieën.................................................................8
H4 Context van de organisatie.....................................................................9
4.1 Opzetten van een ISMS.......................................................................9
4.4 Vaststellen van de scope van het ISMS...............................................9
4.5 PDCA Cyclus........................................................................................9
4.6 Overige aandachtspunten.................................................................10
4.7 Informatie.........................................................................................10
4.8 Informatie management...................................................................11
4.9 Operationele processen en informatie..............................................11
Pavel Spuijbroek Avans Hogeschool
G & RECHT
Boek: Basiskennis informatiebeveiliging
ISO 27001
, Inhoud
H1 introductie..............................................................................................2
H2 Case Spring Books..................................................................................2
H3 Termen en definities...............................................................................3
3.1 Definities.............................................................................................3
3.3 Fundamentele principes binnen informatiebeveiliging.......................5
3.4 Vertrouwelijkheid (exclusiviteit)..........................................................5
3.5 Integriteit............................................................................................5
3.6 Beschikbaarheid..................................................................................6
3.7 Parkerian Hexad..................................................................................6
3.8 Risico’s................................................................................................6
3.10 kwetsbaarheid..................................................................................6
3.11 Blootstelling......................................................................................6
3.12 Tegenmaatregelen of bescherming...................................................7
3.13 Beoordelen van veiligheidsrisico’s....................................................7
3.15 Maatregelen om risico’s te verminderen...........................................7
3.16 Soorten dreigingen...........................................................................8
3.17 Soorten schade.................................................................................8
3.18 Soorten risico strategieën.................................................................8
H4 Context van de organisatie.....................................................................9
4.1 Opzetten van een ISMS.......................................................................9
4.4 Vaststellen van de scope van het ISMS...............................................9
4.5 PDCA Cyclus........................................................................................9
4.6 Overige aandachtspunten.................................................................10
4.7 Informatie.........................................................................................10
4.8 Informatie management...................................................................11
4.9 Operationele processen en informatie..............................................11
Pavel Spuijbroek Avans Hogeschool
