It. · G'11'U~ 7 fl11fl1'\Jfl:l.J , fl11 b -LJ'1'1.:i L . 8 , , . ~ ~ ' 'U .1"""""'1 ~ .1..~ \I \I...

$: It. · G'11'U~ 7 fl11fl1'\Jfl:l.J , fl11 b -LJ'1'1.:i L . 8 , , . ~ ~ ' 'U .1"""""'1 ~ .1..~ \I \I • I " 'V$
. a G. 8. 256~ '3;'U~1~1?~ '!?

{

Yl .... :;.;; .. B·····n· .. rr ..... 25 G o.I ~ d I U1 "SU TUYI ............................. .

n<i1 ....... !.Zt1.P.~

iii1u11eupp flcilJ.:i1mV1A b 'U 1~~6'l116'l'UbV1Pl .:i1'UPJ'U6AellJili1b1?1el{: .... ~16'l <9><9>b 1 vi1. l!>b'lll!>ct: ~ (Y1 It. I ~·~~ ........................................................................................... ~ ............... ~~·~·"·'"'"""'~ ......... ~~~·~·~~'""~~·~ ........................................ .. b~eJ-:J ....... ~.~.~.~~·~·~·~·~·~·~·~·:0..~.~1.~~1.~.'.':J.~.~.~.~.~.~.~.~~.?..~.~.:t:J~1.~.0..~.~J.0.~.~.~.?..~~~~.~~~·~·~·~:0.'.~.~~~.~.~~.~.~~Y.).~ .................. ..

b 1.:J~CJ1'\J1~11"1J1~

... b 1Elti

1?11lJ~1~11"1Jfl')~~ fl1n1Vl'W~V!~ fl bflru'1 bb~~1i51 'Ufl11r11q~1111lJV11.:iB b~ flV11el'W fl~ mA-r~

~. 131. l!>ct:ct~ n1V1'U~ 1 ~V1tl1cM1'U"Uel.:i-r~(;)el.:i~~r11'U1CJ'U1 CJ bb~~1~ bu CJ'U°LJl)u~~1'UA11lJ°LJ~el~.ti'EJ1 'U1~'\J'U

bVIA fo fa~G'l116'l'Ub Vl\31 b ~el 1 ~1~'\J'UG'l116'l'Ub VIPlb U'U 1 °LJel ~1-:J b'VllJ1~6'llJ iJoJ1~~V16il1~ iif111lJ~'Uf1.:J°LJ~el~JlCJbb~~ ~1m1'1~1b'W'U.:i1u 1~el~1.:i~m ~el.:i11lJ~.:i tlel.:inuuqjV11~m'1 bn~~'U'11flm11i.:i1'U1~'\J'UbviA1 'U fa~G'l116'l'Ub viPJ

11..1~fl~ru~ffiifofl{;)el.:i \J

~.:it!'U PJ'U6 f1ellJ'W1 bl?l el{b tl'UV!U'HN1'U~el ~il1CJ1~ fl1'Hl1 n'U~ bb~"Uel.:J flcilJ.:J1'U b Vlf1b'U1~ ~ ~ ~ ~ ,

~11~'Ub Vl\31 zj.:i-r'U~~"IJel'U~ bb~~1'Um11 ~'U~m11~'\J'U~'Ub VIPJL!'U 1~~1 b u'Um1~~r11 ""' 1CJ'U1 CJ bb~ ~ bb 'U1oJl)u~1 'U

m1-rfl~1m1lJ~'Uf1.:J°LJ~el~JlCJ~1'U~11~m VIPJ11.:ivm1'\J1m1"1J1~" b ~el 1 ~m11 i.:i1'U1~'\J'U~11~'U·bVIP1"1lel·.:i 1 H\1W1'\J1~11"1J1~iim1lJ°LJ~el~.ti'CJ bb~~~el~f1~el.:J1?11lJ'Vl~ fl fl!JVlmCJ ~.:if111oJwmPJ1i'W1CJ'U1mb~~bb 'U1oJl)llii

1 'Wfl11-rfl~1m1lJ~'Uf1.:J°LJ~el~JlCJ~1'UG'l116'l'Ub VIPJ 11.:ivm1'\J1~11"1J1~ f11'\J~lJm1~1b 'W'W m11~ I ~b~CJ1oLJel.:Jtl'U 1~'\J'U~116'l'UbVIP1"1Jel.:J b Hl"ICJ1'\J1m1"1J1~

~.:i b'1 CJ um b ~el 1oJ1~'W'111ru1oJ1~ fl1PJ1 i'U LCJ'U1CJ bb~ ~ bb 'U1oJl)u~1 'W fl11-r fl~1m1lJ~'W A . .:i

°LJ~el~JlCJ~1'UG'l116'l'Ub Vl\31 b i.:JYW1'\J1~11"1J1~ '1~btl'U~1~f1ru '

L~tl'1J ~elTU'Ji:Jn1f

:LyjuL'l.h~n1~1trhA··oY\~M ~ ~<:"\.J.,c;f-.Jf.~ \ ~ '\4\t,,i ~~ "!\"''"'"' '\"'\.) -J~ \A ('U1CJi11~1?1 A11-rm~b'1~qJ) c.. ~ ·""6'"1,,..~\116') ~~i»-.@li1"'.i:'V'\lo\"(lo< 1X1V1u1flcilJ.:i1'UbVlf11'Wfa~G'l116'l'UbV1Pl ,~~''0~1 ' \~Y\.\'l.f'I\.\ '\An ~t~ C.61'1').0'\\J ~·.1t'dll\J

-'\-,\'6'M"'"""'~'""'"~ ,!,""" c; L

.... ,1.\1\~ ~()\l'o~

~v ~~ .. ~°'

,.

/

t11~n1fl'i 1.:ir.1£11u1~11°t11~ L~a.:i 'W 1vu1mb'1~bb 'U1'\Jl)u1i1 'Wm1-rn~1fl11~~'Ufl.:J'\J'1a~.tlt1~1'U?111?1'Ub 'VIP! 11.:ivrn1u1'111'1l1n

b ~a 1'IXn11i;i1bij'Un111~ 1 ~a 1~uu6'1116'1'\.J b 'Vl Pih .:ivrn 1u1'111'1l1 n bu 'W1tJa~1.:1b'VI~1 ~ ?l~ii tJ1~~V16m'l"l iifl11~~'Wfl.:J'\J'1a~.ti't1bb'1~?11mwi;i1Lu'U.:i1'W1~a~1.:i~ab~a.:i 11~~.:itla.:in'UiJ~vr1~m"ilG'i.:i~rn vh 1 iX1~uu?111?1m'VlP11~?11m1{1i;i1L 'U'U.:11'\.J~a 1 tJ1~'11nnv~nm~~1mfl~a~1t1~1.:i 1 zj.:im"ilG'i.:ii:-mvh 1 'IXLn~ fl11~ b~ tl'Vl1 ti~ 'El1~UU6'1116'l'U b 'VIP! 11.:l'l"l tl1U1'111'1l1 n bb'1 ~ b U'W fl11~ ~ ~~1~'1"l1~11'1l'l1 ~~~11~? ti m1m~v11

fl11~~~LMv1nufla~'W1L~a{ 'l"l.Pl. 2560 Lb'1~n~vr~1t1~'U 1 ~LMt.11-Ua.:i h.:i'l"lt11u1m1'1lin~.:ib~'U?1~fl11 tl1'Vl'U~'U LtlU1tJ bb'1 ~ bb 'U1Ulj~1 'Um1-rn~1fl11~~'Ufl.:JU'1a~.n tl~1'U6'1116'l'Ub 'VIP! 1~ viii'~ ~U1~6'l.:Jfl ~.:i~a 1 ud

1. b ~a 1 'IX Ln ~ fl11~ b zja~'U bb'1~iifl11~'\J '1 a ~.tlt.11 'W m11i.:11'\.J1~u u ?111?1'\.J b 'Vl Pl vr~a bfl ~a~ 1 v fla~'W1b~'El'~6lla.:i h.:i'l"lt11u1'111'1l1n v111 iXi;i1L 'W'W.:11'\.J 1~a~1.:i'\J'1a~.tlt1 bb'1~~m ~a.:i

2. L ~mi:.J v bb 'l"l1'1'IXL~1vr-W1~'Vlm~~u1'W11.:i'l"lt11u1'111'1lim~-ru'Vl11u Lb'1~natJl)i.J~m~'W 1t1u1v a ~1.:i bfl~.:Jfl-r~

3. b ~a n1vr'U~~1~1~1'U bb 'U1'Vl1.:JU fi,j~ bb'1~15tJ fi,j~ 1 '\X~u~vr11 b ~ 1vru1~ ~ ~ bb'11~uu bb'1 ~ d.I d.J d..J \f \f \f

~flflMnti'Ua n~tJl)i.J~.:i1'U1 iXnu h.:i'l"lt11u1'111'1l1n ~wvr-U nii.:ifl11~611ri' ~"lla.:i m1-rn~1 m1~~'U fl.:i '\J'1a~.tlv1 'W m11 i.:i1'U1~uu?11~6'l'U b 'V!Pl"lla.:ia.:il°l m1 'Um1i;i1 b U'U.:J1'Ubb'1~'\Jl)i.J~~1~a ~1.:i bfl~ .:ifl-r~ fa ti"il~ii m1V1uV11'U'ULt1u1t1ll'1~ 1 fl~.:i

a1~t1a1'U1"il~1~1'W~1m1 5 m~11 6 Lb'1~m~11 7 bb'V1.:i'l"l1~11'1lntJ~~mn1vr'U~V!~mnru'1bL'1~

15m11 'Wm1v11151m1~'Vl1.:i~ b~n'Vl1a-Un~mfl1~ 'l"l. Pl. 2549 h.:i'l"l t11u1m1'1lin~.:in1vr'W~bb 'U1'U 1t1u1mL'1~ ' ~

Lb 'U1tJl)~1'Wm1-rn~1m1~~'Ufl.:itJ'1e:i~nt1~1'W?1116'lm'VlP111.:i'l"lt11u1'111'1l1n ~.:i~e:i 1 ud

-Ue:i 1 tJwmP1db~t1n11 "tJ1~mP1h.:i'l"lt11m'111'1lin" b~e:i.:i 'ULt1u1mL'1~bb'U1'\Jl)~1 'Wm1-rn~1m1~ ~'Ufl.:J'\J'1e:i~.tl t.1?111?1'\.J b 'VIP!

-Ue:i 2 u11mtJwmP1 1~Ltit1u f11~.:ivr~mb'U1'\Jl)~~'U1~~1~n1vr'W~Hbb~1 zj.:i~~bb~.:inutJ1~mP1d1iX 1 itJwmPldbb 'Vl'U

.LJ'e:i 3 m11n~1 m1~~'Wfl.:JU'1 e:i~n ti ~1'U6'1116'l'Ub 'VlP16lleJ.:i h .:J'l"l ti 1U1'111'1lin n1vr'U~tJ1~ b~'W611 ri' ru "'

~.:i~e:i1ud 3.1 G'i1'U~11~1t1m1~~v11'ULt1u1t1

3.1 i:Ju~vr11 b~1vr-W1~tJfi~m1~1'Wfle:i~-W1 L~e:i{ bb'1~m i.:i1'U1~iiG'i1'U~1~1'Wm1v11'W1t1u1t1 'U 6.J 'U

3.2 'U Lt.IU1tl 1~-rum1~~v11 b U'U'11tl~ n~ruer n~11~t1tJ1~mP11 '!Xrn i.:i1'U'Vl11\Jbb'1~6'11~11{1 'U

L .LJ'1ii.:i 1~a~1.:i?1~~1n~1'U'Vl1.:ib 1u 161J~6lle:i.:i 11.:i'l"lt11u1'111'1l1n

3.3 n1vr'U~~fo~~'1le:iu~1~'U 1vmmb'1~bb 'U1tJl)u1i~.:in~111 ~-U'~b"il'U

3.4 rl1Vl'Ul?l L ~m1"il61BUbL"1~tl1~LiJ'Uf111~L~tJ.:!~1'U611'H1'UL VJP1B~1.:i'IJBtill"1~ 1 Af .:i

3.5 n1vt'U1?1L~VJ'IJVJ1'ULL"1~tl-rmh.:iu1ti'IJ1till"1~ 1 Af.:i • 3.2 ~1'U~l1~1tli1tJ6'1~L~tJ\?l'lJB.:JtJ btJ'IJ1tJU1~f1B'U~1tJ 3 ~1'U AB

Id O.<::lt. OOV

611\JVJ 1 f11'UtJ1~LL6'1~f11"il1f1\?lf111~

~1'U~ 2 tJ 1ti'IJ1tJ m1-rn~1m1~~t.1f1.:Jtl6'1a1?1.ti'ti611161'UL VJP1h.:ivm1'\J1m1'lJ1~ Vt Pl.2560 zj.:i

n1vt'U1?1cr-r'IJ~1?1'lJB'Um~t.11ti'IJ1ti mJ.:i6111~~1A'ruBBmtlt.1 14 vtml?l zj.:i6111~~1A'ru"il~61B1?1f1i;\'B.:im~m!'l11 5 'U ... ...

Lrn~l.11!'111 7 'W-rn~1'lJn~~~ mn1vt'U1?1vt~mnrusv1 LL"1~151 um1vi1~~m1~VJ1.:iaL~nVJ1Bil n~ 'W. Pl.2549

~.:J~BLtld (1) 'U ltJ 'IJ 1 tJ f11 'IJ f1~ f111L-if1 fi.:i L ~ B '11 n \11 f111L-if1fi.:!611161\JL VJ Pl LLG'l ~BU f11rutJ1~ ~1 mm • •

611161\JL VJ Pl LO'W 1~ ~~L~-r'IJ B'U ru1 l'l 'U ....

rl1VltJ \?lcr-r'IJ~ l?l'lJB'IJl'l1~'U btJ'IJ1 tJ ~.:id 'U

1) crer1'U1tim111.:i'Wti1'\J16'111'lJifi 'U

2) vt'IJ1n~~.:11\JL VJf1 btJ b6'1~611161'UL VJPl

b\11 tiiiml'l1f111fn'Ufll.lf111L-if1fi.:im~LL t.11tl~llii~.:i~ BL ud

1) LL 'U1tl~iJ&\L 'Uf1111°11'\Jfl~n11L-if1fi.:J611161'UL VJPl

2) LL 'U1U~iJ&) f111f11'\Jfl~f111L-if1fi.:i Lf1~B~1 tJ LLG'l ~'IJ~f111Lf1~B~1 tJ

3) LL t.11U~D&\f111f11'\Jfl~n11L-if 1fi.:11~'\J'IJ Lf1~B~1tl L ~611tJ

4) LL'U1tl~iJ&\m1f11'\Jfl~f111L-if1fi.:iw'IJ'IJU~'IJ1im1

5) LL 'U1tl f1'1J1i m1f11'1J f1~ m1L-if1fi.:i1 tl1LLml.ltl1~ ti n~vi~mLB'W'W~ Lf1-&'ULL"1 ~611161\JL 'Vl Pl d,J • •

(2) 'U btJ'IJ1 tJ f111~11B.:J LLG'l ~ nAt.1-if B~fl rl1Vl'U\?l b ~iim1'11vi11~'\J'IJ~11B.:J-if Bl-l6'1'1JB.:!611161'UL 'VlPl 'U 'U 'U

zj.:!Btlb tJ61i11'W'W~B~L-if LL6'1~rl1VltJ\?l b ~~l?lvi1 LLr.J'ULl'l~tJl.lf111~'W~B~niruO f1 LO'UL ~BU B.:JntJf111VltJ\?l'lJ~~ f1 b tJ 'U • •

f111b~'IJ~f111611161'UL'V1P1'1JB.:Jl1.:J'WtJ1'\J1"1i1'lJl~

n'lvt'U\11~-r'U~\?l'lJB'Um~'U btJ'IJ1tJ ~.:id 'U

1) crer1'U1tim111~'Wm'IJ16'111'lJin 'U

2) -M'1vt'IJ1n'1l-l.:!1'UL VJf1 btJ b6'1~611161tJL 'VlPl • bl?ltiiiml'l1f111f11'\Jfl~n11L .V1fi.:i1'11~ LL 'U1tln'IJ1i~.:i~B L ud

1) LL'U1tlnlliim1~11B.:JLL6'1~f111tJAt.l-ifm;Jf1 2) 'U btl'IJ1 tJ f1111'111"il61B'IJ LL6'1~U1~ LiJtJf111~ L~tJ~~1tJ611161'U L 'VlPl

~1'U~ 3 LL 'U1U~iJ&\ LLG'l ~-if B rl1VltJ\?l m1-rn~1f111l.l~'Uf1.:JU6'1 Bl?ln tJ611161'UL 'VlPl L ~Brl1 n'IJ~ LLG'l

f111vl1 L iJtJ.:11\J f111'\J ~Vl11~ \11f1111~'\J'IJ611161\JL 'VlPlb ~iim1~tJ6'1 B l?l.ti' tJ L~ rl1VltJ\?l LL 'U1tJniJ&\1 tJ m1-r f1~1f111~

Juf1.:itl6'1Bl?l.ti' ti611161'UL 'V1Pi~iim1~61B1?1f1i;\' B.:i n'Ut.11ti'IJ1 tif111l.!Jt.1f1.:itl6'1 B1?1611161t.1 L 'VlPl ~.:i~B L ud

LL 'U1tJniJ&\L 'U f11~f11'\J fl~f111L-if 1fi.:i LLG'l~ f111 L-if .:J1'U1~'\J611161'U L VJPl I d II _,,

611'U'Vl 1 f111f11'\Jfl~f111L'lJ1f;N611161'UL'VlP1

~1'U~ 2 f111'\J~Vl11~\?lf111f111L-if1fi.:J'1JB~m-if.:11'U 'U

Id 0 Vd Q./A ~I./ G'l1'U'Vl 3 f11~f11Vl'U\?lVl'U1'Vlf111m'Ue.J\?l'lJB'\J'lJB.:Jr.J b '1l~1'U

'U

I d V .c:f ~ I

611'U'Vl 5 f111f11'\Jfl~f111L'lJ1tl.:!Lf11B'lJ1tJ

~1'U~ 6 f111f11'\Jfl~f11~LoV1fi.:J1~'\J'\JU~lliim1

..

•

G'11'U~ 7 fl11fl1'\Jfl:l.J fl11 b -LJ'1'1.:i L tl1bbn'S:l.J\h~Vf1~V!~eJbbB'V'l'V'lf'i bfl.ff 'Ubb'1 ~G'!11G'!'Ub '\11~ , . '11'U~ 8 fl11'\J~V!11~~fl11611BW~ bb1{bb'1~~'U~'Vlt bb'1~m1lle:i.:in'U 1tl1bbm:1.J1~tl1~G'!.:if1~ '11'U~. 9 fl11tlfl'U~-!11'U"il1f1.f11V'UBf1G'!1°1Yf1-!11'U '11'U~ 1 o m1fl1'\Jfl&.1fl11b-LJ'11~u'Ubfl1e:i·1hvHG'!1v • '11'U~ 11 m1fl1'\Jfl:1.Jm11.U.:i1'Ue:it1mruue:i.:in'Ubfl~e:i~1v , , .

'11'U~ 12 1~buvutllju~m1fl1'\J~:1.Jm11-U'.:i1'U"il~V!mvab~n'Vl1ffun61 '11'U~ 13 m1fl1ufl:1.Jm11 -U'a'Ub~ie:i{b .Uvi • '11'U~ 14 m11 -U'.:i1'UflB:1.J~1 bvie:i{G'11'U'iflfl'1

'11'U~ 15 fl11L oU-!!1'Ubfl~B-!!flB:l.J~1 bvie:i{bb 'U'U'V'lf1'V'l1

I _J Cl.I ~ !I ~ '

G'!'J'U'\11 18 fl11"il~bf1'\J'Ue:il\1'1'111"il1flB:l.J'V'l1bVIB1

bb 'U1tl nu~1 'U m1-rm.~nfl11:1.Jtli;:ie:i~n v\i1'U-LJ'e:i:1.Ji;:i bb'1~~11e:i.:i.LJ e:i:i.Ji;:i ~ ~ \I \I

.1"""""'1 .1.. .,j ... bb 'U'J u~'UVI 'Ufl11Vl11'1G'!B'U bb'1 ~ u1~ b:l.J'Ufl11:1.J bG'! V-!1~1'UG'!11G'!'U b '\11~

bb 'U1tllji.'.m1 'Um1-rn'l!J'1m1:1.Jtli;:ie:i~nv~1'Umvm'V'I G'!m'U~ bb'1~G'!.f11'V'lbb1~~e:i:i.J. bb 'U1tlfli.'.mL 'Ufl11vl1 b ii'U fl11VIB'UG'!'U B-!I b VI~ fl11cWfl11:1.J~'U fl-!!tl'1B ~n V'Vl1-!11~'\J'UG'!11G'!'Ub '\11~ bb 'U1tllji.'.m1 'Ufl11G'!~1-!lfl11:1.JV11~V!°I! f1 L 'Ub~B-!lfl11-rf1'l!J'1fl11:i.Jti'1 e:i~n V'U B-!11~'\J'U b 'Vlfl 1'U 1i;:i~?t11?t'Ub 'Vl~ bb 'U1tllji.'.m1'Ufl11G'!~1.:im1:1.Jvi1~V1°1! n L 'U b~e:i.:i m1-rn'l!J'1m1:1.Jtli;:ie:i~n v"Ue:i.:i

1~urn'Vlfl 1'U1i;:i~G'!11?t'Ub '\11~

bb 'U1t1lju~1 'U m1n1V!'U~V!-u1~m1:1.J-ru ~~'lJe:iu

bb 'U1tllji.'.m~1V1-rum1~~te:i~ ~~1.:i1~uuG'!11G'!'Ub 'Vl ~'Ue:i.:i 11.:i'V'lv1u1'111'll1~ bb'U1tllju~m1:1.J~'Ufl.:itli;:ie:i~nvG11V1fo'Vl-r'V'lv1m'iflfl'1

-LJ'e:i~ 4 mru1~'\J'UflB:l.J~'J bVJB{V!~BoLJB:l.J'1G'!11'1'Ub 'Vl~'UB-!I L 1-!l'V'IV1'U1'111'lllnbii~fl11:1.Jb~VV!1V Vl1e:i 'IJ

1~-rrnfom1v'11nnvflnfl1:1.J'Vl1.:i~1'U~1.:i 61 e.JV1~.:im~a'Ub~e:i.:im'11nm1:1.Jun'V'l~e:i.:i i;:i~bi;:iv i;:i~b1'U V1~e:i~1tl'U • I " 'V

n11tllju~ Vl1:1.J ~b 'U'J'U LV'U1V bb'1 ~ bb 'U1tllju~1 'Ufl11-rn'l!J'1fl11:1.J~'Ufl-!!tl'1e:i~nV~1'UG'!11G'!'U b '\11~ 1~ vn1V!'U~ 1 ~ e.Ju~V1111~~'UG'!.:i ~.:iiJV1-U'1~~ bb'1-ru~~'llB'U~1'UG'!11G'!'U b 'Vl~'Ue:i.:i 11.:i'V'I v1u1m1'll1~ b tl'Ue.J-ru~~'lle:iu~ e:im1:1.J \I 'V \I 'U .J .c::il ~ CV d Q ~

b'1V-!I fl11:1.Jb'1VV!1V V!1BB'UV111V'Vlbf1~'U'U

oLJB~ 5 L m oUbb 'U1tlflU~L 'Ufl11-rn'l!J'1fl11:1.J~'Ufl-!!tl'1B~nVv'f 1'U'111G'!'Ub 'Vl~Vl1:1.J~bb 'U'UVJ1Vtl1~fl1~d .LJa~ 6 t11~m~m~u.:i~u1.U~.:ibb~1''Ui1~'11n1''Ut11~m~ btl'Uvi''U1tl

"' ., .,i i f) '?{'{))V ~ tl1~m~ ru 'J'U'Vl ............................................. 'V'l.~.2560

(L ('U1v:1.J1°IY'1 1 'V'lu1.f11ru)

e.Ja1'U1Vfl11L 1-!l'V'IV1'U1'111'll1n 'IJ

ciTuVi 1 r11-Ummb~~r11~1n~rn1l.l

ciTu~ 2 'U 1EJu1EJnT'j~n~1rn1l.ll1t1fl·nJmmnmwrnm 'VIP1L ':i.:ivw1u1~':i1"1l1~ Vim~~ 1 'U LEJU1EJfl11l.Jl1'Ufl.:Jtl~ei~3i'EJ'1JeJ.:JeJ.:Jfln':i Vim~~ 2 Lfl':i.:i?1~1.:irn1l.Jl1t1fl.:itl~ei~nm11':i?1m'VIPi Vim~~ 3 rn1l.Jl1t1fl.:itl~ei~nEJ~1V1~u'V1~·11-m1m'4flfl~

' Vlm~Vi 4 m':i~~Vlm~Vll.ibb~~fl1Ufll.J'Vl~'l"lV~t1ei.:ifi'm

'U ' .cJ II ct

Vlm~'Vl 5 n1':ifl1Ufll.Jn1':ib'1J1'1.:J ' d ".,,,

'\lll.J1~'Vl 6 n1':ib'1J1':i'\ll?l'1JeJl.J~ 'U

d ~ II

Vlm~'Vl 7 fl11l.Jl.J'Ufl.:J'Vl1.:Jn1EJ.f11'1"lbb~~"'.fl1'1"lbb1~~eJl.J

Vim~~ 8 fl11l.Jl1'Ufl.:Jtl~ei~fiEJ~1'\ll~Un1':i~1bi'.i'U.:J1'U Vim~~ 9 fl11l.Jl1'Ufl.:JtJ~ei~fiEJ~1'\ll~Un1':i~eJ?l1':i-LJ'eJl.J~

'U d Cl.I CV 0 Cl.I

Vlm~'Vl 10 n1':i"il~'\ll1 n1':i'l"l\Jll'U1 bb~~n1':iU1':i.:J':in~1':i~UU '

Vim~~ 11 rn1l.l61'l.l~t16nurrt~u~m':imEJt1ein. Vim~~ 12 n1':iU~'\ll1':i~~n1':ib'\ll~n1':illfl11l.Jl1'Ufl.:Jtl~ei~J1tJ?l1':i?l'Ub'VIP1

' Vim~~ 13 m':iu~V11':i~~m':ifl11l.Jl1t1fl.:itl~ei~nm~ei?1~1.:irn1l.l~m~ei.:i'1Jei.:iei.:ifi'm

d " Vlm~'Vl 14 fl11l.J?ieJ~fl~eJ.:J

ci1'U~ 3 bb t11tliju111 t1m':irnU~l.Jn1':ib -V15.:ibb~~m':i1-U'.:i1t1':i~U?11':i?l'Ub 'VIP!

' ci1'Ufi 1 n1':ifl1Ufll.Jn1':ib-LJ'15.:i?l1':i?l'Ub'VIP1

' ci1'U~ 2 n1':iU~'\ll1':i~~n1':in1':ib-LJ'1f:i.:J'1JeJ.:Jrni.:i1'U

'U

ci1'U~ 3 n1':in1Vl'U~'\lliJ1~fl11l.Jfo~~'1JeJU'llei.:Jrn'1J.:i1'U 'U

' ci1t1Vi 4 n1':iU~Vl1':i~~m':i~'U'Vl~'l"lV

' 611'UVJ 5 n1':ifl1Ufll.Jn1':ib-LJ'15.:Jbfl~eJ61J1EJ

' 611t1~ 6 n1':ifl1U~l.Jn1':ib-LJ'1f:i.:J':i~UUtliji.N\m':i 611t1~ 7 n1':ifl1Ufll.Jn1':ib .LJ1i:i.:i 1 tl':ibbml.ltl':i~EJ n~Vl~eibbeJ'l"l'l"l~bflit1bb~~?11':i?l'Ub 'VIP!

' ' 611t1~ 8 n1':iU~Vl1':i~~m':i61!eJ~~bb1'~bb~~~'ll~'Vl~ bb~~m':iuei.:int11tl':ibbml.l1l-itlw?!.:il°l&i 611t1~ 9 m':itllji.Ni.:i1t1"il1n.fl1miein?11irn.:i1t1

I d ii di I 1" ?ITU'VI 10 n1".ifl1Ufll.Jn1".ib'll1'W'U'Ubfl'Hl'll1CJ ".i?l1CJ

' 611t1~ 11 m".irn'Ufll.Jm".i1'1l'.:i1t1eitlmruuei.:int1bfl~ei"ll1EJ

' ' 611t1~ 12 ':i~btfoutliji.Nim':irnu~l.lm':i1-U'.:i1t1"il~VlmEJab~n'Vl':iei'iin6'1 611t1~ 13 m':ifl1Ufll.Jm':i1-U'am~eifoj~

'

II Vl'U1

1

4

4

5

6

8

9

11

11

14

17

18

21

22

24

25

28

28

30

32

34

35

37

39

40

41

42

43

44

45

46

ci1'U~ 3 bb 'U1'1.J5lli\1 'Ufl1':iA1'U!"llJfl1':iL -LJ'1~-:lbb'1~fl1':i 1 -ti'-:!1'U':i~'\J6'11':i6'1'UL 'Vll31 (~a)

ci1'U~ 15 m11-ti-:11'ULA~8-:!A8lJ~1b\918{LL'\J'\J'V'lfl'V'l1 '

ci1'UVJ 16 fl1':i\91':i1'1..ij'\J fl1':i'\J fl"jfl , ' ' .,

ci1'UVJ 17 fl1':i~\Pl~-:!LL'1~n1'Vl'U\PlA1'1J8-:!':i~'\J'\J

LL 'U1'\.J filli\1 'U m':i~mn m1l.l'\.J'1a1P1.n' mn'U-LJ'al.1'1 LL'1 ~'11':ia-:i-LJ'alJ'1 ~ ~ ~ ~

.1""' """1 .1 .... .J " LL 'U1 u{J'U\91 'Ufl11\91':i1'16'18'\J LL'1 ~ u':i~ LlJ'U A11lJ L'1CM\Pll'U6'11 ':i6'1'U L 'Vll31

LL 'U1'\.J{illii1 'Ufl1':i-rm~1 A11lJD'1 a\Pln tJJi'1'Ufl1tJ.f11'V'l 6'1t:l1'U~ LL'1 ~6'1Jl1'V'l LL1 ~~al.I

LL 'U1tJ!jllii1 'Ufl1':i~1 L u'U fl1':i\91 a'\J6'1'Ua-:i L ~l'l mw1m1l.l~'U ri-:itJ'1a~.n ti'\111-:i':i~'\J'\J

6'11':i6'1'UL 'Vll31

bL 'U1U{jllii1 'U fl1':i6'1~1-:IA11lJ\91':i~'VIUfl1 'U L~8-:lfl1':i~fl~1A11lJU'18~.n tl'1J8-:l':i~'\J'\J

L 'VlA L'LI L'1 ~6'11':i6'1'UL '\11131

LL 'U1tJ5llii1 'Ufl1':in1'Vl'U ~'VIU1~A11lJ~'\J~ ~"118'\J

LL 'U1tJ5llii'11V1~'\Jfl1':i..ij ~~a..ij ~-.ij1-:i':i~'\J'U6'1116'1'UL 'Vl l31'1J a-:i 11-:i'V'lt11'\J1m1"111~ LL'U1'\.J5'U1iA11lJ~'UA-:!U'1eJ~.f1ti'11'Vlfo'Vl~'V'ltJ1fl':i~AA'1

V1u1

47

48

49

50

51

55

58

61

62

63

64

67

u'tau1 a bbft :m u1tl~llii1 um -ai'm~1 f\1111li'u fl.:Jtl fleJ ~Ji' a

~1'1Jfi!1'afi!'IJb'VIAb 'a.:JYW1U1ft'a1"!11~ VtA.2560

' ,, fl1ila1i1Vi1m'U'U1au1ail tJ 'J~ fl e:J'\J~'J CJ

1. e:i.:ifim VlmCJ5-:i h.:ivm1u16'l11'll1n

2. ~u.:i~uuru-u1 Vl:inCJ5-:i ~iie51i . .n"ili-:im1ml.l 1fl1.:i6'!~1-:im1u~V111-:i1'U'tJe:i-:i 11.:ivm1u16'l11'll1~ 'II ., 'II

3. n~ilb'Vlf11t.1favaTrnt.1b'VIA V!l.!1CJ5-:i V1i.11CJ\l1'U'\J~V111 ~~m1 bbG'l~ ~1bil'U'l1'U~1'Wb'VlflL'UL6'l~ • 6'!1'J6'!'Ub 'Vll"lbb6'l~fl11~e:i6'!11 b6'!'U'€lbb'U~'U LCJ'\J1CJ 1 ~f11tl1m~n ~~'U1tlfotl~.:i th~-:i1'm~1 'J~'\J'\Jfle:Jl.!~1b~l'ei{ bb6'l~bfl~e:J~1CJ'tJe:J\l L 'J\l'VW1'\J16'l'J1'll1n.

4. 'IX1vi.U1n~m'Vlfl 1u 16'laa11amVJA Vl:inCJ5-:i ~iie51'U1"ilL 'U~1'Ub'Vlfl 1'U L6'l~6'!116'!'Ub 'Vll"lbb6'l~m1~e:i6'!11 • 'II

'tle:i-:i 1 wvm1u16'l11'll1n zj-:iu'Vlu1'Vlvt-U'1~bb6'l~m1l.!1'u~~'lle:iu 1'UciTu'tJe:i-:im1n1vt'U~'U1CJu1CJl.!1m~1'U m1 ... fl1'\Jfll.J~ bbG'lm-a 1-U-:i1'U1:::uu6'!116'!'Ub 'Vll"l

• 'II

5. n11~n"M1fl'J13.J~'U fl .:itl 6'l e:i ~.n a Vim CJ 5-:i m11'rn;1 fl11l.l~'U fl -:itlG'l e:i ~Ji' CJ6'11 vt1'u 'J ~ uu 6'!1 'J6'!'U b 'Vl Pl

"Ue:i.:i 11-:ivm1u1m1'll1n

6. 3.11191'J!1'U (Standard) V!l.11 CJ5-:i u11Vl~J11'U~u-:i~u1-ul 'U m1tlnu~ fl11"il~.:ib ~e:i1 m~ \911l.l

1191t1tl1~6'!-:il°lvt~m u1V1:inCJ • 7. 16m-atl~u~ (Procedure) V!l.!1CJ5-:i 'J1CJ6'l~b~CJ~~'\Je:Jfl~'U\9le:J'Ubtl'U-U'e:i 1 ~~e:i-:itl1mtlftu~b~e:i1~

1~l.!1;-:il.!1\911~1'U~1~n1vt'U~11\911l.!1\91tltl1~6'!-:il°l .. . s. bbt.1TV11.:itl~u~ (Guideline) vtmCJfi-:i bb'U1vn-:i~hl1~u-:i~u1~t1nu~ bbl'ibb'U~tl11~t1ftu~\911l.J

b~e:i 1 ~'11l.!11tlu116'lb u1vt:inCJ 1~~1CJ~'U '

9. «t.U vtmCJfi'l ~flfl6'l~1~1'um~qj1\11 (Authorized User) 1~6'!1m1m-U11.Y-:i1'U 'IJ~vt11 vt~e:J~bbG'l 1'fl'l!l'1wutJ6'!~16'!'Ub'Vll"l'tJe:i-:i 11-:ivm1u16'l11'll1n 1~CJii~'Vl6bb6'l~vt.U1~~'Ue:itjnuu'VJu1'Vl ;-:i 11-:ivw1u1m1'll1n

n1vi'U~H~-:i.W

10. ~u~V111 V!mCJ5-:i ~iie5'i'U1"ilu~vi111~~u6'!.:i"Ue:i-:ih.:ivm1u1m1'll1n 'II 'II 'II

11. ~~bb6'l'J~U'\J (System Administrator) vtmCJ5.:i b~1vt-U'1~~1~1''1Jl.le:J'\JvtlJ1CJ"il1fl~U\l~'IJUru'll11 ~ \J"' ,, ~

iiwu1~1'u~~'lle:iu1 'U fl11~ bb6'l1'fl'l!l'11~uu bbG'l~ bfl~e:i~1CJfle:ilJ~1b\1le:i{zj-:i6'!1l.!11m-U15-:i1 tl1bbml.l bfl~e:i~1CJ

' ti v v LI V ~ ·

~fl "il 1-!l'll'J fl 111 bbG'l :::'Vl'U fl\l 1'U b "il 1'Vt'U1'\J 'J fl1'J

13. vii.i·w.:i1u.fl1aue:ifl V!l.!1CJ5-:i e:i-:il°lmvt~e:ivti.11CJ.:i1'UmCJ'Ue:iflm 'J\l'Vlmu1m1'll1~ e:i'Uru1\911 ~ii~V15 .... 1 "Wm1b-U'15-:i bbG'l~ 1-U-:i1'U-U'e:i~6'lvi~e:i'Vl1''Vl~~'U~1-:i 1 "Ue:i-:ivti.11 CJ-:i1'U 1~CJ"il~ 1~1'u~V151 'Um11.Y1~uuml.le51'U1"il

tJd tJ QJQ. 61 CV QJ tJ

'Vt'U 1'Vl bb'1 ~ \91 el\l 'J'\J t:-.1 ~'lle:J'\J b 'U fl1 'J'J fl'l!l'1 fl11l.J G'l '\J'tJtl \l'tJ ell.I 6'l 'II

14. one:ia.J6'lfle:ia.JVl1b\91e:i1 vrmCJ5.:i -U'eia.JG'l -Ue:im1l.l fhi.:i 'll~f11i-:i vr~e:i~-:i~'U1~ u11~1~e:icl1'U1~uu \J cu ct 'U

flell.!~1 b\9le:ifl 'U6'!il1'Vl~'J~'\J'\Jfle:Jl.!~1 bl?l ei{m"iltl'J~l.l'JG'lt:-.16'11~ bb'1~ 1 ~vrmCJfl11l.l'J'Jl.!5.:i-U'e:il.!6'l~ b~ fl'Vl'Jeiil fl61 'II

15. a1·rnm'VIA (Information) 'Vlmtifi.:i .Um'li1'<il'<il~.:i~1~'<il1f1-U'm.J'1'11m~1'Urn1tl1:::m'1~rn m1~~ \J

1:::b uti'U 1 iX.Uei11'1zj.:im'<ile:iti"l 'U1tl~1 b'1'V .UeiA1111 'Vl~eim"v'lm1VJn 1 iXbtl'U1t:'U'U~m -ll6'!1m1m .U1h1~~1mb'1::: \I \I \I \I

w1m1ritl11tl1-lltJw1ti'V'UL'Urn1'U~'Vl11 m111.:ibbe.i'U m1~~~'U1'<il bb'1t:~'U 1 16. 'j::'lJ'UFlel11oW1 L\PleJ{ Vlln tifi.:i e:itl f1'HU'Vl~€l'V~€ltl mru'Ve}!.lf1€l11~1 bt>le:J{~ b zje:J11fl1'~vl1.:11'Ub .U1~1 tJ Nu

' ' ' 1~tJ 1~i1fl11rl1Vl'U~ f11i.:i 'V~l°l1i.:i Vl~e:J~.:l~'U 1~ bb'1t:bb'UT\ll1.:!tlnu~.:i1'U1 iXeitJ mru'Vl~€l'V~€ltl mruvl1VlU1~ , dJ , , "

tl1:::m'1e.i6'1-U'ei11'11~tie1't>l 1 'U~~ \J

17. 'j::'lJULF1'iei"li1v (Network System) 'Vlmtifi.:i 1:::'U'U~6'!1m1ri1m'Ufl11~~~B~€l6'!11'Vl~ein11~.:i .LJei~'1bl'1t:6'!116'!'UbV1131W'Vl11.:i1t:'U'U6'!116'!'Ub'Vll31~1.:! 1 'V€l.:!11.:i°v'lti1'U1'111'Vl~ 1~ b6li'U W'U'U LAN, 1t:'U'U

~I ., Intranet 1t:'U'U Internet bu'Ut>l'U

d .:::!ii I ..:::., ~ .Q. d'.c:J .d I

18. 'j::'lJ'U LAN LL~::'j::'lJ'U Intranet Vl111tJ'1.:I 1t:'U'ULf11€l'V1tJe:Jb'1flVl)e:J'Ufl6'!Vlb'VeJ11t>leJ1t:'U'U

Ae.lll~1bt>leJ{~1.:i 1 .fl1tJ 1 'U'Vlt.11 tJ.:11'Ub .U1~1 tltl'U b U'Ubf1~eJ~1tJ~i1~~tl1t:6'!.:lrlb ~Bfl11~~~eJ~eJ6'!11bb'1 flb tl~ tJ'U

-U'eJ11'1bb'1t:6'!116'!'Ub Vll"l.fl1tJ 1 'U'Vlt.11 tJ.:11'U \J '

d di! I .Q. d .Q. td d I di! I Cit. d'

19. 'j::'lJ'U Internet 'Vlmtiri.:i W'U'Ubf11B'V1tJ'eJL'1f1Vl1€l'Uf16'!Vlb'V€l1lt>l€lW'U'Ubf11€l'V1tJA€l11Yl1bt>l€l1

~1-:i 1 'Vei.:i'Vlt.11 ti.:i1'UL .U1nrnA~ei~1tiB'Ub vieifo'.Jt>l~11'1n 20. 'j::uua1'ja'Ub'VIA (Information System) 'Vlmtifi.:i 1t:'U'U.:11'U'V€l.:J'Vltl1ti.:i1'U~'Ll1bmbVJA1'Llfa~

6'!116'!'U b VJl"l wuuAei11~1 bt>leJ { bb'1t:1t:'U'U bA ~ei~1tim61l1ti1 'LI m16'!~1.:16'!116'!'U b vi l"l~'Vlt.11ti.:11'U6'!1111wtl1m1-ll tl1::: 1ti'V'U1 'Urn111.:ibbe.i'U rn1'U~'Vl11 rn16'!-Ll'UG'!'U'Urn11 iX'U~rn1 m1-W'w.J'U1 bb'1t:A1'UA11rn1~~~ei~ei6'!11 zj,:i

' ' i1B.:ifitl1:::nei'U b6li'U 1:::'U'UAB11~1Lt>lei{ 1:::'U'UbA~B~1ti 1tl1Lbm11 .Uei~'1bb'1t:6'!116'!mVJl31 bU'U~'U

Ji d"I II ( , "" JI d d I

21. 'V'l'U'Vl b'l1'31'1.J'j::'lJ'Ua1'j~'Ub'VIA Information System Workspace) 'Vl111tJ'1.:I Yl'UV1Vl'Vl'U1tJ.:11'U

ei'Uru1t>l 1 iXi1m11 .U.:11'U1t:'U'U&'l116'!'Ub vil311~mb tl.:ib ll'U ',, 21.1 iXB.:itl~U~.:11'U ~'U~vl1.:11'U~11tl (General working area) 'Vl111tifi.:i ~'U~~~~.:lbA~B-:1

AB11~1bt>l€l{~1'U'UAA'1 bb'1t:f1€l11~1 bt>leJ{Ylfl°v'l1 (Notebook) ~tl1:::~11~:::v11.:11'U '

21.2 ~'U~vl1.:11'U'V€l.:l~~bb'11t:'U'\J (System administrator area)

21.3 ~'U~~~~.:i~tlmru1:::'U'U6'!11&'1'UbV1131'Vl~m:::'U'UbA~ei~1tJ (IT equipment or network

area)

21.4 .y1''U~~~bn'UoLJB~'1A€l11~1bt>lM (Data storage area)

21.5 ~'Um-ll.:i1'U1t:'U'UbA~eJ~1tiH&'11tJ (Wireless LAN coverage area)

22. L~1"Uel'3oUel11~ Vl111tl fi.:i m~fo11€l'UB1'U1'<il'<il1 fl~U.:l~'UUru'V11 iX-S'U~ ~'V€l'U"1l€l11'1'1J€l.:11~'U'U.:J1'U 1~ tJ \J \I \I cu \I

b ~1'Vei.:i.Uei11'1 b tl'U~-S'U~ ~'Vei'U-U'eJ11mT'U 61 'Vl~B 1~foe.i'1nWVJ'U1~ ti m.:i'Vl1 n-U'eJ11'1 b mh'1mn~&'l ru'Vl1 ti " \I OJ I " \Iv

23. 'Vl~'V'leJ~'U 'Vl111tin.:i 61lei11" 1:::'U'U-LJ'ei11" bb'1:::vi-r"v'le1~'U~1'Ub viA L'Ll 1"~&'1116'!'Ub Vll31bb'1:::rn1~eJ6'!11'1JeJ.:i " "

Vlt.11 tJ.:11'U b 6li'UeJtlmru1:::'UrnA~ei~1ti 61!BV'lv1bL1{~i1i'.i'V~vi~ Lll'U~'U '

24. 1il~'Vl111vBL~n'Vl'jt1Un~ (E-mail) Vlmtifi.:i 1:::'U'U~\-lAA'11m'Urn1-S'U~.:ioLJ'eiri11111:::Vl11.:in'Ll 1~tJ eJ1'ULA~B.:iAei11~1 bt>leJ{Lb'1::: LA~B~1 tJ~ L zjBll 1tJ.:i5.:in'U "1lBll'1~li'i.:i'<il::: b tl'U 1~~.:i~1e1 n~1 .n1Ylci1tJ m"v'lm1VJn

\J

.fl1Ylbf1~B'U1 Vl1 bb'1t: b~tJ-:1 ~~.:16'111111'16'1.:!~11&'111 1 tJ~.:i~-S'UA'Ub~tJ1Vl~€l'Vl'11tJA'Un1~111(911\i1'U~1elil 'Ufl1 \J \J "'

-S'U~.:!oLJB11'1'Vil~.if 1~bbn SMTP, POP3 LL'1t: IMAP LU'U'1i''U \J

25. 'a~fl~1'1.J (Password) VlmEJfi'I ~1eJfl~1Vl~eleJfl'1J1~Vl~tJ.~1L"1'1J vfl-u'Lll'ULfl~el\li'.iel b'Ufl111'11T'il?feltJ

~'Utl'U ~1tJ fl fl"1 L ~el fl'JtJ flll fl11 L oU1 fi'loUelll"1 LL"1 ::-a~tJtJoLJelll"1 b 'U f\11-S fl~1 fl11ll~'Ufl\ltJ "1 el ~Ji' CJ'1J el\loLJ elll"1 LL"1:: , , \I \I \I

WtJtJ?f11?f'UL Vl\31

26. "!!~ rh~.:i1aJ.W.:itJ-a::fl.:i fi Vim EJ~\I ~~H·hi'l~i'.it:.i"1vl1 b ~flelllfi1 Ll1lel1 Vl~el1::tJtJflelllYi1 Ll'lel1Vl~el 'IJ~fhi.:i~'U LfiVl fl11ll L~ EJVl1 EJ '1 flvl1"11 EJ '1 mLm '1J L tJ~ EJ'ULL tJ"1\IVl~tlL ~ll L9ill oLJ~oUel\IVl~eltJ nu9i\11'U blJl'l i\ll'l 1ll

, \I \I d..J

fl'1i\l~n1V1u~ 11

I d a1'U'VI 2

u 1CJu1£m1':i-rm~11°l11ii~uF1.:itJ~v~.f1 CJa1':iau L 'VIA b ':i.:ivm1u1~':i1"lf1i1

'Vlil1~~ 1 'U bCJ\J1CJl°l11iJ~'Ul°l.:JU~eJ~J1CJa1':ia'UL'VIA (Information Security Policy)

1.1 ViA'V11.:Jfl1':i\J~'Vl1':i:5'~rn':il°l11l.J~'Ul°l.:JU~eJ~fiCJa1':ia'UL'VIA (Management Directions for

Information Security)

1 \91fJ'\.J':i::a.:ifi' L ~e:in1V1'U111~PiV11.:i Lb'1tG'fi1'UG'f'U'U rn':ivl1 L -W'U.:i1'U ~1'U 1411l.J~'Ul"Mtl~ e:i111.ti'CJG'f1':iG'fm VJl'l fa CJ1 ~ . , V ~ ' 11cv1t.1 .c::ii t.IQ.JQ.Jdd 11 t

G'feJ\?114'1eJ\l\911l.J.fl1':in'OJ61JeJ'leJ\ll4 m bb'1t l.J61J\?1\?leJ61JeJfl!)Vll.J1 CJ bb'1t':it b 'UCJ\J61JeJ'U.:jl4'lJV1LflCJ161JeJ\l61JeJ\l b ':i'l'l'W1'U1'1 ~"" ':i1'1l1tl

WCJUW

1.1.1 Lvna1':i'l.J bCJ\J1CJl°l11l.J~'l.Jl°l.:JU~eJ~J1CJa1':ia'l.JL'VlA (Policy of Information Security)

1) 14ru::v11.:i1'U ~1'U1411l.J~'U 14.:itl'1 e:i111.t1 CJG'f1':iG'f'U b Y1P1 l'i'e:i.:iv11 L u'U rn':i~ 111v11'U LCJ'U1CJrn':i-rn'\!111411l.J

~'U14.:itl'1 e:i111.n CJG'f1':iG'fm V1 Pi b ll'Um CJ~ n'l!frueJ'n'l!f':ib ~e:i 1 ~ Ln111 m1l.J L zj e:i~mL'1::ii1411l.Jtl~ e:i111.n CJ 1'Wn1':i1.U.:i 1'U

':it\J'U b V114L'Ufa8G'f1':iG'f'Ub V1PlLL'1t':it'U'U Ll4~e:i'1l1CJ~e:iG'f1':i-LJ'e:il.J~ L111CJ'U LCJ'U1CJ., ~.:imhTo.i::l'i'e:i.:i 1~-r'Urn':ie:i'U~~ ~ ,

'OJ1n~eJ'1'U1CJrn':i 1 ':i.:ivm1'U1'1':i1'1l1nb ~e:irn':ill11 tl1 .u ~

2). 14 rutvl1\l1'U~1'Ul411l.J~'U14\ltl'1e:Jl?1.f1 CJG'f1':iG'f'UL Vll'lVl eJ'I fl1Vl'U \?161JeJ'U L 61!\?lvr'U~-rfl'l!f11411l.J~'U 14\l

tJ'1e:i111.ti'CJ1?11l.J Ll4':i.:iG'f~1.:iG'f1CJrn':iu.:iA''Uuru'll1 eJ''U 1~LLn ':it~'U~'U~V11':i 1::~'U~mLm::'Uu bb'1t1::~'U L..ij1V1i11~ ~ ~ ~~

3) 'U LCJ'U1 CJfl11-rfl'\!f11411l.J~'U14\ltl'1eJ\?1.ti'CJG'f11G'f'Ub Vll'lVleJ\l fl1Vl'U\?1Vl~flfl11 11?1t1tl1::G'f.:il°l bL~t • b u1V1m CJ 1 'W rn1-rn'l!f1l411l.Jtl '1 e:i111.t1 CJe:i ~1.:i-li111 L 'OJ'U

4) fl11fl1'V!'U\?11411l.J-r'U~ \?1'1leJ'U61JeJ'I~~ L~CJ1oLJeJ'l 1 'Ufl11'U~ fl11~Vlfl111411l.J~'U14'1tl'1e:Jl?1.n' CJ L\?lCJ

l.Je:i'UV!mCJ 1 ~nzjl.J L V114 L 'Ufa 8G'f1':iG'fm V1Piiiwu1~-r'U~ 111'lle:i'U 1'Urn1'U~V11':i~111rn1m1l.J~'U14.:itJ'1e:i111.nCJ1 'U n11

b oLJ1fi\lLL'1t~\?lfl1114e:Jl.J'W1bl?leJ{ W'U'Ubl4~e:J'1!1CJ bL'1tG'f11G'f'UL Vll'l ~\l'Vll.J\?161JeJ\l h\l'\AICJ1'U1'1

1.1.2 fl1':i'Vl\J'Vl1'1.J'l.J bCJ\J1CJd1V1i'Urn':i\J~'Vl1':i:5'virn':il°l11l.J~'l.Jl°l.:JU~eJ~J1CJa1':ia'l.JL 'VIA (Review of

the policies for information security)

1) 14ru::v11.:i1'U~1u m1l.J~'Ul4\ltl'1e:i111.t1 CJG'f11G'f'Ub Vll'l Vi' e:i.:iVJ'UV11'U 1?11l.J1e:J'U':it CJt nm~ n1V1'UV1 H V11mde:iiirn':ib tl~CJ'Ubb tl'1.:i~cl'1A'ru~e:i L ':i.:iY1CJ1u1'1':i1'1l1n Lb'1::l'i'e:i.:iiirn':i~111ml.J VluV11'U tl':itblJ'U'U LCJu1 CJfl1"j

-r n'l!f1l411l.J~'Ul4.:itl'1e:i111.n CJ G'f 1':iG'f'U b VJPie:i ~1.:ii1e:i CJ 1 14.f .:i ~e:iu b ~e:i 1 ~'U LCJu 1 CJ'U LCJu 1 CJ n1':i-rn'l!f1m1l.J~'U14.:i tl'1 e:i111.f1 CJG'f1':iG'f'Ub V1Pliitl':it~V15.fl1'\AleJ ~ LG'fl.JeJ

~

vn..11~~ 2 bfli.:!~~1.:!fl1111~'\.Jfl.:!UfteJ~.n'a~TH'l'l.IL'VIA (organization of Information Security)

2.1 bfli.:!~~1.:if11111~'\.Jfl.:!Ufte:i~.na~1i~'\.JL'Vlflfl1eJ1ue:i.:ifi'm (Internal organization)

1 ~~tJi~~ .:i fi' b ~e:in1V1'U~me:i'U m1'U~V111~ ~ m1\911'Ufl1111~'UfMtl"1 e:i~.n ti61°1V1-r'U?t11?tm VJl31.fl1tJ 1 ue:i.:ifi m

ubeJ'U1eJ

2.1.1 min1'Vi'\.J~tJ'Vl'U1'VI bbft~V1ii1~ f11111-ru N~°lle:iu~1u fl11ll~'\.Jfl.:itJfte:i ~.na~1i~'\.J b 'VIA

(Information security roles and responsibilities)

1) ~rl1tn ti rn1l1.:ivm1'U1~11'1J1~~ eN bb~.:i~.:imbJV1~e:iflru~m111rn1-rmnm111~'\.Jfl.:!tl"1e:i~.n ti ~ '

?t11?t'W b VJl31 1~ tJ1~'U rl1'U1"il"1~VltJ1~6l.leJ.:lfl ru~ m111 rn1\911'U fl11-r flt;1 m111li''W fl.:!tl"1 e:i ~.n tJ?f 11?t'W b VJ 1311 ~ '

fl1eJ'Ufl"1llbb'1~-li~b"il'U ~e:i.:iiifl11VJ'UVJ1'W bbm6l.I V1~mb~.:itK.:iflru~m1:wrn1 VJfl 1 tJ 'IJ'U"il1fl1'Wtl1~fl1l31fl~.:i ' '

ne:i'U 'Vl~m~e:iiifl1ib tl~ tJ'Ubb tli;:i.:i~611fi'ty~ eJ h.:iV'ltJ1'U1'111'1J1~ b ~e:i 1 ~iim1:w?teJ~fl"' €1.:lfl'U fl!J'Vlll1 tJ 1111Ci.:i d .dd 11

lJ11'11~1'UeJ'U 1 VJbfltJ16l.leJ.:I

2.1.2 fl1ibbU.:!bbeJflVl'IJ1~fl111Jj'ut'.l~°lleJ'U (Segregation of duties)

1) ~'U~Vl111~~'U?l.:!VJ1.:!191'1'Ufl11-rflt;1fl11llli''Ufl.:!tl'1eJ~fltJ?t11?l'Ub VJl31 ( cso) 19i'e:i.:i fl1Vl'U~eJ1'U1"il ~ ~

'VltJ1~6l.le:i.:i fl ru~ m111 fl11 fl11-r flt;1m1:wli''U fl.:itli;:i e:i ~.n ti6l.le:i.:11~'U'U ?t11?t'U b VJ 131 bb'1 ~ -r'U e:l ~'1Je:i'U fl11'U~V111 ~~rn1 n1n'U~bb'1 ~~~111 bb'1~VJ'UVJ1'U.fl1V'l11:W6l.leJ.:l'U LtJ'U1tJ m1:wli''Wfl.:itli;:ie:i~flti?t11?tm VJl316l.le:i.:i 11.:iV'lti1'U1'1

~

2) ~'U ~V1111~~'U?t.:1VJ1.:i~1'W fl11-rflt;1m111li''U fl.:itli;:i e:i~.n tJ ?t11?t'Ub VJl31 ( cso) ~ e:i.:i-r'U e:l ~'1JeJ'U ~ ~

n1 n'U ~ bb'1fl11:wli''U fl.:itlG'le:i~.n a 1 ~b ll'U 1 tJ ~111'U lti'U1ti bb'1~ bb 'U1VJ1.:itJ5u~1 'Ufl11-r flt;1 fl1111li''Ufl.:itli;:i e:i~.n a

l911'U?t11?l'Ub VJl316l.1€J.:I b 1.:IV'ltl1'U1'1i1'1J1~

3) 0 oU.:!1'U b~1'VltJ1~ bb'1~VIU1 tJ.:!1'U.fl1 ti'Ue:i fl~e:i.:i-r'U ~ ~'1Je:i'U1'Ufl1itl5U'~ m:w'U LtJ'U1tlbb'1~ bb 'U1VJ1.:itll)'U°i6l.le:i.:i 11.:iV'l~1'U1m1'1J1m 'Urn1-rflt;1m1:wli''Wfl.:itli;:ie:i~fla?t11?t'Ub VJl316l.le:i.:i 11.:iV'lti1'U1i;:i11'1J1~

2.1.3 fl1i~~~e:in'U'ViU1eJ'31'1.J~iiei1u1'1 (Contact with authorities)

1) ~'U~Vl111~~'U?l.:!VJ1.:!~1'Wfl11-rflt;1fl11llli''Ufl-3tl'1e:i~flti?t11?l'WbVJl31 (CSO) ~e:i.:i~~tK·H~1'VltJ1~ ~ ~

~nV1i.J1~-r'U~ ~'1Je:i'U 1 'Urn1tJ1~?11'U.:i1'U ~

2) ~rl1'U1 ti m11 i.:!V'l ti1'U1i;:i11'1J1~ ~e:i.:i~~Vi111tizjmb'1~~1b ti'U rn1:we:i'Url1'U1lil 1 ~b~1V1i.J1~ b ~ e:i ~

~~~e:itl1~?11'U.:!1'Ufl'UVIU1 tJ.:!1'W~'U 1 2.1.4 fl1i~~~e:inun~11~iifl1111~u1'1bU'\.JoWbA~1'Wb~eJ'3b~a1nu (Contact with special interest

groups)

1) ~'U~Vl111~~'U?t.:!VJ1.:!191'1'Ufl11-rflt;1fl11:Wli''Wfl.:Jtl'1e:i~fltJ?t11?l'Ub VJl31 ( CSO) na1'U1"il 1 'Wfl11 ~ ~

ffUill1ML~i'.Jrn1~~~e:in'Ufl~ll~iifl11:w?t'WL"ilbth.J~bl31~L'Wb~~Mb~~1n'W '" '

2.1.5 fl1111~'\.Jfl'3tl~e:i~.na~1i~'\.Jb'Vlfln'Ufl1i'U~Vl1i'1~fl1ibfli'3fl1i (Information security in

project management)

1) ~ 'U ~'VI 111~~'U61'3VJ1.:1~1'Ufl11-r fl t;1fl11 :w li' 'U fl.:) tl '1eJ~f(tJ?{11?{'UbVJ131 ( cso) ~ eJ .:! ii fl11 ~ ~

1'111"il'1€l'U fl11'U~'Vl11~ ~ fl11 1~'Ufl11llli''W fl.:Jtl'1 e:i~.n tJ?f 11?l'U b VJ l3161°1V1fo bfl'S.:lfl11~ b~ tJ'JoLJeJ-:1 fl'U?l11?l'Ub VJl31 '

"

2.2 ~tJn1rurim.1VJ'H\9le:Jibb'U'UVrnvn Digital device niii1.:im1tJ~u~.:i1uli11n1:::m::1nf;l (Mobile

devices and teleworking)

1{91tlU1:::~.:i ~ L ~ tl-r m;1m 1l.J~'U fl~tJ 6Hl ~.n tJrlT\11-r'U eJtJ n'HULfl~eN fl tll.J'W1 L\9l eJ{ LL 'U'U~ n'l'l1 LL fl :::'1111 tJ1-if , , tJnu~~1'UJ11 tJ'Utl neJ~rl m LLfl:::~'U'Vl-r~ ~611161'\JL 'V1131'11 nm11 <if~1'U~tJ mrufltll.l'W1 L~ ff~ LL 'U'U~ n~1 11l.J~\l m1tJnu~~1'U'UeJ nV1t11 tJ~1'U'11m:m:::1nfl

llit:1u1t:1

2.2.1 u1t:1u1t:1t't1V1-rueitJmrurieiiiVJ'n\9leiibb'U'UVmvn (Mobile and Digital Device Policy) , 1) ~ tl.:J n1'V!'U ~16m1tl tl~ n'U-LJ'eJl.Jfl LL'1:::~'U'Vl-r~ ~611161'\J L 'V1131~ el ~1 'U eJtJ mrufltll.l'W1 b\9l eJ{ LL 'lJ tJ

~ ~ , al .-.,j .,j 'l 1"::1 1al al"""""' 1" 1".:., al "' ~fl~1Lbfl:::~umru61tJ6111ffU 1 ~~tJ 'V!Lu'U u\9l1l.JLb'UTu{l'U\9lfl1A' 'U~1'U611161'Uk'V1131 'V!l.J'Ufl\lu'1il~.mJ

2.2.2 m1tJ~u~.:J1'Ulil1m:::t:1:::1nf;l.n1t:1'Uein L 1.:J'Wt:J1'\J1f;l (Teleworking)

1) ff4'lJ1\9l 1 ~tJnu~~1'U'11 flJ11 tJ'Utl fl'VIU1tM1'U1~ tJ~ tl~ 1 i~1'U~1'U"1itl~'V11~~~'U~ fl tll.J~1 b\9l eJ{

~~L\9l~tJl.J 111 ~ bL'1:::~eJ~i1fl11\9l11'161tl'U~1\9l'UritJ'Ufl11L -U1~.:i 1~tJ1 ~L tl'U1 U\9l1l.JbL'U1tJJju~ fl1j'f)J'U~l.J m'j' ' tlod"Cf al 6'4":!il ~CV

b"IJ10~J.th bbfl1a,tu'i::: ~ fl\9l'Vl'Ul bbtl~~fl bfl'IJ'Ubbfl :::611)'61'\J b 'V1131

2) ~ eJ~ hJ'tl 1-U' eJl.J'1~ L U'Y fl11l.J~ 'U"V eJ ~tl~ r1 n1 Lfl'U'V!~ eJU 'UYJ fl 111'UeJtJfl1 cl ~1'U ~1 'Vf 1 fli1 fl11 l.J ~ ,

'11 L tl'U L~eJ 1 i~1'U L611'1rn i~1'Ufl1'U~1 L il'U m1fl'U-U'eJiifl~rl1iolru'1'Uvl.:i 1~ tJVl'UVi'VI~~ L~ fl 1-if nu ~ ~ ~

'V!il'J\1l~ 3 ri11ii~uri.:itJ~ei\1l.ti't:1t'l1V1-ru'Vl-r'Wt:11m'4'°1fllf;l (Human Resource Security)

3.1 n11~11'Vl1'4fll~1n-arieiurn1'11.:i.:i1u (Prior to employment)

1'\9ltltJ1:::~.:i~ L~eJl°l~6111~-Urn1'U~m~n'Uri11ii~eJ.:im1 LL'1::: L ~eJ 1~~irfl~1m-U1h1 'UV11J1~LLfl:::fl11ii , fo~~'lltl'U

ylt:1u1t:1

3.1.1 6liein1'V!'U\1lfl11\9l1'llil~e:J'Ubbf;l:::B'1.:i~.:iu~,;''VI (Screening)

1) n1'V!'U~'U 1tJ'U1tJm1ii~'Yl°MtJ'1tJ~.ntJi;11'V!fo'Vl-r~tJ1m~flfl 1~tJ1 ~b tJ'U 1 tJ\9l1ii bb 'U1tJJj'U1i

2) n1'V!'U~'V!1J1~ bbfl:::fl11l.J-r'U ~~'1Jtl'UV11~t111'U fl11l.J~'Ufl~tJ '1 tl~Jl tJ611i?!'U b Vll31B ~1~ b tJ'Um tJ

~ fl't;tU a m;1i;11'V!-r'U'\llU1tJ~1'UJ11 tJ'U tl fl~11~1~mtJ n ~~1'U bbfl::: '1::: ~ tl~?! tl ~fl 6" B ~ n'U 'U 1tJ 'lJ 1 tJ fl11l.J~'U fl~ UflB~JltJ?!1i?!'Ub Vll31"1JB~ 11~~tJ1'U1'111'111~

3.1.2 6liein1V1u\1l m1\9lnlil~eiu"Ue:i.:i'4rif;l1mV1~eJVi:iN1u~lil::: L 6li1ii1tJ~u~.:i1u 1u11.:i'Wt:11u1f;l11't11~

(Term and Conditions of employment)°

1) ~ B~ n1'V!'U ~'V!1J1~ bLfl::: fl11l.J-r'U ~ ~'lltl'UVl1~ ~1'U fl11l.J~'U fl ~tJ fl tl ~Ji' tJ ?!1i?!'U L VI 131B~1~ b lJ'U fl1 tJ

~ ni;ru a ni;1a1V1-r'U'VIU1tJ~1'UJ11tJ'UBn~-J1~1~ii1tJ ~u~ ~ 1'U '1::: ~ B~?!B ~ fl6" B~ tl'U 'U LtJ'U 1 tJ fl11l.J ~'U fl~ tJfl e:i~3i'tJ?111?1'UL VI 131"VB~ 11 ~~ tJ1u1fl11'111~ 1~ tJ1 ~ L ll'U1 tJmii LL'U1tJi)u~ m 1ii~'Yfl~'llm1~3i'CJ6'11V1-r'U

Vl{~tnm~flflfl

2) ~ tl~~ ~ 1 ~fl~'U1l.J1 'U'1qiqi11:::V111~~-u fl~1'Ubbfl:::'VIU1 tJ~1'U11'1 :::hJ b ti~ b~ CJ fl11l.J~'U"IJ B~

'VIU1 tJ~1'U (Non-Disclosure Agreement: N DA) 1~ tJfl1ifl~'U1l.J.Q'1::: b U'U~1'U'Vl;j~"VB~ n1111~1~~,r fl~1'U

I SI SI

n1111'11\lbbl:11

3.2. ':i~vt11..:im':i·•~h.,:i.:nu (During employment)

1~Cl'lh~a..:irl b~a1Vf"W'Ll'n..:i1'Ubbl:1~~~vh61ruru141.:i~1~vt'Ll'nbb1:1~tlf1Wi1?rn.Jvtti1~m1:w-ru~~"lla'U~1'UA11:w • '\J QI" d.J

~'UA.:JD1:1 fl ~J) tJ6'f116'f'Ub VIPl'LJ 8..:l~'U bfl-.'.l

'Ll1au1a

3.2.1 VIU1~1"111:w-ru~~"lleJ'U"lleJ..:l~'U~V11':i (Management responsibilities)

1) l'i' a.:i 1 Vf eJl .U.:i1'U bb"1~vt'11 ti.:i1'Um ti'Ua n~1141.:imtl~u~.:i1'U1uvi11u 'U 1tiu1 ti~ b~ti1.Ua.:inu m11mnm1:w~'Ufl.:itl1:1B~nti6'f116'f'UbV1P1

3.2.2 m':ia~1..:i1"11111~':i~vrtl'n m':iLVl\011111~ bbfl~m':itJneiu':i11~1'U1"11111ai''U1"1..:itlf!ei~.naa1':ia'Ub'Vll°I (Information security awareness, education and training)

1) b 41vtti1~1vtlll'i'a.:i1~-ru m1Bu1:w b~ ti1nrn~a.:i'U1tiu1 tim1-rm~1m1:w~'Ufl.:itl1:1B~nti 1~ti m1b tl'U'11'Uvt~.:i'Va.:i m1tl~:w-U b 'VlPl'W'Ll' n.:i1'U 1~ ti1 VIL ll'Ll1 tlm:w bb 'U1tliju~fl11:w~'Ufl.:itli:ia~n ti~1vt-ru vi-r'WtJ1n1'UflA1:1

3.3. n1':i~'U~~Vl~e:Jn1':ib'll~E!'Un1':i~1..:i..:i1'U (Termination and change of employment)

1~m.h~a..:irl b ~a 1 Vitim~ nvt~m tl~ ti'U bb tli:i.:i~'Vl6nrn 41vtti1~ vt~m 41vtti1~'11 nvt'11 ti.:i1'U.n1 ti'Ua n~1:1 n ' "

tim~ nvt~a b tl~ ti'Ubb tli:i.:im141.:i.:i1'U b ~a-rm~n 11zj.:im1:w~'UA.:itli:ia~nti6'f116'f'Ub VIP!

'W1au1a

3.3.1 n1':i~'l.Ja~V1~eJn1':ib'll~El'Ubb 'llfl..:!VIU1~fl1111-ru~~"lleJ'U"lleJ.:Jn1':i~1.:J..:11'U (Termination or '

change of employment responsibilities)

1) b ~a 1 Vf m1u~vt11~~m1uni:tim i b ll'U 1 tla~1.:i1:1nl'i'a.:i Lbi:i~b tl'UU'1'1U'U~6'f ~ L41vtti1~uflA1:1~ o~ \J \J 'I 'I 'I

~bbl:1Vl-r'WtJ1fl1'UAA1:1'1J8\l L 1\l'WtJ1'U1m1"ll1~ l'i'a.:Jbb4.:i1 Vf Pl'UVA811~1 b~8~'Vl11'U~'UtibdaikVl~~.:id '\J 'I \f 'I

I SI

- n1':i11'11\l\l1'U .J I SI

- nT~b tJi;i tl'Ubb Ul:1\l6'f.fl1'Wn1111'11\l\l1'U

- m11:11min'11n.:i1'U vt~fom1~'U6'f~m1bU'U~u~m1 'W'Ll'n.:i1'U bbm~i:in41.:i vt~am1~.:ibbn ' " "

- m11timJ1tivt'11ti.:i1'U

- m1~n.:i1'U m11:1.:i 1 'Vl~V11.:i1'Ll'ti vt~a1~~um1tl~Wivtti1~ tJ <\' .a.d ti C1i1 d ll d I.I II

2) mwu1-aan ~1.:J'Wti1u11:111"U11:1~a.:im~uum11:1.:i'Vl~b'Uti'1.Jn1w1n - aambi:i~mru~a.:Jb'V1

1tltl~u~.:i1'U1 'U Zone l'i'a..:i 1~-r'Uel'4t1J1~ bbl:1~a~L 'UA11:WA1'U~:W'V8.:Jb41vtti1~'1Ja.:i L41vtti1ffi 1.:J'WtJ1'U11:111"ll ' oi:::.ddQ.J Q

1t:1'Vl1'Ut:J~"ll8'U

3) 'Vl-r'Wv~'U 11.:i'Wti1u1m1"ll1~~~1~t1)vt~mtl'Um1:w~u'1Ja.:i 11.:i'Wtl1'U11:111"U1~ Vf1:wt11aan

'UBn 11.:i"Wmu1m1"ll1m~m~~'V1~ vt~a~11e:i.:ioila:wi:i 11~~'U'Uein 11.:i'Wti1u11:111"U1~ "

'Vlil1l91~ 4 n1':i'U~'Vl1':iiij'l9\n1'~'Vli''Wa~'U (Asset Management)

4.1 'VIU1~f111iii'u~l91"!1e:J'U\9iei~'U'Vli''Wa (Responsibi.lity for Assets)

11Plmh~~\lioi L~ei 1~1~U~'UV1-rvitl'1lei'1L1-:iviCJ1u1'1LL'1~n1V1'Ul9\V1tJ1~m1lJ-rutJ\91"1rnu1 'Um1umn'U~'UV1-rvi tl • • eJ~1-:JL'VllJ1~~lJ

WV'U1V

4.1.1 Uqj~'Vli''Wa~'U (Inventory of assets)

1) 'Vlt11 CJ-:J1'U ~ eM~ l9lvl1 LL'1~ LnUVI~ L iJ CJ'UUtu~Vl-rVl tl~'U ( e:itJ m rufleJlJYl1 Lmli-eitJ mru\9i e:ivh-:i ., . . fle:JlJfl1 L\;leJ{-Lfl~eJ~1CJLL'1~'1J~ L 'IJ':iLLmlJrl1 L ~"il1'\.J) eJ'U'IJ'rn ne:JU~1 CJ zje:ie:itJ mru 'VllJ1CJL'1'1JfJ1.fi'rusvl tJ~1~-ru

, \I 'I 'I

G"fm'Um .U-:i1'U LL'1~er-rutl\91'1Je:iue:i~1-:ii\91L"il'U L ~e:i L u'U-LJ'e:ilJ'1rl1V1-ru m':i\111 tJ1 Lf111~"1 LL'1~tJ1~Ll1'Um1lJ L~ CJ-:i 'U 'U

11lJ~-:J fl11U1'Vl11~~ fl11fl11lJ L~CJ-:J 1~€1~1-:J L 'VllJ1~6"flJ 2) ~e:i-:iilm1mTOJG"fe:iu tJfotJ1-:i VIUVl1'U V1~LDCJ'Uuru~V1-rvitl~'UmlJ1~CJ~nm~n1V1'U\91L'li'U il . .,

m1()111"iJG"feiutJfotJ1-:iV1~LDCJ'UUf'1l~V1-rvitl~'UV1n 61 1 tJ V1~mdeiilm1LtJ~CJ'ULL'IJ'1-:i'1Je:i-:ie:itJmru " u~ , I ,

4.1.2 ~~e:Jfl':ie:J'l'Vli'wd~u (ownership of assets)

1) 'Vlt11 cMTU ~ €1-:J 1~Uzjtl er-ru tJ ~'IJ eJU \9J eJVl-rVl tl~'U eJ ~1-:JoU ~ L "il'U LL'1~ijn11VI UVITUtJ-rutJ':i-:J 11 CJzjeJ • 'U ,

er~utJ\91'/JeJU \9Je:iV1-rVl tl~'UVI nfl~-:J~i1n11L tJ~ CJ'U LL 'IJ'1-:J 'U •

4.1.3 n1':ibii'V1i'wd~uei~1\lb'Vlil1~~ii (Acceptable use of assets)

1) ~eNii n11~\9lvl1 n!J 1~ L ,j CJU VI~ rnnrusvl n11~\916"111~'\.J mrufleJlJYl1 L\;l e:i{b ~L 'VllJ1~6"f lJ nu

m1~n"il LL'1~uflmm L\91CJi1m1V1uV11'UlJ'1~ 1 fl~-:i • 2) vltl-:J~~vl1~ljtl n11b oU-:J1'UeJ'IJ mrufleJlJfl1 L\;leJ{ e:itJ mru\9Je:ivb-:JfleJlJfl1 L\;leJ{ Lfl~tl~1 CJLL'1 ~'IJ~

\I 'I 'I 'I

1 tJ1LLmlJrl1 L ~"il1'\.J 11lJii-:Jn1'Vl'U \9l~'Ul'l €l'Un11\91 LL'1-rm~m U'U11 CJeJ'IJ mru 'U 'U •

4.1.4 m':ifi'LIVli''Wa~u (Return of assets)

1) i1m1n1V1'U~'U 1CJu1CJ 1 ~m .Uvi'e:i-:i~'UVl-rvitl~'U'lJe:i-:i 11-:ivi CJ1u1'111'1J1~~-:i'VllJ\91~11-:iviCJ1u1'111'1J 'U

1~~e:ime:i-:i Li1e:ii'UG"f\9lm1~1-:i-:i1'U 'VllJ\916"run11 i'UG"f\9loLJeJ()ln'1-:im1~1-:i 'Vl~e:i'Vlnfl~'l~ilm1L'IJ~t1'ULL'IJ'1-:i 'I "'g~ , 'I

2) vitrn-:i1'U~i'U~~6"qJqJ1~1-:i-:i1'U 'Vl~e:ii'U~\911m-:i m1vi'e:i-:i~'U'Vl-rvi tl~'UG"f116"f'UL V1fll9i1-:i ~ ~ fotl\91'1Je:iu~-:i'VllJ\91L'li'U ~'1JLL"il u()11'\.J1~~1\K1 fle:ilJVl1L()le:iiLL'1~~tJmru\9ie:ivh-:i Lll'Uvi''U

4.2 m1iijl91.ff'Ufl11il~'ll"lle:J\l~1':i~'Ub'Vlfl (Information classification)

11Pl'1'1J1~~\lioi L ~e:i 1 ~~'UVl-rvitl6"1116"f'UL VI f11~fow~u n11U €1\l n'U~ L 'VllJ1~6"flJ L\9lt!G"f €l (91 fl~eJ-:J nu fl11lJrl1 fltu'lleJ\l . ., ~ .d.::=:t I '

6"1116"f'ULVlfl'U'UVllJ()lffEJ-:Jflm

ylvu1v ,, 4.2.1 oU'Ufl11~~'1.l"lleJ\l~T'rn'Ub'Vlfl (Classification of information)

1) ~e:i-:iv'i1m1~\91V1m \9l'Vll.i~'U'Vl-rvi tl n1V1'U\911~~ufl11lJrl1fi'ru Lb'1 ~n1V1'U ~~'Ufl11lJ~rn ~e:iue:i-:i n'U 'U .,

6"1116"1'Ub Vlf11 ~i1fl11lJ'IJ'1e:i~.fi'CJ L\91CJtJi]u~mlJ1~L iJ CJu11~1CJm1-rn~1m1lJ~U'1Je:i-:i11'1Jm1 vi. 131.2544

2) i1m1n1'Vl'U\9llJ'11?11n11UeJ\ln'UeJ'IJ mru6"1116"f'UL Vlf1~1 oU-:J1'U'UeJn n"iJ n11 L 'li'U rl1'Vl'U~ 1~i1m11G'1 , 1~6"1~1'U neJ'Ufl111 oU-:J1'U e:itJ mru ,

4.2.2 n1':iU\l~~Trn'Ub'Vlfl (Labeling of information)

1) ~e:i-:i~~v'i1u1t1zje:i~'UV1-rvitle:i~1-:ii~L"il'U

d II .cl

'Vl3J1Vl'Vl 5 fl11Fl1'UIOJ1lfl1'H"ll1Cl\I (Access Control)

5.1 Fl113J~el\lfl11'Vl1\lfi1fllil~1'Vl~'Ufl11Fl1'UFl3Jfl11bil1ii\I (Business requirements of access • • control) _., • I ~ d 0 ... II "' • I '. I 11d111 ... 1Vl~u1::~\IFI b'V'leJ"il1fl\?1fl1'W1J1Cl-!l?f1'H'1'Ub'Vl\31 bb"'~~ufl'HUuWl.n"'(:,l"'?f11?f'\Jb'Vl\3lbO'V'l1~~'Vl 1?11'Ufl\iqj1V1

llieiu1ei

5.1.1 'lJ Lf.l'U1f.lFl1'UIOJ1lfl11b-b'1ii\I (Access Control Policy)

1) fl1) n1vt'U\?1~-S'Uti1?1'1Jfl'U.n1tJ1'U11-:i'V'l tJ1'U1m1'1J1Ci bb"'d1l.ln'U~"iJ11ru1fleJ floLJfl n1vt'U\?11 'Um1 'IJ

b oif15-:i1~'U'U bb"'~i1m1tJ1~ml311 oU'fl~1-:ib tJ'Uvn-:im1 b 'll'U n1vt'U1?1a'Vl51'Ufl1':iboif11.U-:i1'U 1 'LlfltJmruf1eJl.1~1bviB{ • n1vt'U1?1a'Vl51 'Um':ib oif'l 1.U-:i1'Ui~'U'U

5.1.2 fl1':ibeU1ii\lbF1~ei"li1mb~::u~nT'HF1~ei"li1ei (Access to networks and network services)

1) i1flTrn-:i'Vl~b ti tJ'UG11vt'S''Urn .U-:i1'U 1 vtl.IL1?1tJfl1i~m!'U~1vi'U 'IJ

2) fl11n1vt'U\?11 ~i1 n1i~"iJ11ru1a'Vl51'Ufl1)boif1'1-:ioif eJl.1"''1JeJ-:im ml?1tJ n1vt'U1?11~'U'U n11boif15-:i 'IJ 'IJ

Q.I ~ Q.I .:d A ~ I.I ~ I.I I.I ti ..:::J A

?111?t'U b 'Vl\31V11l.11~1?1'U'1J'U m1l.l"''U?f 11?t'U b 'Vl\31, l.I fl1':i'Vl'U'Vl1'U?f'Vlofl1':i b '1J1Cl-:J'1Jfl~"''1Jfl-:J b "il1'Vl'U1'Vl bl?1l.I

tiiei'U1EJ

5.2.1 fl11~\l'Vl::bUf.l'IJbb~:m11CleJVICleJ\J~'Vl'5~-U\11'1J (User registration and de-registration)

1) m1"'-:i'Vl~b titJ'U0 .U-:i1'U1 vt~ l'i'fl-:in1vt'U1?11 ~i11~b UtJ'UtJlj'IJ~fl ~1-:ib ll'U'Vl1-:im1b ~fl 1~?11m1Cl1-U .:11'U':i~'U'U?t11?tm 'Vl\31 brn~':i~'U'U bf1~eJ~1tJf1fll.1~1 bV)fl{ 1 'Umru~m .U-:i1'U~'U?t1?1?tm'U.n1'V'll'i'fl-:itJ fl b~flflflfl"iJ1n

'IJ ' ... d

}~'U'U'Vl'U'Vlml.I

5.2.2 fl11lijvinT~~'Vl'5n11b-b'1ii\1'1JeJ\l~oU\11'1J (User .access provisioning)

2) ~(?) bb"')~'U'U\91 eJ-:Ji1 m~'U1'U fl11n1'Vl'Ul?1a'Vl61 ~f))fl'U f)"'l.Jm otl.:11'U 1 ~f))'U'Vl fltJ':i~ b.f1'Vl bb"':J''Vl fl fl1) '\Jl\,J , \J 'l ,

'U~fl1)'1JeJ.:J':i~'U'U?f1)?f'Ub 'Vl\31

5.2.3 fl11'U~V111lij~n11~V1'5n11b-b'1ii\lvi1111::~'1.J~'V,1'5 (Management of privileged access

right)

1) ~1?1bb"'1~'U'Ul9i'eJ-:in1vt'U1?1aV16rn .U.:11'U1'Ufl1)boif1~.:11~'U'U?f11?f'Ub 'Vlmbl))"'~)~'U'U 11l.J~\ln1vt'U\?1 'IJ'IJ 'IJ

' A A II .i::::jQ.J A

?f'Vl6UtJflV11l.J'Vl'U1'Vl)'U(:,11?1'1Jfl'U

5.2.4 n11u~V111lij~fl11-b'eiaJ~fll113Jgl'lHh'Vl~'Ufl11W~liltl~1vitJ'1JeJ\lrnoU\ITU (Management of v v v

5.'2.5 fl11'Vl'U'Vl1'1J~'Vl5fl11beU1ii\1'1JeJ\INi.~\11'1J (Review of user access right) v

1) ~ (?) bb"')~'U'U l'i'B-:i'Vl'U'Vl1'Ua'Vl51'Ufl1)boif15.:11~'U'U?f 1':i?f'Ub VI \31V11l.11~ tJ ~ b 1m~ n1vt'U\?111 fl ~1-:i 'IJ'IJ

~BtJll"'~ 1 f1~-:i 5.2.6 fl11CleJ~CleJ'IJ'Vl~eitl~utJ1\l~'V15fl11beU1ii\I (Removal of adjustment of access rights) •

1) LdaL~1vriJ1~ Ltl~EJ'WLLtl'1-:i t1-rrnt1~EJ'W 1EJmJ1EJ rn1v11-:i1'Wvr~r:i61ruru1~mwrnT~~1-:i ~~LL'1 u " , '\I \I

W'U 'lJ \Pl B-:Jvl 1 fl11!.I B ~!.I B'WVl~atl-rtJtl 1-:J ~VI 51 ~rnwi' B-:J ' 'U

5.3 'WW1~fl'J1:1J-ru~\il"!fB\J"UB..:!~"ti..:i1'W (User responsibilities)

1~!.itl-a:::a..:il°l b ~B 1 ~m-u,n'Wi1m1:1J-r'U~\il'IJB'U1 'Wfl11UrJ.:jtl'WoLJB:IJ'1fl11'W?!'1U~1~lJ ' 'U 'U 'U

ylmJ1EJ

information)

1) m-U..:i1'Wl'i'r:i.:itlrhj'&im:1Jrn1F11tJF1:1Jrn1L .U1n.:i?111?1'WL Vl~a.:iri'm rn1n1vt'Wlil rn1L tl~EJ'WLL 'Li'1.:i 'U ~ '

rn1EJ m~ m~?1~1'W LL'1::: rn 1~ Iii rn1mtJ ~:IJ rn11-U1~?1~1'Wm:1J LL 'W1'Li ~u&i n111-U.:i1'W?111?1'W L Vl~1 ~li''W fl.:i U'1B~JlV

2) 1~?! ~1'W nab iJ'WoLJB:IJ'1 '1tJ bb'1::: b iJ'UvriJ1~'1JrJ.:j rn oU.:i1'WVI flfl'W~ \Pl a.:i b ntJ-r fl'l~n1~?! ~1'W B ~ 1-:i 'U 'U '

li''Wfl.:itl'1B~JlV 3) rn-b'.:i1'W\Pla-:i-r'U ~\il'llB'UvlBfl11m:::vi'11~ 61 ~m:::vi'1~1'WUru~rn oU.:i1'WLL'1:::1-M'?l~1'W'UB.:i~'W

\I I u 'ti

5.4 fl11fl'J\J~:IJnTnou15..:i1:::uu (System and application access control)

1~ ritl-a:::a..:i\Ol b ~BUB.:i tl'W fl11 b oLJ'1n.:i1:::'U'U?f11?f'W b VI~ bb'1~oLJB:IJ'1'U'W1:::'U'U?f 11?f'WL VI~ b\il El 1:1J1\il-r'UB'W ru11'1 ' '\I , u

WEJu1EJ

5.4.1 m1~1nlilfl1'aL-li'15..:ia1-aam'V1A (Information access restriction)

1) \Plr:i.:iflTUfl:IJfl11L -U'.:i1'W?111?f'WLVl~1 'W1:::tJtJ?f11?f'WLVI~ 11ii'LLn n1vt'Wlil~V151 'Wrn11-b'.:i1'W hi'Lbn '

L~EJ'W ~1'W '1'U 1~ LU'W~'W n1vr'W~fl'1:1J'UB.:im-U.:i1'W ~?!1:1J11!.i1-b'.:i1'W1\il 1'111'1?!B'UrJ1 '111?f'WLVl~~B'Wru11'11~ , \I , Q,I

11.1 ~ "' I.I d 0 .f1 I.I 11.1 '1l.:i1'W'W'W:IJ LUV11:::'Um;J'1V1'11 b u'Wl?IB-:J '1J.:i1'W

2) Uty~rJl eU.:i1'W~i1~VICTfl11b .LJ1n.:iWtJ'U?f11?f'WL V1~1 'W1:::~tJYiL~~ b -tl'W Root Vl~BAdministrator l'i'r:i-:i 1til~'Ufl11Yi'111'1.J1:1JB'UVl:IJ1V 1 ~LLnrJl eU.:i1'Wl'l1:1Jfl11:1J'11L iJ'U bb'1:::n1Vl'W\il1:::EJ:::L 1'11 L 'Wfl11

" II cf I Q.J 0 I Q.I

L 'tl1!.l.:ia m.:i L vrm:::?t:IJfl'U rn1V11.:i1'WL Vl1'W'W

3) ~flfl'1.fl1V'WBfl ~r:i.:i bb?f \il.:jfl'J1:1J~'WEJB:1Jtl~u&im:IJ'W bEJ'U1Elbb'1::: Lb 'W1tl~u&i1 'Wfl11-rfl~1fl11:1J

li' 'W fl.:i U '1B~Ji'ElIii'1'W?!11?f 'W b VI ~'U a.:i :IJVl11VIEl1'1ElB~1-:i b fl~ .:i fl-r Iii n B 'W ~ '1::: 1\il-ru B 'W ru11?1L~b.LJ1n.:i1::: tJ tJ '"'

?!11'1'WLVl~'UB.:i b 1.:iVIEJ1'U1G'l11'1l1~

5.4.2 .ff 'Y l'!e:>t.rn1-atlnu~~hvr~u m-a~an ~m-li1-a:::uu~iJ1"111i.ili''Yfl.:itl~ a \illl v (Secure log-on

procedures)

1) fl11 b .U1n.:i1~tJ'U1'i' a.:in fl11fl1'U ~:IJ b\il EJ~1'WVl1.:j~'W ~ B'WU ~u&i6'11vr-r'U fl11~ BflB'WL oLJ11~'U'U~i1 m1:1Jli''Wfl.:iUG'lB\illl El m:1.1 LL'Y1Vl1.:itlijtJ°® fl11fl?'U ~:IJ rn1 L .LJ1n.:i1~uutliju® fl1'l

5.4.3 m"Stmt1ium11e:i·firitli~1tJ"lftJ (Use of privileged utility programs)

1) ~eNn1vtu~ 1 iXm'U~:wmi1 i1 tliLLm:wBiiritlw LtJ"lltl~1vt-r'Uw'U'U L ~BllB\lnumiL .LJ15.:i 1~ tJ

~mlJ1~-r'UB'Uill1\?l 1~LLri 'U '.,

- riBu1i~B\l~1n1i~'1~tl~1viuriBu 'U "

- 1iX~1mimm1tliLLm:wtJVi~~BBn~1n1 tliLLm:wi~'U'lM1'U 'U

- '11n~mi 1i\l1u1 tliLLm:wtJVi~&fl iXLovn~er~1~-r'U:wB'UvtmmL~1 L vhi!u 'U 'U

- 1iXiJuVim1tJ'1~LBtJ~miL.LJ11i\l1'UltliLLn1:WtJVi~~ 'U

II~ '~II ~ti ( 5.4.4 n1'SFl'J'Ufll.ln1'H"tl1Cl..:16ZleJ':iftbFl~"tleJ..:lb 'SLbn111 Access Control to program source

code)

1) iimin1vtu~i~~'UFl11:Wtl'1 a~fltJ"UB\l L .LJ11 is1rn{'11A~"11€l\l L tl iLLm:w L uu'11~'U~Um1:w tl'1 B~fl tJ L ~m'j B\l tl'U L~ tJ1 tl'UoLJ B:W'1~ qjvt1 tJvt~B ilsirn{'11f1~~1~1~i''U mieJ'vi L~Vl i1 tJ mi LLm "11L.LJ11tl€l~1\l

" Cln\?lB.:J 'U

6.1 111~'Sn1'SL"li'1"S~a"li'e:i3J'6'1 (Cryptographic controls)

1~ritl"S::a..:iA' L~B1mimiLoLJ1':i~'1oLJB:W'1B~1\lLvtm~'1mL'1~1~e.rn uB.:inum1:w~'U mitl'1m.JLLtl'1.:i vt~a ' 'U

" Fl11:WCln\?lB.:J"UB.:J'11,'1'ULVl~ 'U

lliEJu1tJ

6.1.1 'UbtJ'\.J1tJn11.1"11111~'Sn1'SL"li'1"S~a"li'e:i3J'ri'I (Policy on the use of cryptographic

controls)

1) ~a.:iilmviimiL.LJ1i~'1oLJm;J'1L ~BUB.:Jtl'U'11i'1'UL Vl~ m,~~~1LL'1~tl~lliivi1:wu 1tJ'U1tJf111:W

~'UFl\lU'1B~fltJi~'U'U'11,'1'UL Vl~ , 6.1.2 n1':i'U~V11'S:S'~m':i~tyLL~ (Key Management)

1) ~B.:i~~~1LL u1tl~iJ~mi1 i.:i1u~ryLL'1 L~alla.:inumiL tl~tJ'ULLtl'1.:i tl'1B:WLL tl'1.:ioUm;J'1

'Vll.l'J~~ 7 Fl'J1lJ~'UFl..:!tl'6'1e:i~iltJV11..:ln1tJflTVHL'ri'l::a.ri1mL 'J~t1e:i11 (Physical and environmental

security)

JI dd11 .., v ti .., ( ) 7.1 V'l'U'Vl'Vl~e:i..:im·rn1i'rn'l!t1F111:u:uuF1..:i ~rn~m.1 Secure Areas

1~m.h::a..:ifi' L ~aua.:inumiL .LJ15\lvi1.:imtJmvi 1~tJ 1lJ1~-r'UautlJ1vi ri11:wL~tJvt1tJ LL'1~m,LLviimL61J.:imi ' '

~1.:11'1..1 ~il~B'11,'1'UL Vl~ LL(l~ atl mrutl W3.J1'1eJ'1'11,'1'U L Vl~"Ufl\lf).:J Am '

YbtJ'U1tJ

7.1.1 "tleJ'\.JL"tl~~'U~'Vl~eJ'U~b'Jru fatJ'SeJ'l.l'Vl1..:ln1tJfl1V'I (Physical security perimeter)

1) ~a.:i LL tl.:i~u~a ~ 1\loU~ L ~u LL'1~ n1vtu~i~~'U m,m'Uri:w L ~all a.:i nu mi L .U15..:i~uvi-rvi ~ ' .c::il.c::il 0 Q..I

'11i'1'U L Vl~Vl:Wfn 111'11FI tlJ II QJ O Q..I O I J' .c:J I A tl 1111/d II

2) I'] a.:i~~Vl1 LLeJ'UeJ.:J LL'1~.:J m LL vt'U.:J LL'1 ~'V'l'UVl LLl'l'1 ~"ll'U~ LL(l ~ i~ m~ vteJ Ln tJ1"1J€l.:!Vl'.i1'l.I 'U

7.1.2 m1F11u~11nTwb'1ae:invi1..:imEJfl1'V'l (Physical entry controls)

1) ~€1..:JFITUFll.J 1 ~btl~1~~~ii~'V15 Vl~e:i~vftv1'·hrn'Uru1\>16'11l.J1"H'\b oLJ1€1€Jfl 1 'U~'U~ , \I \I " ti .

2) ~€J'lrl1Vl'U~~'V15 bb6'l~oU1'lb16'111'Ufl11~1'UboLJ1€1€Jfl~'U~ 3) ~e:i.:iuuYiflm1~1m-U1e:ie:ifl 1 'U~'U~~611fi'qi 4) ~e:i.:i 1lJbu~tJ1~\>1611tl'rn1'U~.:i11 Vl~e:J~'UCJe:il.J1 ~uF1F16'l~'U~~ml.JboLJ1.n1CJ1'U~'U~rl1tl'rn1'U1~CJ

u '

b~~'l.11~ bi''Ubb~'UflF16'l~mrm11m1mb?1~.:iu\>11tJ1~"6'1~1 Vl~e:iu\>11~l.J1~~~e:i1v1' b~mtJ'Um1tle:i.:in'Lim1b-U'1Ci.:i ' u

~'U~ 611-U rn1'U bbfl ~~'U~ mu Fll.J m 1l.J~'U F1.:itJ6'1e:i~Ji'CJ1~ CJ'U Fl Fl fl ~1lJ1v1'-ru e:J'U ru 1 \>l 'I , , Cl.I

7.1.3 nT~~n~1F11111~uF1.:itJ'rile:i~Ji'vd1vi~u ~1'U'l1'U ~e:i.:ivi1.:i1mbfil::~tJn-Hu (securing office,

room and facilities)

/ 1) ~e:i.:i~~ 1 ~iil.J1mfl111'Um1-rrn~1m1l.J~'UF1.:itJffei~Ji'CJ~'U11 ~nu611tl'fl.:i1'U ~e:i.:iv11.:i1'Ubb6'1~ · bfl~eN~e:i~ 1-:i '1 b oU'U bF1~e:i.:iF1e:il.J~1 b\>le:J1Vl~e:i1~uu~iiF111l.Jrl11°lru6'1.:i~ e:i.:i 1lJ ~.:i e:i CJ L 'U'U~ n ru~ii m 1~1m-U1 e:i e:i fl I llll'\J '\J

~I o '1.1€l'l'UFIFl6'lbu'U"il1'U1'U111fl

' 2) L ..ij 1vi-W1~ m1\>111"il6'1e:ium111~'UF1'l'lJfle:i ~Ji' CJ'1.le:i.:i~'U~v\' 1.:i1'U'1.le:i.:i \>l'U b lJ'UtJ 1~"6'1V1 fli''UV!~.:i b~ fl

' .:i1'Ub~e:i1~~'Uh11~b611'\i'J ~be:ifl?111 i'Wifl mi~e:itJmru~1.:i'1 1v1'-rum-au~~e:iFI e:itl1.:iLVl111~?111 bbfl~flrubb"il \I " , I "v

~mnu-rmn 11e:itl1.:itJ6'le:i~Ji'CJ 3) -U'e:il.Jfl ~e:iu'UVifl 16'1~ bbfl~e:itJmru~~~bnu-U'e:il.J6'l~ut?le:i.:i1lJnfl~.:i111~m)1~.:iu'U1~~vh.:i1'U 1 'LI

\I 'I , \I \I

~e:i.:itJ1~'1ll.J Vl~e:i 1'U~vftl.J1v1'~e:iFlflrubb"il1~m~~'1.11~ , \I " Ill.I

4) -Um.if\ ~e:iu'WVifl 16'1~ bbfl~e:itJmru~~~bnu-U'e:il.J6'l~ut?le:i.:i1lJnfl~.:ifl.:i1'W'1.:i'1.ICJ~1~CJ 1lJ1v1'-rum-a \I , , \I '\J

v11m CJe:i tl1.:i b Vlm~?ll.J 1~ CJ 1 ~b ll'W 1 tJ \>1111 bb i..ntJ nu11 m1v11m CJoLJeJl.Jfl'Vl~e:in1~ ~~e:iu'WVi fl.tr e:i116'1 d.J u ~

5) b ..ij 1V!-U'1~ t1i' e:i.:i 1lJ ~'W CJ e:i111 ~rn~v11 fl11 bFI~ eJ'U tf 1 CJ bFI ~e:i.:i Fl eJl.J'W1 b\>l e:i1Vl~ e:i ~ e:iu 'WVi n-LJ eJ116'1 e:i e:i fl u u

"iJ1n~'U~v11.:i1'W'1.leJ'l\>l'W 1~m~~'1.11~ b i''Wbb~ 'IJFlflfl~~m tl'Wb..ij1Vl-W'1~ ~hHue:i'Liru1\>l 1 ~i;11b U'Ufl11bbfl~b ll'W " \I q QJ

0 .c:i, d.::i 0 V I 1.1 I I ~ fl11~1 b 'U'U fl11'Vll.Jfl16'1'le:J CJ1'l ~fl(>l €J'l'1.leJ'l'Vl'U1 CJ'l1'U b '\111'\.J'U

7.1.4 m-aue:i.:in'U.tfo~nFl111'11nfl1CJ'UeJmbfil::~fl1'V'lbb 1~tie:i11 (protecting against external and

environment threats)

1) t?le:i.:in16tle:i.:in'U"il1nm1v11mCJ'1.le:i.:io11l.J'1.11~'\l!~e:ifl'U~e:i1"iJ"iJ~bii~~'U boU'U

- ii1~'\J'UL~eJ'WJlCJtlflb~'W mrut vJ1 Vll.J JTvb11 '

- iie:itJmru~ub~~.:i\>1111m\>11\i1'U ' "'

- ii1~uutJ-rumml21bbfl~m111F111m1l.J~'W '

- bbe.J 'U fl 111oU'l1'\.J v1'1'U Disaster Recovery Site Vl~ e:i-a~u 'U Fl e:i11 'W1b\?leJ16111e:i.:i dj e:i ii ~II CV~~ II 3

b'V!~ m-aru ~1'U.fl CJ~'U 1'1'1.leJ'l6'1.fl1~ bb1~6'leJ11'1.l'W

7.1.5 011tl~u~.:11'L!b'Ll~'Ll~~~e:i.:i011~n~1F111ii~'Llfl.:itl~e:i~JlEJ (Working is secure areas)

off'U\>lt1'Lltl~u~d1vi~um1tl~u~m1"l'Ll~u~ 1) 1'Uu~b1 ru~t?l e:i.:i m1-rn~1F11111~'Wfl'l'lJ6'1 e:i~Ji' CJt?i' e:i.:i~~tJ-a~ fl1131 bb..ij.:i b~eJ'W b oU'W "~111 b oLJ1 rie:i'U

1v1'-rum~qi1\>l"

2) m&~1m iu~m1.:i1'U?1tl'u?1'W'W~1'Wb 'Vlfl 1u 16'1 ~?111?1'\.Jb 'Vll31"il1fluF1F16'1.n1CJ'Ue:ifl rl1tl'rn1'U \'i'e:i.:iii ' '

W'\J'\J fl11\>l 11"il6'1eJ'U fl11U nu~'l1'U'1.leJ'l'U fl fl6'1.fl1 CJ'UeJfl e:i tl1.:i1e:iu fleJ'U bbfl~ -r~ fl11 b V1 CJ'l~ €J b oU'U ii fl111'111 "il6'1 e:J'U d.J ' '

7.1.6 ~'IJ~d1V1~\J~'rnl.:l~.:l"llel.:I (Delivery and loading areas)

) SJ .Jcv I,.::! JI dd.:::t al .ta! O .q

1 (?le:J.:J bbtl n~Vl'Vl':i'U?f .:J?f.:J"ll e:i.:i e:ie:imnnvnJ'Vl'Vl:i.J~ u mru u'H~:l.11'1 i:J'1 ?!1':i?f'U b 'Vl\:31 bb'1:::vi1 b 'U'U m·rnn:::

~'Uvle:J'Vl~e:J(?l':iTil?f e:J'U 1 VlL?f~'OJi'U rle:J'Ut11 L .LJ'1~~'U~~~e:i.:im1~n~1fl11:l.J~'U fl.:JU'1 e:ivin ti 'U

7.2 ~tln-aru (Equipment)

1'viqt1-a~~.:iioi L ~e:itle:i.:in'Um1~ry'Vl1t1 m1b~t1'V11t1 m1"1J 1:i.it1 'Vl~e:im1Lll'U5'U(?111t1~ e:i~'U'Vl~'W~bL'1:::tle:i.:in'U m1V1t1vi'll:::rn~e:i m1~1L il'LI.:i1'U"1Je:i.:i 11.:i'Wmu1m1"1J1n

' 'U1ti'U1tl

7.2.1 m-alij'~~.:!Lb'1~tlei.:in'U~tlmru (Equipment sitting and protection)

1) m1~vi~.:i 'Vl~e:im1~m1.:ie:itJmru~'U'Vl~'W6?111?1'UL'Vll31 e:itJmru1vi~i11"111:i.i~11°i'ru?1.:i~e:i.:i~m1.:i , 'I QJ\j

L 'U~L.LJ'1~.:i1~t11n 1.2.2 ca~urnL'1~~tlmrumru~'4'Un1-avl1.:i1u (Supporting Utilities)

1) e:itJmru~i1m1:i.i~1fi'n 1?f.:im1~vi~.:i1:::uutle:i.:in'U1"111:i.i~:i.i L 'Vlm"lle:i.:ie:itJmru L 61i'U 1:::uu~11e:i.:i , o~ \I 'I

- fl11:i.Jb~tl.:J?f.:J ~e:i.:ii11:::uu~11e:i.:i1'Vlvhrr.:i UPS LL'1::: Lfl~f).:Jfl1Lilvi1'Vlvh 'U

- m1:i.iL~t1.:itJ1'Unm.:i ~e:i.:ii1-a:::uu~11e:i.:i1 'VlvhuPs

- 1"111:i.ib~t1.:i~1i11:::uu~11e:i.:i1 vJV11V1~e:i tlJm~ 7.2.3 \01111l~tl\Ol-:!tl'1e:J~JlEJ"lle:J-:ln1"ib~'U~1EJatyC1J1ruLL'1::~1t1~ei~1-a (Cabling Security)

1) n11 b~'U?f1 ti~ ruru1 ru~ e:J.:Jfl1U.:J~.:Ji:J'1 m:::'Vl'U ~ e:J A11lJ L~ ti.:!~ e:J1'0J bnVl~'U b ~e:itJ e:J-:1 n'U~ ru ru1 ru u QI QI QI

?11t1~ryry1ru

- A11:i.iL~ci.:itJ1'Umn.:i m-aL~'U?11t1~e:i.:itle:i.:in'Umwu1~.:i?11t1~ryry1ru - m1:i.ib~t1.:i~11 oti?11t1~ryry1ru511:i.ivi1 - ~e:i.:ii1bbi:J'Un11m1'0J?fe:J'U"a:::'U'Un11b~'U?f1t11 vJ ?!1tlbAb'0'1 ?f1tl~e:J?f11 "1(;1"1

2) ~e:i.:ii1m1-v11tl1mnt1~ruru1ruotivib'OJ'U bb'1:::b~e:ii1m1btJ~t1'UbbU'1.:i~e:i.:ii1m1tJ~uth.:itl1t1 ... ... ' ?11t1~ryry1ru1Vf~n~e:i.:i

7.2.4 m-au11.:i~m~n~tlmru (Equipmel'.'lt maintenance)

1) ~ e:i.:i~vi 1 Vfi1 f111U1':i.:J-rn~1e:itJ mrub ~f) 1Vfi1?t.n1'W'W~f):l.J1 oU.:!1'UeJ ~1.:iiJe:i tlU'1::: 1 A~.:! 'Vl~f) ' '

:i.J1nffJ1(?11:i.J1:::~'UA11:i.J~1flty b61i'U d.. d ,, 0 ., ..

- 1:::uu'Vl:i.im1:i.ib?tt1.:i?f.:i(?le:i.:iu11.:i1m~n'Vln 1 bVJe:J'U • " , 't •

.,J.,. .,j •I ,, o ., "" - 1:::uu'Vl:i.im1rn?tt1.:iu1'Un'11.:i(?le:J.:J'U11.:i1n~1'Vln 3 bVle:J'U

' ' d~ _.cJ 6 ii 0 CV .di!

- ca:::uuVJ:i.ifl11:i.ib?tt1.:im(?le:i.:iu11.:i1n~1'Vln 12 bV!e:J'U ' '

7.2.5 m-atl1'Vl~vuJilu"11ei.:ih-:iwt11u1'111"1J1~eieinuein d1UM1'U (Removal of assets)

1) ·Vf 1:i.itl 1~'U'Vl~'W 6?f11?f'U b 'Vl\:318 e:J n'LI 8 n~'U ~fl e:J'U 1~~'U '€l'4 ty1 (?l'OJ1 n ~~'U ~ Vl"IJe:J'U bL'1 :::~ e:i.:ii11:::'U 'U

n11A1'UA:lJVlbb'1'Vl-r'W6~'U n1':i'1.:i'Vl:::bUtl'U'Vl-r'W6~'U /A':inru'1 bb'U'UvJe:i1:i.im':i~lJ-A'U'Vl-r'Wf1~'U , \I . ,

~ ti OI ti t OI t9 d'I II I ..J ( ' 7 .2.6 Fl113.J3.J'IJFl-!l fle:J\91.fltl°l.le:J-!le:J n'HUbbfl::'Vl'j'Wtlti'IJ'VI ~6U-!11'1Je:Jtl.fl1tl'IJB n ti1'1..1-!11'1..1 Security of • 'U

equipment and assets off-premises)

1) V11'YlV~'Wvi'l .U.:i1'Ue:i ~ m ti'Ue:i rn·hi! n.:i1'Uvi'e:i.:iij rn11'm~11"111:1J~'U 1°1.:itkrn (?l.n ti \911:1Jfl11:1J b~ti.:i b 'li'W "

- n1Vl'U(?l1'M'?tfl11boLJ1fi.:irn11.U.:i1'Ue:itJmrufl€J:IJ~'Jb1Pl€1{ • - n1vt'U(?l~-r'\.J~(?l'(fmm'1::(?lbb6'le:itJmru

" " ' - n1vt'U(?l~-r'\.J~(?l'(f€J'\.Jbb6'1::\9lbb6'le:itJmru~e:i.:iLbl-i~1ti

" " ' :

- ih~tJtJue:i.:in'U1"111:1JtJ'1v(?lnti L'li'U antivirus rn1n1vt'U(?l~V1B1.Unu 1.2.1 F1113.JituF1.:itlflei~Ji' vti1V1~um1fi1..ij\91V1~eivl1fl1 veitlmru V1~eim1tl1eiumw1 t1t .U.:i1uei~1.:i • •

~'IJ (Secure disposal or re-use of equipment)

1) -ff B:1J'1~LnueJ~u'U~eJi.J'WVin-U'e:i:1J'1 vnn 1l-liirn11.U.:i1'Ubb"'1vi'B.:iv11mti1 ~~'U61l1 n " " "

7.2.8 Btlmru"tJB.:irn.U.:i1u~v1'.:i11b\9lt11~ii~\9lbbfl (Unattended use equipment) • 'U 'U'U

1) vi'e:i.:iueJ.:in'U 1 ~mlJij~Vlcrb-U1n.:ie:itJmru~'UV11'Ylv?111?1'Ub Vll"1~1l.lij~(?lbb'1 " ' ""

7.2. 9 'IJ 1t1u1 ti Ui::vl1.:i1'1JUfl el~ beJn~1'jtl1~ 'Y bbfl::'IJ 1titJ1tlfl1'jUe:J.:i n'l..l'VIU1~e:Jfle:J3.Jti1 blPle:Ji (Clear

desk and clear screen policy)

1) b..ij1vt-W1~vi'e:i.:i1°11'\.Jfl:IJ beJnm1 -U'eJ:IJ'1 vt1€J~e:i~1.:i f1 ~ij-LJ'€1:1J6'16'11A'ru"5'(?lbn'U vt1e:ii.J'UVineJ~ 1:1J1 ~ , 'U I 'U " "

11.:iv1'.:i11tJ'U Hi ~'V11.:i1'Uvt1B 1 mrn1'W~1l-itJ'1eJ(?ln ti1 'U'llru~1l-11\91t11m1 i.:iTu \91'1€J(?l"il'Ufl11mtJ~:1Jvt-U1"iJ e:i

fleJ:IJ~'lblPleJ{ (Desktop) 1:1J1 ~ij-LJ'e:i~6'16'11A''YtJ11nn L 'U'llru~ 1l-11m .U.:i1'U

~ . 8.1 iti'Ul'leJ'IJfl1'j'tJ~Ui.:i1'Ubbfl::V1u1ViF1113.J~tJN\916U€1tJ (Operation Procedures and

Responsibilities)

1'1P1 tlU'j::~.:ifi b ~€1 1 ~rn1tJ f1llii.:i1'U nu eJtJ mrutJ1~m'1 ~'16'1116'l'Ub Vll"lb U'U 1 tJ €1 ~1.:1'1 flvl €1.:! bb6'l~~'Ufl.:!U'1 €J(?ln tJ ' d,J , \I

llivuw 8.1.1 ~'l..ll'IB'IJ~ijeJm'j'tJ~u~.:i1'1J~LU'Ufl1t1~n~wermn (Documented operating procedures)

1) ij rn1 bb tJ.:i:1Je:itJvtm ti bb'1~"5'(?1 bb tJ.:ivt-U1~1"111:1J1'tJ ~(?l'lfeJtJe:i ~1-:!oU(?l b "il'W'nm~.:iij~'U \91 eJ'Url~eJ rn1 'IJ

tJ~i.J~.:i1'U~ b U'U6'11 ti'1 n~ruer n~1 ~b'1 ~6'11:1J11ti b-ff 1fi.:i1~(?1 tl~~"i\'1 b u'U vi'eJ.:i 1 .U.:i1'U bb'1 ~ij1~'\.Ju rn11"11'\.J ~:IJ n1ntJ

~(?11P11:1JtJ1~bi3'U~'1n11tJ~tJ~.:i1'U\911:1Jvt-U1~fl11:1J1'tJ~(?l"lfeJtJe:i~1.:i~e:ib~e:i.:i 8.1.2 fl1'jtJ'iV11'j..ij\9Jfl1'jbtl~t1'UbbUfl-!l (Change management)

1) n1vt'U(?l L ~ijfl11m'\.Jfl:IJ fl TH tJ~ tl'Ubb tJ6'1.:!6'1116'l'Ub VII"! b 'li'U vl€1.:!i'.ifl11'1J€1€J'UlJ~"il1fl~U.:!A'\.JUru'1f1 , , 'U Cl.I

ne:i'U~1b'W'Wrn1

2) vi' €1.:!i'.i rn16'111e:i.:i-U'€1:1J6'1?1116'l'U b VII"! neJ'U fl11 b tJ~ tl'U bb U6'1'36'111?l'U b YI I'll "

8.1.3 n1'm~'Yl1'a~~m-a~~Fl11111it1111'Hl"!Jel-!l'a~'U'U (Capacity management)

1) fl11~(?1~.:!1~tJ'\.Jb~€JIP11T'il?leJ'\.J~(?l\911:1JVl1'Ylti1fl1'll€J.:!1~'\.J'\.J b'li'W CPU, Memory, Hard Disk 11

b fl ti.:i'\'le:ivt1B hJ bb6'l~i11-ff e:i:1J6'1 rn11P111"iJ?le:itJ ~(?lm:1J:1J111.:i bb~'U rn1 b ~:1Jvt1e:i'1 (?JVl1'Yl ti1m1 'WB'U1 fl\Pl 'IJ

8.1.4 m1bbE.rmtfl1wu 1ml'ei11i:i1V1~um1~~'1.J1 m1V1~aeiu bb1;u::m1t\1u~m1eieim11nn'l.J

(Separation of development, testing and operational environments)

1) ilnT'.i~1ieWUel~'1 fiel'U fl1'jtJ-rutJ~.:i bbm 'll b ~elfl1'j~~m fl1'j'Vl~?lel'U bb'1~fl1'j1 ~u~fl1'jel el mn n

2) vlel\l~~vh fl1i bbCJ m~uu 1 'Ufl1'j~WJ'U1 bb'1 ~1~uu m1m1"il ?lel'U bb'1 ~'j~'lJ'U fl1i 1 ~'U~fl1'jelel n"il1 n

tl'Ub ~el'1 ~rn11J b~ CJ\l'llel\l fl1i b .U1t'i.:ivt~el fl1'jb tJ ~ CJ'Ubb tl'1.:i~1vtfo m11~u~n1'j L~CJ hl1~-r'Uel'l.J ru1~ . , u

8.2 m1ue:i.:in'l.J'i:t11bbn1111~tJ1:::a.:ifli'~ (Protection from Malware)

1~rit11:::a.:i·fli' b ~el 1 ~?l1'j?l'l.Jb Vll31bb'1~eltlmrutJ'j~m'1c.J"1?111?1'Ub vil311~-r'lJm'juel.:in'U"il1n t tl'jbbm1J hltlw?t.:ifi' ' ' . .. ~

lliatJ1CJ

8.2.1111~1m1uei.:in'l.Jbtlibbn1:1JL~'lh:::a.:ifli'~ (Controls against malware)

1) bfl~el\l flel1J'IA11 b~B1~1'U'I~ flfl'1 bbG'l ~ bfl~f)\lfl el:IJ'IA11 b\91 B1 bb 'U'U'Vmvn fiBt.lb zjel1J~elB'U b 'VI el1b il (91 ~1'U b 1'U b 'Ui1 b61lel1 (Web browser) vlel\l~~~.:i 1 tJ'jbbni1JU el\ltl'ULJ-r?l bb'1~~~'11el.:i 1 vt1'1JB\li~'U'UtJlju~m'jbb'1~ .. ' L 1u b 'IJ'j1 b61lm

2) rrioUvlB.:itl-r'UtJ~.:i Patch OS el~1.:i?1J1b?ll.lel faCJ?l1:1J1'jflm1'Ulvti;:i~ Patch OS ~1\l~ "il1n

b 1u 161l~b~1'1Jel.:Jc.J~\91ilrusv1L ~mbnU(1lvt1'11el.:i t vd b th..1vi''U

3) 1 'Un1'j~'IJ~\loUm;J'1flel1J'1Al1 b\91el1~1'U'Vl1\lB'Ub 'Vlel{b U\91"il~vlB\l'Vl~?lel'U11-r?l (Virus Scanning)

t~CJ t tJ'jbbm:1Juel.:intJ11-r?tnel'Ufl1'j-rrn>f .:ioLJ'el~'1VJnA~.:i

8.3 m1i:i11e:i.:i-Ue:i~~ (Backup)

1'\91ritJ1:::a.:i fli' b ~elum n'LI fl1i?t ruvt1 CJ'llel\loLJell.1'1 bb'1~ 1~,t'U1 "il11i~'U'U?l1'j?t'Ub 'V113lel CJ L 'U?tfl1'Vl'Vl~el1J 1.U.:i1'U q \I QI \I \I

'UbE.ru1EJ

8.3.1 m1i:i11e:i.:iLL~:::nfi'l.JoUe:J:1Jli'I (Information backup and recovery) 'ti . 'ti

1) mh CJ .:i1'U ~ii LA ~el\l Ael1J'IA11b\91el1 Lbihh CJ1 ~'U~ n1'j1 ~~1 L iJ 'LI m 'j~1 'jfl\loLJ ell.l '1 ml.l bb 'U1 . " -n j A Q.14 0 IJ.:::!:il II

u £J'U (91n1''.i?l 1 'j el\l bb'1~n1''.i Q fl 'U"IIB\]'1

2) vi'el.:i~1i1"iJoLJ'el:1J'1 bb'1~~~'j~~'UA111J~1ri'ru n1vt'U~oLJ'el:1J'1~vi'el.:im'j~1iel\l bb'1:::rn11Jm 'U fl1'j " ~ "

3) oLJell.1'1~ilA11:1J~1ri'ru?t.:ivi'B.:i~~ 1 ~ilm1:1J~fl1'j~1'jel.:J:1J1n bL'1:::A'J'j~~ 1 ~ilfl1'j~1'jel\loLJel1J'1 \I • V\J \I

fl1CJ'Ueln~Tun.:i1'U ii .QI ii e:1 • ' d~ ~ II

4) \91B..'ll.Jfl1'jfl1:1JF)l.Jfl1'jb'IJ10..'J'V11..'Jfl1CJ.fl1'W ( Physical Access Control) 'IJB..'l?lm'U'Vl'Vlbn'U'llel~i;:i

~ 1 'jel\l ~el b~'U .LJ el1J i;:i vi' el.:i 1~-rti n T'.iu el .:in 'LI ?tel~ fl~ el.:i nu ·rn ~'U fl? 11J ~1 r1 ru'IJ el.:i 1:::ti'U ?t Trn'l.J b vi 131 " u

5) vi' el\l'VI ~?{ el'UoLJell.Ji;'l ~ ~ 1'jel\lel~1\l ?tJ 1 b?l1Jel ". 6) vlel\l'Vl~?lel'U?l.fl1'Vl'Vl~el:IJ1oU.:i1'U'IJel\l1:::'UtJ?l1'j?{'l.Jb'Vll31 'j:::'\JtJ~1'jel\l el~1.:iiJelCJtl'1~ 1 fl~\l 7) vt1 nvi' eliJfl1'jQf'i'LioUB~'11 ~~h b tJ'U m1tj'fi'YoUel~'1\911:1J \911:1Jbb'U1tl~u~ fl1'jri1'jel\lbb'1~fl1'Hj'fi'Y

8.4 n1':iU'IJVin-b'e>~~~e>mL~::m':iLN1':i::1.:i (Logging and Monitoring)

-r~mtJ':i::f;l.:i\Oi L~ei 1 ~~nT'jU'WVim V1\11n1'HULL'1::~~vl1V16Ymn'W . ' "' ylauw

8.4.1 m':iu'IJVin-b'e>~~~e>mLf;l~.:IL'Vl~m':iru (Event logging)

1) l"l'Wvflei:1.J'W1 L111ti1~ti.:iu'IJVi nm1vl1\11'W'1lti\l'rnuu~hMJ'W 1 tJ1111:1.JtJ n~ m1:1.J~ ~vrn1~ 1'Wm1 \I

vl1\11'W'1lti\11::uu bb'1::L V!\11 m1rufl11:1.Jri''Wfl\IU'1 ti~Ji' EJ ~ti\l~m1u'WVin 11 ~~ Lnu Lb'1::VltJVlTWti~1\161tl1 b61:1.lti '

b~ti1.rr~~1111:1.JmruLn~LV!~m1:1.Jri''Wfl\ltJ'1ti~nEJ 8.4.2 n1':iUeJ.:ltl'IJ-b'a~~~em (Protection of log information)

1) titJmruu'WVin-Um.m Loo LL'1::oLJti:1.J'1 loo ~ti'l1~-rum1llti\ltl'IJ'11nm1L tJ~EJ'Ubb U'1\I LLm'1lLL'1:: , \J ::> cu ::>

m1L .LJ'15'11~EJ 1~1~-rutimu1111 ' ., '2) ~eJ\l~n11\1111'161eJtJ~~\111:1.JU1::Li1'W~'11::tJtJnT~UeJ\ltl'UoLJtll;j'1~eJn~~'\.h::i'ivi5fl1'V'I

II A A II II II d Cll I A GIA (

8.4.3 '1JeJ1l~~an n\lnn11"Ua.:i ~~ Lb~':i::uu LL~:: L\11'Vl'IJ1'Vl unu~ n1':i':i::'U'U Administrator and \J \J\J ""'

operator logs)

1) nw111:1.J'1lti\I~~ LL'11::t1u LL'1::L~1V1-U'1~tlfiu~ m1~ti\l~m1u'WVi n 11 L ll'W.LJ'mrn~ti n -Uti:1.J'1 \l\l ~ \I \I

vl\I n~ 11 ~ ti\I~ m1ll ti\I tl'U LL'1 ::viu Vl1'W ti~ 1\161tl1 L61:1.l ti

8.4.4 n1':i~.:l'IJ1Wn1b~~n~a.:i (Clock Synchronization)

1) bfl~eJ\lflti:IJ'W1 b~ ti1LL~"tJ1EJVlnLfl~eJ\lfl1EJ1'Wb1\l'V'IEJ1tJ1'111'1ll~~eJ\l~\lb 1'111 ~\111 \ltl'U b~EJ b Yi EJtJ '

L 1m'11 m~1vJ ntiitJw611'U~\IV11:: L 1m~~'W~ flti:1.J'W1 L111tiim11 ~u~m1

"' 8.5 n1':ifl1'1..Jfl1ln1':i~~~.:i~avJ\91LL1i'U'IJ':i::'Uub~lJ°if11':i (Control 0f _operation software)

-r~~tl':i::fil.:ifl L~ti1 ~1::utJ1 ~tJ~m1~m1vl1\11'U~~n~ti\I WV'U1V

8.5.1 n1':i~~~.:i~avJ\9i'LL1iuu-a::uu1'1Xu'im-a (Installation of software on operation

systems)

1) 1 LFJ11::~11\I Lb~ 'W n11~ ~~ \161ltil'J ~LL 1iu'W1::uu n 111~tJ~n11 L ~ti u ti\I tl'W fl11:1.l L~ EJ \I~ ei

~'1m::'Vlu1 'Wm1~ ~~\161ltil'J~ LL 1i1::uu 1 ~u~m1~m'1 Ln~fl11:1.J~:1.J L V1'11

2) ~~'U111ti'WtJlju~G11V1-rum1fl1ufl:1.Jm1~~~\161ltil'J~LL11u'U1::t1u1~u~m1~ti\l~m1tJlju~m:1.J 1~'1e1~fl~eJ\I

3) 611tJ1 Lfl11::~tJ1:: Li1'U~'1 m1~~~\161ltivJ~ LL 1{ L ~m.111 tJ~m1tJ-rt1tJ1\111\I LL~'W m1~ ~~\I ' \I '

8.6 m1ti~m1:5'tilm1-tleN 1 Vl1'V11.:ib'VlflUfl (Technical Vulnerability Management)

11Pl~th::~.:ir1 L ~eliJel~n'Wrn11it11~1tJ'lltl1i11n-del~ 1 vt1'V11~ b 'Vlfl'Wfl

Wmnei

8.6.1 m1u~v111:5'tilm1-tle:i.:i1Vl1'V11.:iL'VlflUfl (Management of technical vulnerabilities)

1) iin11u~V111~vin11"1leN 1 vt1'V11-:i b 'Vlfl'WA'1lel~1~uu~1 .u~1'W~B~ii n11&ivimiJel ~1~~'W n11ru

1ilV1Bel'U~iei-del~ 1vt1~~n~11'1Jel~11~~tJ1u1'111'1Jin~el~iim1tl1~blJ'W bb'1~iJ1~1m1~b vtm~fliJ b ~el"3'tilm1nu ' .d .d .d ., fl11iJbf!tJ~'VlbfltJ1'1Jel~

8.6.2 m1lil1ntilfl1i~~~.:i61feitJ~u1{ (Restrictions on software installation)

1) 1~uuv11 Vfu~m1~el~Yl1m1 Patch 61lel'Yl~Ln1el~1-:i?1~1bfliJel 2) ~el~Yi1fl11'1t1 User ~'hJ1ii'1bU'Uelelfllil1fl1~'U'U b-d'U Test

3) ~el~uvi Service ~'hJ1mi~1'U 4) 61lel'W~ bL Tflvi hJ1m i~1'W~el~'1tJelelfl

8.7 ~.:i~~ei.:ioWlil1'H\J1b'Ufl111Pl111ilth::Lih.11::utJ (Information Systems Audit Considerations)

11Pl~'lh::~.:iio1 b ~el'1 vie.m m~'Vlt1'1Jel~nlil fl';j)iJ fl1)~)Jliltl1~ blJ'U'U'W'i~'UtJm Vl'U~fl1)fl11fl'U b 'V1 ~ 'UbeJ'IJ1eJ

8.7.11111Pl1fl11fl111Pl111ilth::Liju-a::uu (Information systems audit controls) 0 'I .'1 OJ .,j 1 OJ .J "'° I 0 ""

1) fl1Vl'UV1 bb 'UJ'V11~ bb'1~iJ1~1fl11 b 'LI fl1".iuel~fl'Ub ~el'1V1 el fl1f!fl11VltJV1'1J~~fl'VliJ~elfl11V11b 'U'U~1'W '

'llel~ 11~~tJ1u1m1'1l1n

2) ~el~11~ Lbt:.J'Ll fl111Pl".iJ"il f!el'U'i~'UtJ 1vi tJ m1m1"ilf!eltJ~"il~\9\'1 b uu fl11"il ~~el~ii t:.J'1 m~'Vl'U~ el WtJtJ ' 0 Q I ti &:ii

bb'1~ m~u1'U m1m L 'U'Ll~1'Ll'1lmvt'WJ tJ~1'Ll'LleltJ'Vl~V1

3) fl1Vl'UV1A1fl~f!V1'1Jel~~V1f!".i)t1'U~~fl1 'H U'Uel~1~-u el tJ ~~.a-\f '

- CPU RAM HOD Bandwidth hlm1bn'W~eltJ'1~ 80

- Down time hJm1bn'U 180 mVlitJ (m-S'Ll~fi1 Service Availability = 99.96%)

Vi111til~ 9 fl111J~Ufl.:i'll~e:i~.ti'eili1'1V1~'Ufl1i~eJm1.Uei11~ (Communications security) \f

9.1 fl11'U~Vl11:5'tilfl11fl111J~'Ufl.:itl~eitil.ti'eJ"UeJ.:ibfl'iei"ti1ei (Network Security Management)

11P1t1tl1::~.:ir1 b ~el 1 Vfiim1iJ-e:Mnu?111?1'Wb 'V1~1 mA~el~1tJ bb'1~m..Jmrutl1~iJ1'1t:.J'1?111?1'WL'Vl~ ' '

y1eiu1ei

9 .1.1 1111Pl1n11bfl'iei"ti1a (Network controls)

1) fl1Vl'UV1'U 1tJ'U1tJ fl1".ifl1'UfliJfl11b -LJ'1(i~ bfl~el~1tJ bL'1~'U~fl1".ibfl~el~1tJ1 Vfiim1iJ~'Wfl~tl'1elV1Jl tJ '

1V1tJ1VfblJ'U1 tlmiJ bb 'U1tlijllii m1fl1uriiJm1L-if 1(i-:i bfl~el~1 tJ bb'1~u~n11bfl~el~1tJ bb'1~ Lb 'U1tliju&i m1muriiJ V -=I d I 1"'

f11'H'1J1rn".i~'U'Ubfl'Hl'1J1tJ 16"11tJ

9.1.2 fl111J~'Ufl.:i'll~eitil.ti'ali1'1V1~'U'U~fl1".ibfl'iei"ti1a (Security of network services)

1) ii n11~ w.J'U1 LL'1~tlfotl1~1~uu?111?1'U b 'V1~1 VfiiA11iJ~'LlfllY tJ bb'1 ~ b uuu"il"ilU'Ll ' ' '

2) iifl1".i~'UrJ'U~J'Uflfl'1VlbbVl"il~~ ' -=1 ~I d v ~

3) iJ'i~'UtJ~)Jlilf!el'U fl11b u'WtJflfl'1'Vlbb 'Vl"il".i~ '

9.1.3 n1'abbU.:lbbllnLl°l~t1"ti1a (Segregation in networks)

1) N ~ bb6l ~ ~'U'U ~ a-:i~ ~Lb tl-:i b fl ~a-r11CJ1 ~ V111-:i n111<if-:i1'U.fl 1 CJ b 'U bb6l ~ m <if .fl1 CJ 'UB n~ ~ ~ ~ B tl'U 'IJ 'IJ 'IJ

h-:i'V'lCJ'l'U16l11"1l15 L~CJ~lil11ru11il1 ntJ~m1 Lfl~B-r11CJ 1~'\J'U6'!116'!'U L V113! n~:w·1rn-:i0 <if-:i1'U 'UB.:J~.:JG'IB-:i~1CJ 2) fl1'Vl'U~~VlBLL6l~f111b VJ~VlBLLn0 <if-:i1'U b 'U1~'\J'U Lfl~B-r11CJ

3) i1m1LLCJ ntl1~ b.flVl'U B.:J m <if-:i1'U bb6l ~ fl1'Vl'U~ f111 b oLJ1ii-:i-U'B:W6l b 'UW~'U-&'U ~1-:J 6') b "li'U N'U~'V111' .., .., I ..,

~tJl}tJ1i.:J1'Um:W~1 Lb 'Vli.i.:J bbe.J'U f1'Vl~B'VltJ1~f111.:J1'U "16l "1

9.2 mcarl1a 1e:i'Ufl1'afl'IJL'VIA (Information transfer)

1'1?ltith::~-:if1 L~B 1 Vi'i1m11'n'l31m1:w~'Ufl.:Jtl6la~.!l CJ'UB.:J6'!116'!'1Jb VJl3l~i1m1ci1CJ 1a'U.fl1CJ b 'UB-:iri'mLL6l~ci1CJ • LB'UtltJV1i.11 CJ.:J1'U.fl1 CJ'Ua n

ulatJ1a

9 .2.1 'U Lll'U1VLL~::.U'Ul?lv'U\Jlju~lif 1vi-r'Umcarl1a Lv'U~1-a~'IJL 'VIA (Information transfer policies

and procedures)

1) n1vi'U~'ULCJtJ1CJ ~'U\?la'Um1tll)Wi-:i1'U LL6l~m~1m11B-:i1'tJ 1~CJ~1'U-da-:iV11-:im1~a?!11~n

9.2.2 oUvl?ln~.:id1vi-rtJmcarl1a1e:i'U~1'afl'UL'VIA (Agreements on information transfer)

1) m1vl1-Ua~n6l-:i~ a-:ii-11i1-:iii-:ifl11:w~'U fl.:Jtl6l a~.!l'CJ?!11?fm V113! bL6l~N~Lbm~tJ'U~v-:iflTUfl:W m1 'IJ'IJ '

tll}u~-:i1'UtY'U 11Vli1m1:wtlmi~.!l'CJ~-:i 3 v11'U ~a m11'n'l31m1:w"'tJ (Confidentiality) m11'n'l31m1:w

~n~a-:i'Ua-:i-U'm;J6l (Integrity) LL6l~m11n'l31fl11:W'V'l1a:w~lil~ 1 Vi''U~f111 (Availability) .

9.2.3 mca~.:i-livfl'J13J'Vl1.:JBL~n'Vlcaailn~ (Electronic massaging)

1) n1V1'U~m11<if L:w~~ b~nV11atlrnha-:i h-:i'V'lCJ1'\J16l~1"1l15 (@rajavithi.go.th) bu'V'l1~.:J1'U~ ' v ..:::ii ti Q,I I Q.I

bf1CJ1'U8.:Jf1'\J.:J1'U11"1lf111L V11'U'U

9.2.4 oUvl?lm:i.:im-a-rn~11°l'J13J~'U'Vl~~hhll~L~lll°l'J13J~'U (Confidentiality or non-disclosure

agreements)

1) ~ a-:i~ ~ 1 V!i1f1116l.:J'U1:w 1 "W6" t!Jt!J11~'Vl11-:iV!i.11CJ.:J1'U.fl1CJ1 'W bL6l ~V!i.11 CJ .:J1'U.fl1 CJ'U an 11lil~ 1~

LU~Le.JCJfl11:W"''U'U8.:J'Vli.11CJ.:J1'U (Non-Disclosure Agreement : NOA)

'V13J'J~~ 10 mca1ij'~'Vl1 n1'aoWl'll'IJ1 LL~::mcau1~.:i-rn'l31'a::'U'U (System acquisition, development

and maintenance)

10.1 l"l'J13Jt11a.:imca~1'Ul"l'J13J~'IJl"l.:JU~v~na'Uv.:ica::'U'U (Security requirements of information

systems)

1Vl ~'lh'~~~fi' L ~ei 1 VJfl11:w~t.1fl.:i'l.J~rnvi.A' EJG'f1·rnm VII"! L D'Wei.:il'1'1.J·Hrntl'u611~qJVl~~"Uei~-s~uu1?1c;ieim.:i"il-s:Ui l?l

'Ua.:i m 1~ ~'U11 ~'U'U zj,:i 11:w5-:i fl11:w ~ a.:i m1v11'U1~utJ~i1n111Vi'tJ~n11 ~1'U bfl ~ a-r11CJ6'11 u11 ru~ v11 CJ

lliau1t1

10.1.1 mca1 L1"1-a1::1.fo~::n1vi'IJ~1"1113.1t1f e:i.:imca~1'1Jfl'J13J~'Ul"l.:i'lJ~e:i ~na~1-a~'UL 'VIA (Information

security requirements analysis and specification

2) 1~uu'111'1m vimn1 lil~~eMi1m1ue:i\ln'Um11, .LJ11 'li server faCJe:i'Uru1~1 ~'i,ovn~'UAAfl~i1 '... '

vtif1~m1v11\l1'Ub(;)CJ16lln1''j login ~1CJ user name \,\,fl~ password 'lleJ'lt-lAAfl,j'U \,\,fl~fl11~'WEJ'Ufl111.oLJ11'1l' 111.U'Ut-lAAfl1:w1-d program fl11 update ~1\l1~e:J\ll.U'Ul.1.UU manual whi!'U

10.1.2 A1111~'UA"ltl~eJ ~.t1t1"l.leJ"l'U~n1'cim1~m 'VIA'U'IJbA~eJ°li1 t1~15'11ru:: (Securing application

services on public networks)

1) '111'1'\.J 1, Vl 1"1~ 1,~ CJ'doLJ eJ\l nuu ~ fl11'111'1'U 1, Vl l"lzj\lij m161'l ~ 1'U 1,ri~e:iozl1 CJ'11511ru~ ~ eM 1M'u fl11

Ue:J\ln'Ulil1nm11, tl~CJ'U\,\, tlfl\loLJe:J:Wfl'Umri~e:iozl1CJ'11u11ru~ b(;)CJ m1n1vt'U(;l username I.I.fl~ password 'lle:J\l~ '\J '\J

2) oLJ'e:i:wfl~e:J\l1~u1~11uririfl 1\;l 1, U'U~'1~1\loLJe:J:Wfl 1.1.fl~i1m16111, 'U1/'111e:i'loLJe:J:WflVlnA~\l 1, ~e:i \I , , \I \J \J ,

'11m1mJe:J'U(;loLJe:J:Wfl 1,n1 ru 1,;imi!'U 1~ '\J '\J

" 3) m11,u~1.t..1CJoLJe:J:Wfl'U'Ul.A~e:iozl1CJ'11511ru~ ~e:i'l1~-r'Ufl11e:J'UUJ1~'lle:J\l~\;l\,\,fl1~uu1,vl11J'U \I 'I QI \I \I

4) hfo'4t1J1~1~1.1.m'lJoLJ'e:i~fl1(;11 ~~n'11'1\l~'U 10.1.3 n11UeJ"ln'U~'cin1'ci11"lleJ"l'U~n11~1'ci~'IJb'VIA (Protecting application services

transactions)

1) '111'1'\.J 1, Vll"l~ 1.~CJ'doLJe:J\ln'Uu1m1:w'lle:i\lu~m1'111'1m Vll"l ~ e:J\l 1~-r'Um1tle:i'ln'Ulil1n m1-r'U61\l '

oLJ'e:i:wfl~hJ'1:wtJ1ru m161'loLJ'e:i:wfl~(;l 1.'1'Uvi1'l m11, tl~ CJm1. tlfl'loLJ'e:im1:w b(;l CJ hi1~-r'Ue:i'Urn1~ m11, U\;l\,f:..ICJoLJ'e:i:wfl \I \I \I ,o~ \I

" 1~CJ 1:w 1~-ru e:J'Uru1~ m161\l.LJ e:iri11:w61111~ CJ hi1~foe:i'Uru1~ q QI , QJ

2) '111'1'\.J \, Vll"l~ \,~ CJ'doLJe:J\l nuq1m1:W'lle:J\lU~fl11'111'1'U\, Vll"l 1 ~ij fl11~\l1~UU ~e:JU ni;Yu fl1161\l !.I ii ~ .r::::f ti' Q.I ti ~ .di ClJ CV

'lJ e:J:Wfl 'V'l1e:J:WVl\l :W fl11\,'ll11'Vf '1'll e:JlJ fl \,\,fl ~lJ fl11 CJ 'U CJ'U vrJ U A A fl '\J '\J '

10.2 A1111~'UA"ltl~v~.t1't1d1V1-rum::u1um1w~u1u~::m.J'um.~u (Security in development and

support processes)

1Vlf;)\J';i::~"lioi' \, ~f) 1 ~m1:wri'UA\lUfle:J(;)Jl CJ'111'1'U\, Vll"li1 fl11f)f) n \,\, 'UU \,\,fl ~~1\, i'l'U fl11~flf)(;l'd\llil1"111~'lle:J\l fl11 '

~~'U11~UU

llie1u1e1

10.2.1 'U 1e1u1e1m1w~u11::uut~iiA1111~'UA"ltl~v~.t1't1 (Secure development policy)

1) ~~~'U11~uu'111'1'U\, vil"l~e:i'li1m~'U1'Um11. ~e:im'Uri:wm11. u~ CJ'\.J\,\, Ufl\l 1.1.m'lJ61le:i~~ \,\, 'd{ '\J '

'11vt~U1~'U'U'111'1'U\, Vl l"lffi oll\l1'U liJ ~\l b oti'U ~e:J'liifl11e:J'U~b(;)CJ ~iieJ1'U11il ' "

2) iinT~bb~\l~\l~l'lbb"1A1'UA1J';i~U'U61le:J~vi'bbd{ bl'ICJ1 ~n1vt'Ul'l';i~tJ~bdf11eJ'Wbl'll?161le:J~vi'bb'd1Vln 'l 6 \J'U , , ..

\,(;lf)'U

10.2.2 .ffuvivutl~u~d1V1i''UA'l'UFJ1ln1'ntl~t1u1.1,tl~"l1::uu (System change control

procedures)

1) ~~ ~'U1';i~'\.J'U'111'1'U \, Vll"l~ f)\l~ \;lvl1 \,\, 'U'dtl fim\ fl1';jf11U A:IJfl1';j \, tl~ CJ'U\,\, Ufl\l';i~U'U'111'1'U\, Vll"l '\J ':..J '

""' I OJ tl.,j ti 'i° II Ji 10.2.3 n11Vl'U'Vl1'U'Vl1"lb'VIA'UAVleJ';i::'\.J'UVi~"l1il1nL ~tl'Ubb ~"I LA1"1~11"l'W'U!1'U"llel"l';i::'\.J'U

(Technical review of applications after operating platform changes)

1) bdB'J~'U'Utl~u~ m'Jiim·rnm 6ll'Vl~m tl~ti'Ubb tl'1-:i'llB'V'l~ bn1~1-:i 1 ~~VlJ'U1'J~'U'U"11'J6'l'Ub vw1

'OJ~ t'1 €1-:i \Pl 'J'J 'OJ 6'1 €J'U bb'1~'VlVI6'1€J'U'J1 hJij N'1 n 'J~'Vl'U ~ €J f11'Jvl1-:i1'U bb'1~fl'J1:1.J~'U fl-:itl'1 €J vi.fl tJ

10.2.4 m-a~1n~m-aLtl~mJLL'll~wueiw~LL1ifii1L~lil'atl (Restrictions on changes to software 'II

packages)

1) bdBiim'J1 -ll-:i1'U'l!B'V'l~ bb 11'11b ~'OJ'Jtl l'lei-:iiim'Jfl1'Ufl:Wf11'Jb tl~ ti'Ubb tl'1-:i b vi1~~1 b U'U bb'1~ mi 'U •

b tl~ti'Ubb tl'1-:i~-:i'Vl:WVl'OJ~l'l'B-:iti n'V1Vl6'1€J'U bb'1~~ viv11 b U'Ub €J n"11'Jb YlB 1~6'11:w1'Jtit11m1-ll-:i1'U 1~ bdBii 'U •

rnitl-r'Utli-:i'l!B'V'l~ lnfl 'Uel'U1fll'l '

10.2.5 Vl~nm-a1A1n'a'all'a::'U'U~1'Ufl11ll~'Ufl..:!tl'1ei~.n'CJ (Secure system engineering

principles)

1) iifh~-:i~ vi~-:iflru~m'J:Wf11'J'J~'U'U~1'U f111:w~'lm-:itl'1 BVJ.fi' CJ

2) ~VJvl1bb 'U'U bb tl'1'U Lfl'J-:i6'1~1-:i'V11-:i1mm'J:wbb6'1~"11:w1'JmB-:i-r'Um'JbbITT 6llb ~ilb~:W 1'UffU1fll'l1~ 3) \Pl 'J'J 'OJ'V11'U tl-r'Utl 'J-:i bbm 6lJ bb6'l~'V1VJ6'1€l'U'J~'U'U'Vl n 6'l "ii VJ bbi;'l ~ n'J~'OJ 1 CJ n1 'Jel€J nbb 'U'U1 tl t!-:i , , I ,

ci1'Uni;i1-:i

10.2.6 ~ll1'VHL 1 ~~eJll"UeJ-:im-aw ~u1-a::uu~ijfl11ll~'Ufl.:Jtl'1eiVJ.n' CJ (Secure development

environment)

1) V11niif111:w~1bU'U~el-:i1 ~'Vl'l11 CJ-:i1'Um CJ'UBm-if 1m~~'U1'J~'U'Ui11CJ1 'Wvt'l11 CJ-:i1'U ~€1-:i n1V1'UVJ

6'1il1'V'lbb'JVl~Bl.J~iifl11:W~'Ufl-:itli;ielVJ.fi'CJ ~ I~...:. lld 0 IV I i/Q.I II ii

2) :Wf11'Jbb tN6'l'V15m:Wvt'U1'Vlf11'J'V11-:i1'U€JtJ1-:i'1JVJb'OJ'U b 'll'U N'V'lVlJ'U1'J~'U'U NV!bb6'1~1'U6ll€J:W6'1 \I \l\J ~ \I

3) l'1 el-:i \Pl 'J'J 'OJ 6'1 el'Utl 'J ~1~6ll €J-:iV1'l11 CJ-:i1'Um CJ'U €J n~m fo-;ij1-:i

4) vr'l11 CJ-:i1'Ui11 CJ'U el n ~ €1-:itl n u1i ml-!'U LCJ'\J 1 CJ f111:W~'U f1-:itl i;i el VJ .n CJ6ll €J-:ivt'l11 CJ-:i1'U

10.2.7 f11'a~1..:IVIU1tJ..:11'Ull1tJ'UeJnW~'U1'a::'U'U (Outsourced development)

1) l'1 B-:ii1 rn itl 'J~'ll:w ~VJ m:w bb6'1 ~u'UVi n m'Jtl 'J~'ll:w n "ii m'J:w m 'J'W' VlJ'U1i~uu€1~1-:i m.11 b"1:w €1 ' '

2) vt1n'V'l'Um'Ji;i ~ liivifl11:w~1'-i.ifl-:itli;ielvi.fi' CJ~ €1-:i bb-;ij-:i 1 ~~u-:i A'uu ru'll1'Vl'J1'U 'U ...

10.2.8 f11'a'Vl~aeiu~1'Ufl11ll~'UfNtl'1ei~.n'tJ"UeJ..:l'a::uu (System security testing)

1) f11'J'V1V16'1el'\J~1'Uf111:w~'Uf1-:itl'1 el VJ.fl CJ~ B-:iv11m'J'V1VJ6'1€J'\J m'J 1i-:i1'lJ1 'lJ•1h-:i"lm-:i f11'J~~'U1 vt1n

1lJ~1'Urn'J'VlVJ"1€l'U~B-:i bbm "LJ 1 ~bb~1 b"1~'0J ri B'Um'Jci-:i:welu

10.2.9 f11'a'Vl~aeiubyjeii'u"aei-:i-a::uu (System acceptance testing)

1) ~ VJ'\Jfl'11m1 'U n1'J'Vl V!i;'l €1-:i bb'1~tl 'J:Hii'UN6'1n1'J1-ll-:i1'U6ll €1-:iW'U'\J n1'Jvl1-:i1'U6llel-:iv.l-:i rloU'U'Vl n . ' Yl-:i rloU'lJf11'Jvl1-:i1'U l'lel-:ivJ1-:i1'U t1 n~ €1-:i bb6'1~6'11:W1'Jt1vl1-:iTU1~

'U

10.3 oUeJ\j~fii1V1i'um-aV1~aeiu (Test data)

11'lcitl-a::a..:ifi' byjel 1 ~iim'JuB-:in'W-if B:wi;i~t11:w11 m 'Uf11'J'Vlvi6'1elu ' 'U

y'fou1eJ

10.3.1 m-ailei..:inu-b'eil1~~1V1i'um-aV1~aeiu (Protection of test data) 'II

1) -U-e:i:wi;i 'OJ~ -:i~'OJ~t! 11 tl1 it 'U n1'J'Vl Vl6'lel'U'J~'\J'\J'OJ ~1'1-e:i-:i 1~·fo -e:J'U ru1\Pl'OJ1 n~-ru ~ Vl'llel'\J 1 'Wm 'J '\J , IV \I

-rn'lj1-Uei:w'1 bb6'1~ b-;ij16lJ-e:i-:i-U'el:w6'1'1'lJ 6'l ri-e:i'U bdel 1 i-:i1m"1~'0J"il ~~-e:i-:iv11 m"ai;iu-U'-e:i:wi;i"il ~-:i-e:i el n'OJ1 m~'\J'\J'V1Vl6'1 el'\J 'U 'U I 'U

°t1'lJVi bb6'l~v11m'Ju'UVin 11b U'UV1~n~1'U111~t!1-Uei:w'1"il~-:i1 tl1 it 'Un1'J'VlV16'1el'Uel~1 iD'1-:i 'J1:w~-:i1''Unm bbi;'l~ .... 'U

I .,j

'Vl'lJ'J CJ-:i1'U'Vl'V1Vl6'1 el'\J

'Vlil1~~ 11 fl111Ja1lw'U5nu«t~u'inTrn1a·t.mn (Supplier relationships)

11.1 fl111l~'Ufl\ltlf!e:i~.ti'aa11auL'VIAnuR111Ja1lw'U5nu«t~u'im1.n1amrn (Information security

in supplier relationship)

1'lilcitl1::a\lfl L ~el 1 ~iinT'jUel\ltl'Ui1'U'Vl-r~~'1Jel\leJ\lflm~iifl1"JL oLJ1~\l L(;)tJrn ~'U~f11"J.fl1tJ'Ueln • '\J

wau1a

1 i. i.1 u 1au1aR111l~'Ufl\ltlfle:i~.naa1'jam 'VIA~1uR111Ja1lw'U5nu«t ~u'im'j.n1a'Ue:in (Information security policy for supplier relationships)

1) ~ eJ\I~ (;)vJ1oLJeJ fl1'Vl'U(;)'Vl1\1~1'Ufl111J~'U 1°1\ltl'1 eJ(;).fl tJG'f 1V1-r'U6'11"J?l'U L 'Vl ~'1Jel\leJ\I fl m L~eJiir1111J ~1 b tl'U~el\l L ~'1 nfi'1V1~e:irn off'IJ~fl1ib oLJ1 ~\16'11"JG'f'U b 'Vl~'Vl~e:ii1'U'Vl-r~tlG'f 1"JG'f'Ub 'Vl~'ll e:i-:ie:i-:irl m

'\J '\J

2) ~(;)v11'Ll~mil.1'1f1Jf1J1Ltl'UmtJ~mHueYm~i

11.1.2 m11::uR1111~'Ufl\ltlfle:i~.natu"lie:ililnfl\lm11~u'im'j'!JeJ\lrn~u'im'j.n1aue:in • v

(Addressing security within supplier agreements)

1) ~el\l"J~'U LL'1::'U'-:il°l'U1-tl.LJ'el fl1'Vl'U(;)'Vl1\1~1'U 1°1111J~'U 1°1\ltl'1 el (;Jn tJG'f 1V1-r'UG'f 1"J?l'U L 'Vl~'lJ eN eN fl m '

b~e:iiiri1111'11 b lJ'U~ el\l L ~rn otl\11'UL oLJ1 ~\IG'f1"JG'f'U L 'Vl~'Vl~eli1'U'Vl-r~ tl'11"JG'f'UL 'Vl~'lJeJ\lel\lrl m nel'U~~~€l'Uru1\il b ~ '\J ' ~

mmim-U1~-:i1~

11.1.3 vi1\l l61lm1t~u'im1L'Vlfl 1u1flaa11a'UL 'VIALLfl::~e:ia111~a«t ~u'im1.n1aue:in (Information and communication technology supply chain)

1) .LJ e:i n1V1'U(;)'Vl1\I ~1'U m111~'Uri-:itl'1eJ(;).ti' tJG'f 1V1fo G'f 1"JG'f'UL 'Vl ~'ll e:i-:i e:i-:i fl m ~ e:i-:i~el'11"J~-:ivh-:i1stl rn ~'IJ~fl1"J.fl1 tJ'Ueln~\l'VllJ(;)~ b oLJ1~\16'11"JG'f'UL 'Vl~'Vl~€li1'U'Vl-r~ ~G'f 1"JG'f'UL 'Vl~"ll€l\1€l\ll°1 m '\J

2) ~ (;JvJ1"J1 tJ61 ~ L~ tJ(;)oLJeJlil n'1-:i L~ tJ1 n'Um111L~ tJ\1~'1 ~ Ln (;)~'U'Vl n~'Ulil e:i'W '

3) ~'Ulile:i'Uvi1-:i 161l1'Um"J1 ~'U~mib 'Vlri 1 'Ufa ~'11i'1'UL 'Vl~'11m-rnm11i1G'fe:i'UEJe:i'UV1~-:i1~

management)

1'lilcitl1::a\liol L~e:i 1~iimi-rmn11zj-:ii~~'Uri1111~'Uri-:itl'1eJ(;).ti'tJLL'1~i~~'Um"J1~'U~fl1ilil1l.!~liln61-:in'U111 'U • .LJ'e:ililn'1-:in1"JL~'U~n1"J'1Je:i-:irn~'U~n1i.fl1tJ'Ue:in

'\J

mauw 11.2.1 m1~~1'111lbbfl~'Vl'U'Vl1'U'U~n'li"lleJ.:lrn~u~m1.n1a'Ue:in (Monitoring and review of . v

supplier services)

1) V1i.11 tJ-:i1'U ~e:i-:iii'Urimm~(;)\il111 'Vl'IJ'Vl1'U lili11il6'fe:i'U tli~LiJ'Umi1 ~'U~fl1i'1Je:i-:iLe:in'1l'U '

"J~tJ~ nmvie:i'1tJ(;)1~

2) 'Vl'IJ'Vl1'Utlr1JV11~Ln(;)~'U 1 'W~1\lnmffi ~'U~fl1"j~~1'Um 3) ~€1\li'.i bb 'IJ'UvJeJ~lJ fl1"J\il"J1 '1th~ biJ'Ufl1"J L ~'U~fl1"J€l ~1\1-tl'(;) b ~'U

...

••

11.2.2 m-au'iV11-ai5'V1n1'm1-abtl~t1'Wbbtl~.:iu'im-a"tlv.:J~~u'im-a111aimn (Managing changes

to supplier services)

1) ~ vivi1-at~'U f111:1.J ~1 ~ru"lJ a.:i.LJ m.J"1 "11 i?l'U b 'VI Pl ~ Vl b~ cN b ~e:J'Vl 'U'VlTU fl1iU w biJ'lJ 1°111:1.J b~ cN "' \I

1 ~m.Jb 'U~'Utile:J'lJbb'1tit~tb 1'11 \I ...

?) mru~0 ~'U~fl1ii11~'Uani1rnib '\J~~'lJbLL!'1.:i LJ-r'ULJ~.:i'U 1~'U1~ -v'utilaulllju&i bb'1tmtili

f11i~1.:i1 '1tvi'a.:iLL"5'.:i1 ~~fo'U~f11i'Vli1'U~1.:iV1u1a~1.:i-Ua~ 3 1'uvi1rni

3) ~uV1a'ULllju&iLb'1t:1.J1mrni~1.:i 1 ~1l.11~n1V1uvi 1 ~Lb"5'.:i~m~mL"5'.:i1 ~~-r'U'U~fl1i'Vli1'U ~1.:JV1u1a~1.:i-Uew 3 1'uvi1mi

Vll.l'JVl~ 12 m-au'iV11-ai5'V1n1'ab'Vltiln1'a'Wfl11l.l~'WfNU~vV1.ti'aa1-aaub'Vlfl (Information Security '

Incident Management)

12.1 m-au'iV11-ai5'V1n1ib Vl~n1iWfl11l.l~'Wfl.:Jtl~rn V1.ti'aa1-aam 'VI ftbb"1::m-at1-rut1~.:i (Management of

information security incidents and improvements)

1'til'1tl-a::a.:ifi b ~a 1~i115rni~"1aviF1'1a.:in'lJbmt1~t:.J'1~1V1fo fl1i'U~V11i~ vi mib 'VIVI rnirum1:1.J~ufl.:i'\J'1 avin ~ ' . "11i"1'lJ b 'Vlial zj.:ii1:1.J5.:irni bb"5'.:i"1mu rnirum1:1.J~'Ufl.:itl'1avin ~"11i"1'lJb 'Vlial bb'1t~ vi~aum1:1.J~u fl.:Jtl'1avin ~ "11i"1'Ub 'Vll311 m~fo'Vli1ti

Wau1a ' ...

12.1.1 V1u1Vif1113.1-ru~vi"tlv'Ubb~::-u'utilv'lJtl~u~ (Responsibilities and procedures)

1) i1rnifl1'Vl'lJV1L~a1 ~i1rniV1e:J'U61'Ua.:ia~1.:ii1vi L ~1 1~t:.J'1 bb'1ttil1l.J~1~'U b V1tilfl1irum1:1.J ' ~'lJfl.:J'l.J'1avin ~"11i"1'lJ b 'Vlia!

2) i1 fl1i n1V1u vi~ -r'U ~ vi'!la'U bb'1 tV1u1~-r'U ~ vi'!l a'U a~ 1-:i-lr vi b '1'lJ \I

3) i1mtilif11i 1 urnifl1'U~:1.Jn1n'U~LL"1~fo~vi'Ua'U L ~a 1~rnitlljllilbiJu1 tJ1 'UVJ1.:ib~~1nu 12.1.2 m-a-a1a.:i1uamum-aruf1113.J~'lJfl.:Jtlm1l?l.ti' aa1-aam 'VI fl (Reporting information

security events)

1) i1rnii1 ~.:i1u~1uVJ1.:i'tla.:iVJ1.:i fl1i'U~V11i~vi rni~ b 'Vim t"1:J..J Lb'1 ti1~.:i1ua~1.:ii1 vi b ~1~"' vi '

' "" 0 1" b 'Vl1'Vl'1t'Vl1 Vl

2) ~vivi1 fl1ii1~.:i1u~1u'tla.:iVJ1.:i~611:1.J1iri Lb "5'.:i L~au LLri~ vi LL'1it'U'U'Vli1'U1 ~11 vi L ~1m n~"' vi \l\l •

3) Ldai1"1mu m1ru~ b~m.LJ'a.:i n'Um1:1.J~ufl.:i'\J"1 avin ~"111"1u L VJmfivi~'U 1 ~~vi bL'1vi111 ~.:i1'U \l\l

b"1'Ua~a~u.:i~'Uut1J'll11 u~uVl

12.1.3 n1'a'a1tJ.:J1'W'lV1Bv'Wfl113.J~'Wfl.:Jtl~vV1.ti'aa1-aam'Vlfl (Reporting information security

weaknesses)

1) i'.irnivi1n1V1'Uvibnruen b VIVI rn1rua~1 uit~'U~1~vibb'1it'U'U"11i"1m 'Vll3161Ja.:i 1 i.:i'V'l ~1'U1'1 . " \I \I Ill

"11mimLm "1lb 'Vf(i) m1ru~Lfivi~'lJba.:i 1~ L -du m1&ivi 11-r61 L uuvi'u bb'1tvi1m111~.:i1uL VIVI m1ru~ Lfivi~'U 'Vln si " , , I

4 I t.I 0

1 bVle:J'U Vle:J ~81'U1~fl1i

'2) iirn1vi1 fl1'V!'UVl bflnJen b VIVI fl1inJe:J ~b 'lJit~'U fl'11.:J ~Vl bb'1W'U'U"11i"1'lJb 'Vll3161Je:J.:J 1 i.:J'\Al ~1'U1'1 q 'U '\l'\J

bb"5'.:i 1 ~~el1'lJ1 ~ fl1i 'Vli1'U fi.:i b VIVI fl1inJ~ LfiVl~'U Vl1f1b VIVI fl1inJ~ LfiVl~'lJ Vlt11 ~.:11'\J~ LfiVlb VltilUit biJ'Ufi11:1.J \I " , ,

b~V.:Jbb!K1 1 ~v11n11bb~.:ib ll'Llrnv~n'l3ruan'l31 bb~.:i1 tJ~.:i ~'U~Ae:i1J~1b1we.ii'1leM b.:ivrn1'U1m1'1l1~., b~e:i 1 ~ \31'U~ Ae:i1J~1 b~ e:ii b -U1m bbm '1l b VI~ miru~ bnVl;'U 'U '

3) llm1v11n1V1'UV1bnru~b V1~m1rue:iv"l 'U1::~'U?t.:i~V1blm::'U'U?111?1m 'Vl\31'1le:i.:i 11.:ivrn1'U1'1 ~e:i.:i , \I \I \1\1

vl1fl1'rn~.:i1 tJ~.:i \31'U~Ae:J1J~1b~e:Ji L 1\l'V'JEJ1'U1"1':i1'1l1~"1 e:i~1.:id.:i~1'UVl1flbVl~fl11nJ~bnVl;'U bU'UbVl~fl11nJ 'U • '

~1vlb1-:i ll'1:: l ~ .:i ~1'U l ~ e:iV11 ll 'U1'Vl1.:i1 'U n11 llm '1lu ryV11 "il1 ni!'Uv11 n11?11tJu tyV11~ lfi Vl;'U n'U 1 ::'U'U

?f 11?f'Ub 'Vliaf 1 ~~eJ1'U1 v fl11 bb'1::~'U~V1111::~'U?f\l'Vl11'U 'U 'U 'U

12.1.4 m1tl1::Lih..1m1::~V1a'Ub'1~t1~'11'Ufl1'HUfl'J1:1.J~'U fl.:itlm1V1.ii't1il1'H'l'Ul 'VI A (Assessment of

and decision on information security events)

12.1.4.1 Vi'1wu1\3l'U~Ae:i1J~1 b~e:ii ~e:i.:in1V1'UVl'U 1v'U1v1 ~n'U'U A'11n·rn"'::~V1bb'11::'U'U1 'U \I 'I '\J\I

WU1V\l1'U ,r'U 1 tJ{j'U1i~1l.J'ULV'U1V~11.:J11 1) ~VI lb'11::'U'U~e:i.:in1V1'UV11 ~llm1 b~1w1.:i bl'1::~n'l31e:itl mru~11"il~'U bl'1::ue:i.:in'U

'U'U '

m1'Umm::'U'U m~m1ru~V1tJn~ ll'1::nTm~.:il~e:i'U~1.:i 61 ~e:itJmru~11"il'V'J'U "il::flnv11m11lA11::~ ll"'::m • , , I " \I

?f1b Vl~'1le:J\lfl11'Ufl1fl 1'U1::'U'U?f11?f'Ub'VIP1'1le:J\lL1\l'V'JV1'U1'111'1l1~ b~e:Jb U'UbA~e:i.:ii1e:i~'U?f1U Vl1'UAA'1~1"il1l~ , , , , .. 1" 1 .,1..,. 'Ufl1fl Vl1e:J '1l1::'U'U 'U'Vl1\l'Vl~VI ••

12.1.4.2 ~Vlllm::'U'U ~e:i.:in1V1'UVI 1 ~llm1l~1w1'.:ilb'1::~n'l31e:itJmru~11"iJ~'Ubb'1::ue:i.:in'U \1\1 , .

m1'Umm::'U'U lV1~m1ru~V1tJn~ m1::m1lb~.:il~e:i'U~1.:i 61 ~e:itJmru~11"il'V'J'U , " , I , I.I l.J W: C.Q. d IV d 4 ')° -Cl!')

1) ~Vlbb'11::'U'U~e:J\lbfl'U?f fl~bfle!dfl'Uf1111J'V'J En V11J'Vl"il::'U fl1flVl1e:J h"ill.J~ h 1\l'V'JV1'U1'1 \1\1 'I ,

11'1!1~ l llmA~e:i.:ii1e:i 1'Llm11'V1tJ1::~'VIBfl1V'J1 'Um1ue:i.:in'U.ii' v'lle:i.:i1::'U'U~fl'l31A111JU'1 e:iV1Jl' v ~'U b 'li'Ll 1 vhe:iG'l

b U'U ~'U bb'1:: b vle:i b U'U fl11U e:J\l tl'UbA~e:i"ll1 VA m.J~1 b~e:J{ fl1V1 'U'OJ1 fla'U ~11 v ~l.J1'0J1 fl bA~e:i"ll1 v Ae:Jl.J~1 b~ e:ii

mV'Ue:Jfl l'll'U ~'Umfl Vl~eJ hacker 11l.J~.:i 11~?1tJ1::lfl'Vl~1.:i 61 \I" , I

12.1.4.3 ~Vlll'11::'U'U ~Vlbb'11::'U'U~e:i.:ii1m1'U~V111~V1m1 m1'Umm::'U'U 1V1vl91m~V1'11~'U \1\1 \1\1 , ,

' II

m11l611fi'ru'1le:i.:im1'U mn-o;i 1n ~"' m::'Vl'UVi lnVl~'U n'U 11.:i'V'Jv1'U1'111'1l1 ~ " ' .

1) ~VI bb'11::'U'U 191 e:i.:ill fl11'U~Vl11~ VI fl11 fl11'U fl1fl1::'U'U LVI V 191 e:J\l ~ V1G\'1~U \I \I 'I ,

f1111J611fi'ru'1le:J\l fl11U m fl"il1fle..J'1 m::'Vl'U~lfiVl;'U nu L 1\l'V'JV1'U1'111'1l1~ bb'1::~V1v1115tJnu~~flfll91e:i.:i 1 ~tl'U QJ' , 'I d..J \I

11.:i'V'Jv1u1'111'1l1~l ~e:iueJ.:in'Ul Vl~m1ru~bnVl;'UJ1 12.1.5 m1~t1'Uil'Ut1.:l~VLV1i;in1·Huf111:1.1~'Ufl.:!tl~t1V1.ii't1il11ilm'VIA (Response to •

information security incidents)

1) b VI~ fl11ruAd1l.Jli''U A\lU '1e:JVIJlV?f11?f 'Ub 'Vl 131191B\l1~~'U fl11~ e:J'U?f 'U e:J\l b ~e:J~ VI fl11 tlUU t:UV11 ' "

ml.J~'U~ B'Uul)u~~~ V1v1111 b ll'Um v~ n'l3rua n'l31

2) ij fl11~ Vlvl1~'U~e:J'Ufl11U i]u~ e:J ~1\loUVI b "il'U 1 'U fl11 blm 'lJUflJVl1f1111lli''UA\l

tJm:iV1nm'f11~m vi\31

3) mrubnVli:Jn 'Vl11 ~i1v.:i1m V1~m1ru~e:i~u.:ifi'uuru'1l1'VlflA~.:i o~ " \I u 1

12.1.6 fl11l':jtl'U~'11flb'Vli;im1rufl'J1:1.J~'Ufl.:!tl~t1V1.ii't1~11il'Ub'VIA (Learning from \I •

information security incidents)

1) i1fl11bb~\l bi V'UbVl~fl11nJA111lli''UA\lU'1e:JVIJlVG'l11G'l'Ub 'VIPl~bfiVl;'U 1~b~1VliJ1~fl1V1 'U '

WU1 V\l1'U'Vl11'U

..

.,.

12.1.7 fl1':ibfl'Ui1'Ui13J'Vi~mi1'W (Collection of evidence) dJI

1) iJ tl1'Htl U 'Vl'1 fl ~1'U \911'UG'l11G'l'Ub 'Vl PlhlG'l C'l1'U ~tJml V1.f1 CJ iJ.LJ' el n1V!'U V1 mu fll.J fl11tJ 1l.J1 b oU "' '

b ~el 1l.J1 ~Ln~m1~ qiV11 CJ bb'1~~ ~ Lnt1V1'1 n~1'Wml.ln!JV!~elV1'1flLmiJ~rl1V1-rueJ'1-:ia-:i1 'W m~t11'U m1'Vl1-:im'1

'Vi3J1~~ 13 ti-a:: b~'IJ~1'1Jfl113lli''Ufl.:Jtl%'l el ~nmlT'rn'IJb 'VI A"lleJ.:Jfl11'U~'Vi11~~ fl11b Ylei fl~1.:Jfl113J~eJ L ilei.:i

vn.:i~-an'1 (Information security aspects of business· continuity management)

13.1 fl113J~milei.:i~1'1Jfl113Jli''Ufl.:Jtl%'lei~fivfl1-aflm'VIA (information security continuity)

1vit1tl'a::fl .:ifi b ~elDel\l n'U fl11'Vi tJ~"1l~r fl b 'U fl11~1 L U'U.:J1'U"Uel.:Jel\lfl m~ L U'U~'1l.J1"il1fl1 fl fl VlV!~el.n tJ'WlliiV!~\l , ' ·1

ylau1a 13.1.1 mn1.:iLL~'IJfl11ii~milei.:i~1'1Jfl1.1i1li''IJfl.:JtlmJ~nvfl1-aflm'VIA (planning information

security continuity)

1) ~~ LL'11~t1t1~ el.:i:W fl11~V1v'i1 LL~mLm "Utl ruV11"il 1flG'lm'W 011rum1l.l hl LL ll'Wel'W LL'1~.n tJ'Wu~ 'U'U " ' ...

Vim"ilLnV1'1i'Wnu1~t1uG'l11G'l'UL'Vll31 (IT Contingency Plan) 1?11l.JLL'W1tl~u~011rl11el\lLL'1~fl11tJ~'U.LJ'el~'1

13.1.2 mcatl~u~ L Ylmvi';jv 3.101-afl~1.:i1"1113.1\Piei L ilei.:i~1'1J1"1113Jli''Ufl.:Jtl%'lei~fi vfl11flm 'VIA

(Implementing information security continuity)

1) ~ el\l~ 1 b 'D'IJ fl111?111 "il G'leltl bb'1·~tJ1~ Lii'W fl11l.J b~ tJ\l \911'1JG'l11G'l'U b 'Vl\31~ el1"il LnVl~'U nu 1 ~UU G'l11G'lm 'Vll31el ~1\lUel tJtJ'1 ~ 1 ri~-:i ml.J bb 'U1tJlju~ 0111?111"iJG'lel'Ubb'1 ~tJ1~ Li1'Wm1l.J b~tJ-:i\911'UG'l11G'l'Ub 'Vl\31

13.1.3 mcavin'1fleJ'U mca'Vl'U'V11'1J LL%'l::mcatlca:: Lij'IJfl113JlPim ilei.:i~1'1Jfl113Jli''Ufl\ltl%'lei~fiv fl1'afl'IJL'VIA (Verify, review and evaluate information security continuity)

1) ~el\l~~LntJ~elu'UVifl.LJ'el~'1rl11el\l Vj~'iJlJ~\lrl1L'U1i'W1?1el'UV!~el15tJ~lliil'l1\lj H'WelflG'lm'W~ 2) 1 'Wmru~~1 L U'U~el\l~V1Lnu.Uell.J'1LlJ'W1~CJ~L1'11'U1'U n~el\lr11i!-:i'1'115m1t11.LJ'mm n'1um

'U 'U

1 oU\l1'Ub 'Uel'U1fll?l~'JCJ

3) m1~V10'11fl~iJ11CJ'1~LBCJV1oUV1L"il'W11u'W~elu'UVifl.LJ'm.J'1rl11el\lL ~el 1 ~G'l1l.J11'1~'UV!11~ 'U

bV1CJ L ~1,L ~elDel\ln'Um11 -ti-:i1'U~elU'UVifl~V1Vj'11V1 4) ii 011"Uel 1 -U-:i1'U~elu'UVi flsLJell.J'1 rl11el-:i fl111\'l-ru el'W~~"il1fl~:We.l1'U1"il LL'1~ fl11~ ~v'i 1'Vl ~ L ti CJ'W

'U ' 'U V I d V Cf I./ 0

fl1Ufll.Jfl111tlbb'1~G'l\ll.JelU~eltl'U'Vlfl"Uelil'1G'l11el\l ' 'U

5) ~ el\l n1'Vi'U ~-rr'U Vl el'U fl11vl1'11 CJ.LJ'ell.J'1rl1~ fl I bb'1~~elU'UVi fl~hJ1~ oU\l1'Ubb"'1 zj\l11l.J '1'1.LJ'ell.J'1 'U ·~ 'U

rl1~qil'l1\l, b 'U®'1'~Vl~~n

13.2 fl1'aLVl';jtJ3Jfl1-aeitlmrutlca::3J1%'l~%'l~1-aei.:i (Redundancies) , 1vimh::fl.:ii'1 b ~el~Vl bl?l~CJl.JG'lf11Vjfl11l.Jyj~ell.J 1 oU"Uel\leltl mrutl1~l.J1'1 ~'1 G'l11G'l'UL 'Vl\31 , ' t1lm.rn.1

13.2.1 fl.fl1'Wfl113J'W~eJ3Jboif"llei\l~tlmrutlcaz3J1%'l~%'lflT'afl'IJL 'VIA (Availability of information

processing facilities)

1) ~tJ mrutJ'a~l.J1'1 ~'1G'l11G'l'U b 'Vl\31~ el\liJfl11bl?l~CJl.J fl11'111el'l 11el ~1\l by; CJ\lVrn b ~el b ~1?11\l\?11l.J ri11l.J~el\lfl11~1'U~.n1Vjm1l.J'Vl~ell.J 1.u~n1'Vi'UV111

3) mru~ bflVJ b VI\)) rnrnfo n bO'U fl11i1f111U'U'Vi m1m1:: b~CJ Vl'lle:l.:J b VI\)) n11ll 6i1 b Vl\)'\'1Je:J.:JU ruV11 q q , , QI

LL~::1Bm1LLm '1lUt1JV1111Ji'1 CJ

'l-1111~~ 14 l"l'J11J~eJ~l"l"1e:i.:i (Compliance)

14.1 fl111J~e:i~\Ol~e:i.:inu\Ol1111~e:i.:im~~1un~i.11l1mb~::1uaqiqi1:ij1.:i (Compliance with legal and

contractual requirements)

Jvt qth::~~f) b ~BVI~ m~ CJ.:J m1~:: djvi.LJ'e:i~ n~'U 1 'Wn!)Vlll1CJ ~:: bi:J CJ'UoLJe:iu.:if\'U Vl~e:i~ t1Jt1J1~1.:i ~ b~m.LJ'e:i.:i n'U

fl111J~'U fl.:J'IJ ~ e:i viii' CJ 6i 1 ~6i'UL V1 ?! bb~ ::~ b tl'U fl111J ~ e:i.:i f111~1'1.J fl11l.J~'U fl.:J'IJ ~ e:i VJ ii' CJ

'Y1CJ'U1CJ

14.1.1 m~~::~n~i.1111mb~::\Ol1111~e:i~m~t uaqiqi1:ij1.:i~b~a1.Ue:i.:i (Identification of

applicable legislation and contractual requirements)

1) ~viv11.LJ'e:in1V1'Uvi n!JVl111 CJ 1:: L iJ CJ'U.LJ'e:iu.:if\'U LL~::~ t11t111~1.:ie:i v1.:i Lfl~.:ifl-rvi

2) l1m1Pim~n Vl'UV11'UoLJe:in1V1'UV1n!)V11J1CJ 1::LiJCJtJ.LJ'e:iu.:if\'U LL~::~t11t111~1.:ivin11 tJ1viCJ

flru::m1l.lm1

14.1.1.2 l1 n1~'\..Jl)u&l ml.JoLJe:l01Vl'UVJV11.:Jn!)Vl1J1CJb Vlfl 1 'W fa ~6i116i'Ub Vl?f b ~e:iue:i.:i n'UiJb-M'

L ~1V11J1~'1Je:i.:i 11.:i'l"J CJ1'U1m1'1l1n6i'U~.:i nvi 11.:i'l"J c.11'U1~11'1l1 '1~:: d:Jvi.LJ'e:i n1V1'Uvi'1Je:i.:i n!JVlm CJ

1) ~viv11'\..J1::mf11-M'V1t11CJ.:i1'U1 'W h.:i'l"JCJ1'U1~11'1lin ~e:i.:i'\..Jl)u&lm1J.LJ'e:in1V1'Uvivi1.:i

n~Vlmm vi fl 1'W1~ ~6i116i'UL vi?! L ~e:iue:i.:in'Wi11-M'L ~1V11J1~'1Je:i.:i 11.:i'l"J CJ1tJ1m1'1lin6i'W~.:itl'vi 11.:i'l"Jc.11tJ1m1'1l1n .. ,, 0

m~ bl.I V1'1l e:i f11Vl'U vi'lle:i.:i n!J Vll.11 CJ

14.1.1.3 l1mw11v11il&lm1l.l~t1Jt1J1V11.:iJ11m Vlfl 1 'W fa~6i116i'UbV1?1~e:i.:i6'l.:i1-M'il&lm\)'\111\16ie:J'U

~m11J~ n~ e:i.:i'lle:i.:i~ t11t1111-M'b tl'U 1 '\..J\)'\1l.J~ n!JVll.11 CJ n1V1'UV1

1) m1v11il&l m11l~t1Jt111vi1.:iJi'1'Ub Vlfl 1'W1~ ~6i116i'Ub Vlfl~ e:i.:i6'!.:i 1-M'il&l n1\)'\111\16i'El'U ~

m11J~n~e:i.:i'1Je:i.:i~t11t1111-M'b tl'U 1 '\..J\)'\1l.J~n!JV1l.l1CJn1V1'UV1 b ~e:iue:i.:itl''Um1l.l~vi'V'lmvi Vl~BVI~ n b~ CJ.:im1~::biJvi ,, 0

'lle:J n1Vl'W vivi1.:i n!J Vll.11 CJ

14.1.1.4 l1m1~vi~.:iflru::m11Jm1~viv11.LJ'e:in1V1'UVJV11.:in!JV1l.l1m Vlfl 1 'W fa~6i1~6i'UbVlf1'1l'El.:J 11.:i'l"J CJ1'U 1~11'1l1 n6i'U''U6i~'U'U~ m1 b ~ e:i11l.l.LJ' e:i n1V1'Uvi~l1 e-i~vi1.:i n!JV1l.l1CJ~1'1.J1:: b iJ CJ'U1-M'l1 m1~ vi ~.:i flru~ fl'a11J f111~ Vlvl1oLJ e:i 01Vl'UVJV11.:J n!JVll.11CJbV1fl1 'W fa ~6i116i'U b V1 f1'1J e:i.:i 11.:i'l"J CJ1'U1~ 11'1l1n6i'U''U6i~'U'U ~ f111

d .., 0 .c:Jq v ~

L 'l"JB111J61.18f11Vl'UV1V11Jt:-1~vi1.:in{)'Vl1J1CJ m'U1::L 'UCJ'U

1) 1::biJCJ'Um11-tifla1J'W1b\)'\e:i{

2) 1::bDCJ'Um11-tl soft ware ~~n~a.:im1Jn!)V11J1CJ 3) f11101Vl'UVJ~V15bb~:: f111 b -M'~V15b 'U f111 b oLJ1~.:JoLJB\j~

4) m1ua.:in'Ufl11l.J'IJ~e:ivi.fi'CJ'1Je:i.:i.LJ'e:i\l~ LL~:: 1::'U'U~1.:i1 ~'\..Jmru~1.:i1 vi1.:i~1'U

5) f11~01Vl'UV1bb 'U1V11.:Jf111 b oUoLJ81J~ 'IJ

6) m1ue:i.:in'U.LJ'e:i1J~6'!1'Ul'l1 i~i 'IJ

..

v

14.1.2 ~'VIGL'U'Vl-rvuia\JV11.:iihyqp (Intellectual property rights)

1) n~'\J~B'\Jfl11tJl)u~~ b 'Vlm~aii b ~a 11X~'UL"il'hnm1iiaa~fl~a.:i n'U m1ii\ila.:im161l a.:i

n~V1i11 CJ 1~ bu CJ'U.LJ'au.:il°i'tJ bb'1~'1ryry1~1.:i ~11~1 m~a.:i~'Vl61 uv11'yj ~~'\J'Vl1.:iu ryry1 bb'1 ~ n1116lit:-J~ ~ .n ruen

61lavl~bb1{~nm1i1~'Vl6 2) ni;rryry1-Ua~ ni;i.:i1~V111.:i01X'U~m1n'U0 -tl'U~n11a v1.:ii~b"il'\J 1 'Um11.U.:i1'\J61lavl~ bb 11~n

Ai Ai ..! '161Ja'Vlo

14.1.3 n1'l'Ut1.:inu-li't13.J~ (Protection of records) 'U

1) nbb '\J1'Vl1.:itJl)llil m1ila.:in'\J"il1nm1~ryV11CJ m1~nv11i;i1CJ fl1-;jtJi;iaiibb tJi;i.:i n1wv1fi.:i 1~CJ

hl1~1''Uai"ry1~ bb'1~fl11bt:-Jmb yj~L~CJ hJ1~1'Ua~ry1~ 1~CJaa~fl~a.:in'Ufl11lJlila.:i n1161la.:i n~'VlmCJ 1~ b ;j CJ'U tlQ.IQ.IQ.I IJ' II ~

61JB'U.:Jfl'U aryry1"il1.:i bb~~m1ii~a.:im1'Vl1.:i~1n"il

2) 1 'Ufl11 b eLJ1aa niXa.:i bn'U.LJ'alJi;ililmn1~'U'U1'n~1fl11iitJ~ a~.n CJav1.:i b eLJlJ.:i1~ 'U

3) nm1bn'U6'111a.:i.LJ'alJ~ bb~~fl1'Vl'U~~'Vl6fl11b eLJ1fi.:i.LJ'alJ'1 ~1 CJ userna me bb~ ~password 'U 'U

14.1.4 fl113.JbU'U~1'U~1bb~~m1\le:i.:inu-li't13.J~~1'UtJflfl~ (Privacy and protection of 'U '

personal identifiable information)

1) n n11~1 b il'Um1aa~fl~ a.:i fl~'VllJ1 CJ bb'1 ~1~ bu CJ'UeLJau.:i fl'U~ b~ CJ1eLJa.:i b ~ aila.:in'U-LJ'a~~ ci1'\J

'Uflfl~ bb'1~m1lJ b ll'Uci1'Ul?i'1 '

2) .LJ'alJi;ici1'Ul?i'1\ila.:inm1L .LJ'11'1XaV1~a61Jaa'IJn 11~"il1m~161Ja.:ib~a.:i 1 iXL lJ'U 1 tJ~1ii-Uau.:ifi''U 'U .. ~

3) .LJ'a3.J'1~bll'Uci1'U'Uflfl'1 b~161Ja.:i.LJ'alJ~a1m1~n1V1'U~16m1L.LJ'11'!Xa1~~1CJl?i'1ba.:i 'U ' 'U

14.1.5 1::dfou-li'e:iu.:i~uri1V1-ru3.J1\9l'ln11b"li'11'l1~"!i'e:i3J~ (Regulation of cryptographic

controls)

1) nm1fl11~11"iJ'lh~biJ'U 11Xflru~fl11lJfl11~~v11-Uan1V1'U~ ~~vl1lJ1~1~1'\Jfl11~';i'J"iJaa'U "'

tJ1~ LiJm~'U'Ua11a'\Jb 'VI Pl

14.2 fl11'VltJ'Vl1'Ufl113.J~'Ufl.:itl~e:i~.nCJa11am'VIA (Information security reviews)

1\9l~tJ1::a.:ifi b ~a 1,xn fl11U l)u~~1'\Jfl11lJ~'\Jl°MU'1el~.n CJa11a'\Jb 'VI Pl el vi.:i?!a ~fl~ a.:i tl'U'\J LCJ'lj1 CJ bb '\J1Ulj'U'1i ,, 0 ~

61Jelfl1'Vl'\J~61Jel.:Jel.:Jflfl1

ylmnCJ

14.2.1 fl11'VltJ'Vl1'Ut1~1.:i~a1::~TlJfl113.J~'Ufl.:itl~e:i~.0CJa1'la'Ub'VIA (Independent review of

information security)

1) n16m11 'U fl11'U~'Vl11~ ~ fl11fl11lJ~.:Jfl.:JU'1a~.n CJa11a'Ub 'VIPl bb'1:: fl11Ulj'U'1i61Ja.:J L 1.:J'l"W1'U1'1

11'111~ lila.:inm1'Vl'U'Vl1'\Jav1.:iaa1~~1lJ1a'U1~CJ~b 1m~n1V1'U~ 11 V1~anm1b tJ~CJ'\Jbb ui;i.:i 11)1yjCJ1'U1m1'1l1~ "' .. .: Vlln nbfWt"lJ'W

14.2.2 1°'1113.J~tl~ fl~e:i.:inuu lCJu1mb~::3.J1\911~1'U~1'lJ 1°'1113.J~'lJfl.:itl~rn ~.nCJ (Com pli a nee with

security policies and standards)

1) iJ fl11~1bil'U'Vl'U'VITWl°ld1lJaa ~fl~ a.:i av1.:ia~1 b6'1lJB61Jel.:J fl1';iU ';i~lJ'J~ t:-J'1a1';i?l'W b 'VI Pl bb'1 ~ ~'W~el'\JUDU~~BV.fl1CJ 1~fl11lJ1''Ue.l~"l!el'U61Jel.:J~'Uba.:J L~CJ b Vi CJ'Utl'U'\J !CJ'U1CJ 3.J1~';i~1'1.Jbb'1~fl11lJMel.:Jfl11~1'\J

~ 'U "'

m1ii~'Ufl.:itJi;ia~.n'CJ

.. ..

14.2.3 fl1'j'Vl'lJ'Vl1\Jfl11:Uflv~fl~v.:i'Vl1.:iL'VlflUfl (Technical compliance review)

1) ljrn1~LL'1tl11.:i-rn'l!l161lei'W~ bL 1{ ~11{~ LL1{~1 otll i.J hwrn1u1'1116!J1~ .n1 (11~ fl n1~L U(J'U 'V ' 'dJ

oLJ'eiiJ.:iA'u VJfl13b~eitJ 2) 1~'U'Uvfi <ff-!11'1.J el~~ ei.:ilj fl11'Vl'U'Vl1'1.JeJ ~1-!16'1~1 b?l:lJeJ b ~eJ'W'111t\J1fl11:lJ6'1eJ~ A'1 el-!! tl'U'l.J t(J'U1 ()

'V

bb'1~:lJ11?11~1'1.J~1'1.J fl11:lJ~'Ufl-!!D'1 ei~.fl ()6'1116'11.J b 'Vli3l'll8-!! t 1-!!'YW1'U1'1116!J1 ~ ....

' ~"J'UVi 3

bb 'UTLl~u~fl1'j~n~1 l°l11ir~'Ul°l'3tl~ei~ti'm11'j~'Ub 'VIAL 'j'3Vm1u1~'j1"!11~

1\9lt1tl'j::~'39'i • 1. b ~elATUfllJfl1'H .LJ1fi'3oLJellJ'1 bb'1 :::mJ mru'1'LIfl1'n.J1:::i11'1l!-l'1oLJeliJ'11t'ltJ1°11il.:ifi.:i m11.if .:i1mb'1:::m1mj\.1A.:i

, 'U , '\J

tl'1elt'ltltJ

2. b ~eln1Vl'Ut'lVI~ flbflllisvl~ b~tJ1 tlUfl11el'Ut1J1191 b iXb -LJ'1fi.:i fl11n1Vl'Ut'l~'Vl~ bb'1:::fl11lJelUel1'U1"il . "' 3. b ~el 1iXrn-U.:i1'U1~-ru~ b .LJ1 h bb'1:::'11m1mJfiiJ~mii bb 'U1'Vl1.:i~mV1'Ut'l Lt'l mA~.:iflrt'l bb'1:::\911:::viirflfi-:im1ii

'U 'U ~

'11 ri' riJ"ll el.:J fl 11-r m~n fl11lJ~'U fl.:Jtl '1 el t'l i1 tJ"ll el-:!1 :::uu '11'j'1'U b 'Vl fl!

~"J'U~ 1 fl1'jfl"J'UfJtffl1'jb"li1~'3~1'j~'Ub'VIA (Access Control) "' ., ., ., ':'I ., ., ~ .J ., 1 " 1 " ' .J 1 """ 'tie> (1) l!-lt'lbb'11:::uu "il:::ei'Uru1191 bVll!-l b•1J.:i1'UL"U1m1:::uu'111'1'UL'Vlflf'Vl\9lel.:Jfl11 •1J.:i1'U t'l 191mi1ei mueit.1ru1191"il1fl

\I \I , (LI 'U , "

r-Jru~t'l"llelu vi~m~1"Uel.:JoLJeliJ'1 vi~m~1"Uel.:iwuu miiA11ii"ii1LlJ'Ul'leim11i.:i1'U Lvl1i!'U 'U 'U

-if a (2) Uflfl'1"il1flVIU1tJ.:J1'Ufl1tJ'Uelfl~l'i'el.:im1~'Vl~b 'Ufl1WLJ'11 i.:i1'U1:::u'l.J'111'1'Ub 'Vlfl!"Uei.:i 11.:ivw1u1m1"111~ '

"il :::l'i' el-!l."ll el eJ'U n 11191 b tJ 'Um tJ ~ fl~ru e1 n~11'1 ei'M'1viiJ1flciii.:i1'U"U ei.:ivii.11 tJ-31 'U bb'1 :::'M'1viiJ1 flf'U ~ flelil~1 b\91 ei{ , g~ , 'U

~"il11lli1

-Uei (3) r-Jt'lLLm:::uLJ 1'i'el.:in1vi'Ut'l~'Vl~n11LoLJ'1fi-:i-LJ'eli1mL'1:::1:::uu-LJ'eiii'11 iXL vii11:::'1iinu fl11b .LJ11.if .:i1'U"Uel.:i 'U'U 'U 'U

rn oU-!11'U bb'1 :::viiJ1~ m1iiru ~ t'l"llelU b 'U fl11U nu~.:J1'U"Uel.:J rn i.:i1'U 1 :::UU'111'1'Ub 'Vl fl! 11i1~,:i:ij fl11'VlU'Vl1 'U~'Vl ~ 'U ~ 'U

' ,, \IQ' I 0 cu.q

m1L"U1ti.:ieltJ1.:i'1mL'1lJel t'l.:J'U

( 1) n1vi'Ut'l bflru6V1'1'Um1el'4riJ119l1 iXL .LJ1fi.:im11 -U.:i1'U'111'1m 'Vlflf ~b~tJ1-LJ'ei.:inum1el'4 rii1\9l m1n1vi'Ut'l

O I ..

- el1'UeltJ1-!lbt'ltJ1 ., .,

- '111-!l"UellJ'1 'U

- uei'U-LJ'el~'1

- bbtlt"U

- el'UWl '

-1~:W~'Vl6

1.2 n1Vl'Ut'lbflllisvlfl111:::~U~'VlB lJelUel1'U1"il 1'!Xbtl'U1 U\911lJfl11U~V111~t'lfl11fl11b .LJ1fi.:i"llel.:Jrn i.:i1'U

(User Access Management) ffi~n1Vl'Ut'l11 'U

1.3 rn i.:J1'U~~el-!lfl11b -LJ'11 i.:J1'U1:::UU'111'1'Ub'Vlfl!"Uel-!l L HVW1U1'111"111~ "il:::~el-!l"llelel'Ut1J1\91b lJ'U'11tJ 'U ' "'

~ n~rua fl~1Lb'1:::1~-ru fl11~"il11ru1ei'U ru1\9l"il1 fli11viiJ1 nciii.:i1'U "llel.:JV1tl1 tJ-!11'U Lrn :::'M'1viiJ1 fl!'U~flelil~1b\91ei1 , (LI , \I

~"il11lli1 .

(2) n Trn tJ .:itl w Lil Vl'IJ e:i.:i .LJ e:ilJi;i Lb'1~m1~ ~ '11~um1 lJ~1 fOi' ru Vl~e:i '11 ~ u.ff 'U fl11ll ~'U'IJ e:i.:i.U e:ilJi;i 1-U 'U ... 'U

LL 'U1V11.:i ~nll1~ L ti tiu11~1 ti m1-rm~nm1ll~'U'IJe:i.:iV11.:i11"11m1 VI. 121. 2544 1~ ti 1~n1V1'U~ m~u1'U m1LL'1~

m1:iJ16~me:im111~~1f"i'(1jH ~.:id 2.1 ~~bbtl.:i1~~'Ul"111lJ~1fOi'(1j'IJ€l.:ioU€l~'1 €l€lnLU'U 3 W~'U ~€!

ii d.::::i1 Q.I 0 v d - 'IJ€lll'1Vlm~~'Ufl11ll?l1flfl 1lJ1nV1?1~

'U ·~ •

ii .d.c:1 Q.I 0 Q.I tl - 'IJ€lll'1Vlll1~~'Ufl11ll?l1flru 1'Uni;i1.:i 'U .,

' II .::::il.c:I CV o QJ II

- 'IJ€lll'1Vlm~~um1lJ?111D1ru'Ue:iti 'U ., ,, 2.2 ~~bbtJ.:i'11~'UoU'Ul"111lJ~'U'IJ€l.:ioU€llJ'1

'U

- -lJvlJfli;Y'U~ft~ VllJ1t.lf111lJl1 Vl1nb U~ b~ ti~.:i'VllJ~Vl~€lb ~ ti.:iu1.:iG'i1'U"il~ ne:i 1 ~bfiVl fl11lJ " . "" ... d

b?lt.l'Vl1t.l11t.lbb 1.:iVJ?t~ • - -lle:i~ftir'UlJ1 n VllJ1 t.lfl11lll1 Vl1 rn tJ~ b~ ti~.:i'VllJ~Vl~m ~t.l.:i'U 1.:i'11'U"il~ne:i 1 ~bn~fld1lJ

"" ... b?lt.l'V11t.l11t.lbb 1.:i

- -llei~fliru V1mtim1ll11 V11mu~L~ti~.:iV1llviV1~m ~ti.:iu1.:i~1'U"il~ne:i 1 ~Lfi~fl11lJL~tiV11ti - -llm.m~11tl V1lJ1tifl11lJ'.i1 -U'e:ilJ'1~?11m1mu~L~tiV1~m~mLV1~~11tl1~

" 'U ,, 2.3 ~~bbtl.:i1~~'UoU'Un11boU1'1.:i ,,

- 1~~'UoU'U~1V1-rueYu~V11111.:iV1ti1u1m1"111~ 'U

- 1~~'U.ff'U~1Vl-r'UeYV1bb'11~'U'U'IJ€l.:i 11.:i'Vit.l1'U1'111"111~ 'U'U

- 1~~'U.ff'U~1Vl-r'Ub~1VliJ1~'1J€l.:i 11.:i'V'lt.l1'U1'111"111~ - 1~~u.ff'U~1V1-ruuflf1'1~11tlll11.Uu~m1'1Je:i.:i11.:i'ji'jti1u1i;i11"111~

' -lle:i (4) eY~bb'11~'U'U ~e:i.:i~~ 1 ~1lm1&1~~.:i1~uuu'UVimLi;i~&i~~1llm11.U.:i1'U1~uu?111?1'UL Vl\21'1Je:i.:i 11.:iV1ti1u1i;i

'U'U •

11"111~ LL'1~~11"il~ 11 m1i;i ~ LiJ~m1:iJtli;ie:i~.n ti~il~m~uu?111?1'UL Vl\21

-llei cs) eY~LL'11~uti ~e:i.:i~~ 1 ~1lm1u'UVim1tii;i~ LBti~m1L .U1'1.:i1~uu?111G'lm V1121 bb'1~m1LLm 'IJ L tl~ ti'Ubbtli;i.:i 'U'U

~YIB~1.:i 1 L ~m tl'UV1~nJi1'U 1 'Um1~11"iJ?te:iu 11 11 lJ QJ 1 ll.::::il CV 4 I ii .cJ ~ d ~J CV 1

°llel (6) ~~bb'11~'UtJ ~e:i.:i"il~ VllJn11'U'UVlnn11~1'Ub'IJ1-€l€ln?lm'UVl~.:i1~'UtJ?l11G'l'Ub Vl\21b Vim u'UVl'1n'11'U 'U 'U'U ~

n11~11"il?l€ltJ

.Uei <1) n1V1'U~1~t.l~b 1mb .U1'1.:i1~utJ?111?1'Ub Vl\21

~1'U~ 2 n11tJ'i'Vl11~1iln11nTn.U15~"!.leJ~~.Y~1'U (User Access Management)

.Ue:i (8) cr~bb'1W'U'U ~B.:!rl1'V!'U~fl1"J'1.:J'Yl~bUtJ'Urn.ff-nu1vt~ ~.:id • 'IJ'IJ 'IJ

( 1) ~~v11bb'U'Ui'Jei{l.lm"J'1.:i'Yl~b uti'Urn i.:11'U 6'11V1fo"J~'U'U b 'Ylf11'LI L'1~'11"J61'Ub 'Yll'l 'IJ

(2) cr~bb'1'rn'U'U~e:i.:im1'0J'1B'UUru~rn .ff.:11'U b ~a 1l-11 ~i1fl1"J'1.:J'Yl~bUtJ'UsV1sVB'U \ICU " '\I

(3) er~ bL'1"J~'U'U~B-:J\J1"J1Wlel'U bb'1~ 1 ~~'YlE1 'Ufl1"J b oU1fi.:i~ b 'V!l.11~'1l-l~e:ivtiJ1~f111l-lfo ~vi'UB'U 'IJ'IJ

(lil1l.loUeJ 3)

(4) cr~bb'1"J~'U'U~B-:Jrl1V!'WVJ 1 ~i1fl1"Jbb'OJflbBn'11"JV!~B~-:J~bb'1VJ-:J bU'U'11tJGi' m~mlei'n~"J1 ~bLnrn .ff b ~B 'IJ'IJ 'IJ

bb'1vi-:ifi-:i~'Y1Bbb'1~V1iJ1~m1l.l-r'U ~Vl'UB'U'1JB-:J m i.:11'U 1 'Wfl1"Jb oLJ1fi-:J"J~'U'U b 'Ylfl L 'U L'1 ~'11"J'1'Ub 'Yl Pl 'IJ

oUeJ (9) cr~bb'1"J~'U'U ~B-:Jrl1V!'UV1 fl1"J1 -ff-:i1'W"J~'U'U b 'Ylfl L 'Ufa ~'11"J'1'Ub 'Yl P1~i;11r1 ru b od'U W'U'Uf1Bl.1~1 b\Jl e:i{ 'IJ'IJ v

LU"Jbbfl"Jl.IU"J~~n~ (Application) 'OJVJV!l.11tJBb~n'Yl"JBUn61 (E-mail) "J~'U'Ubf1~e:ioiJ1tiH611tJ (Wireless LAN)

"J~'U'UB'Wb1J1BidJ1J1 (Internet) b U'U~'W 1vi ti~a-:i 1~~'YlEbU'W1~fl1"Jtl~u~-:i1'U1'WvtiJ1~bb'1~1~-r'U m1l.IL ~'W'UB'U bU'WmtiGi'n~ruei'n~"J

.ue:i c10) crvibbm~'U'U~e:i-:i'Yl'U'Yl1'Uuqi~m.rr-:i1'U ~'Y1Em"J1.ff-:i1'U e:i~1.:161l.J1b"1l.le:i e:i~1-:iiJe:itiu'1~ 1 1°1{-:i b~e:i 'IJ'IJ 'IJ •

UB-:Jtl'Wfl1"Jb oLJ1fi-:J"J~'U'U LVJtJ 1l-11~-r'Uel'4t1J1~ L~tJU~'U1ilJ11l.lbb 'U1'Yl1.:J ~-:id ( 1) Yil-l-W"J1tizjei"1rn-:icr~ ~-:ii1~'YlE1 'U"J~'U'U bbti nml.lwu1 ti-:i1'U

'IJ

(2) ~ vi61-:i"J1tizje:i,!'U1 ~ tl'U ~u.:i r1'Uu ru'U1'UB-:Jvt'tld ti-:J1'W b ~e:i ~1 b U'U fl1 "J'Yl'U'Yl1'U"J1 tizjmb'1 ~~'YlE fl1"J b oU1 'IJ v

1.ff.:11'W11~n~a-:ivt~a1~

(3) ~1LU'Ufl1"Jbbm'UoUm,J'1 ~'YlE~1-:i ~ 1~~fl~B.:J\J11l.lm~-r'Ubb~-:JflGi''U'OJ1flV!U1tJ.:!1'U (4) ~'U\1le:i'Utll)u~611vt-r'Um"Jtim~fl~'Y1Em"J1.ff-:i1'U bne:ime:ie:ifl~e:i-:i~1bi1'Um"Ji11ti1'U 31'W v11fl1"J

V!~B bnmtJ~tJ'UbbU'1.:Jvl1bbV!U.:J~B.:1~1bU'Wfl1"Ji11tJ1'U 7 1'U vl1fl1"J

-Ue:i (11) fl1"J'U~V!1"J~Vlfl1"J"J'IX"1~1'U

( 1) rl1V!'UV1fl1"Jb tl~ tJ'Ubb U'1-:J bb'1~ fl1"jt) flb~ m'IX"1~1'W Lne:im i-:i1'Ume:i B fl V!~B~'U'OJ1fl\J11 bb vttl.:i V!~B • 'IJ

tJflb~flfl1"J1 i-:i1'U

(2) rl1V!'UVJzjmJi .ff bb'1~"J'\X"1~1'U~B-:J1~sV1tl'W

(3) 61-:Jl.IB'U"J'\X"1~1'U-ti'1 f1"J111 ~tl'Urn oU-:J1'U ~1 ti1Tifl1"J~U'1 e:ivi.tl tJ VI~ flb~ tJ-:1fl1"J1 oU'Uf11°1'1 ~'WV!~B fl1"J61-:J 'IJ '

'OJ~vtmtiBb~fl'Yl"JBi1n'1 ~1~i1fl1"JUB-:Jtl'U 1 'Lim"J61-:i"J'IX"1~1'W

( 4) rl1V!'UVJ 1 ~rJi oU-:J1'U\J1B'U~'U~'Wfl1"J1~fo"J'\X61~1'U

(5) rl1'\l!'UV1~1'U1'Wf1{-:J~CJBl-11~rnoU-:J1'U161"J'\X"1~1'U~Vl1v11.~bfl'U 3 ri{,:i 'IJ

(6) rl1V!'WVJ 1 ~m oU-:J1'U 1~u'UViflvt~mn'U"J'!X61~1'W111 'U"J~'U'Uf1ell.!Yi1 b\J1BTI 'U"JUbb 'U'U~1~1~UB-:Jtl'Wfl1"J 'IJ 'IJ

(7) 1 'Wmrui1m1l.lli1'1 b tJ'U~e:i-:i1 ~~'YlEfol'!~n'Urni.:iTu~i1~'YlE"1-:i"1vi rnoli-:i1'Ui1'U'OJ~~e:i-:i1~-r'U m1l.I '\J 'll " 'll

b ~'U'UB'U bb'1 ~B'W~~ 'OJ1 fl~ eJ1'U1 CJ fl1"j 1vi tii1fl1"Jrl1V!'UVJWtJ~b1 '11fl1"j1 oU-:J1'U bb'1 ~"j ~ ~'U fl1'j' 1oU.:!1'WVJ'lJVi Ln a ~'U ' 'IJ

n1vt'U~"J~ti~b1m~-:ifl~11vt~B~'U'OJ1flvl1bbvttl-:i bb'1~i1m"Jrl1vt'W~~'YlEYibl'l~~1~-r'U 11"11mwb.LJ'1fi-:i"J~~'U1vi . 1~iJ1-:i bb'1~~e:i-:i n1'V!'Uvi 1 ~"J'IX"1rn .U-:i1'U ~1-:i'OJ1m'IX"1rn .U-:i1'U1J11l.ltlfl ~

'IJ 'IJ

.Uei < 12> ~~ bb'11~t1t1 ~ a.:it1~V111~~ n11mwLJ'1fi.:i.Umm l'\1iitJ1~ b.f1'Vl.ff tJm1ii~t1 1 tJ n11mt1fliim1b .LJ1fi.:i 'U'U 'U q

.LJ'eiii'1 bL~'1~tJ w b.f1'Vl.ff 'lJ fl11ii~t1~.:i fl11b .LJ'1fi.:i 1~ ~m.:i bL'1~ m1 L .LJ'1 fi.:i ~1'lJ1~t1t1.:i1tJ 11ii fi.:i1~m1vhm ~.LJ' eiii'1 ~ ~

LL~'1~tJ1~b.f1'Vl.ff'lJm1lJ~'U i'j~,:i~eJ 1 tJd

( 1) fl1'UfllJfl11 b .LJ'1fi.:i bb~'1~tJ 1~ L.f1'Vl.ff 'lJ fn1lJ~'U ~.:Jfl11L .LJ'1n.:i 1~~ 1'11.:J Lb'1~ fl11 L oLJ1fi.:J~1'lJ1~'U'U.:J1'lJ • (2) n1'Vl'lJ~UqJ'li~ oU.:J1'lJ (Username) LL'1~1~i;"1~1'lJ (Password) L ~a 1 m 'lJfl111'li1'1i;"1eJ'U~11'l'lJ

" '1~.:J'1JeJ.:Jm oU.:J1'lJoLJ eJlJ'11 'lJ Lb~'1 ~oU'lJ fn1lJ~'U'1JeJ.:JoLJ eJlJ'1 ~ ~ ~

(

0 1" ., 1" .... ""'.d ... ., ' 3) fl1'Vl'lJ~1~ ~ ~ L1'11 fl11 '1l.:J1'lJLb'1~1~.:J'U fl11 '1l.:J1'lJ'Vl'lJ'Vl bl.I ffW'lJ1~ ~~ L1'11~.:J fl'111

(4) m1-S't16'i.:i-LJ'm\l'1~11°lqi~1'lJ1~t1'ULfl~v'1l1~1;"11511ru~ fl111~-St1m1L-LJ'11~1;"1 (Encryption) ~LU'lJ lJ11'11ji1'lJi;"11fl'1 L'li'lJ SSL, VPN 'Vl~v XML Encryption bU'lJ~'lJ

( ) o

0 1.d ., ' d o ., ,.!J ., ., 5 fl1'Vl'lJ~fl11b u'1~'lJ1'Vli;"1i:.J1'lJl'\1l.11~~~L1'11'Vlfl1'Vl'lJ~'1Jf).:J1~~'Ufn1lJb11flru'1Jv.:J'1JvlJ'1 ., ~

( 6) n1V1'lJ~lJ1mfl11-S'mnm1lJ~'lJ fl.:JtJ'1 a~.n ~'1JeJ.:JoLJellJ'11 tJmru~'l11~'lJ'Vl-S'Yl ~ vv fl'lJeJ fl'Vlil1 ~ .:J1'lJ

L 'litJ tl11.:i-Smn 1'111'1'11eiii 1,Xv11L i'.JtJm1~11a.:ibb'1~'1t1oU'eiii'1~Lnt1a~1 tJ~eiutJVinneitJ L lJ'lJ~'lJ ' ~ ~

(7) b ~1'1Jei.:i.LJ'eiii'1~a.:ii1m1m1'11;"1eit1 m1ii b 'VllJ1~(;"1lJ'1J a.:i~'VlB1 'lJ m1 b -LJ1n.:i.Ueiii'1'1Ja.:im -U.:i1'lJ a ~1.:i ~ ~ ~

-uei~tl'1~ 1 fl~.:i b~a1,x~'lJh1~11~'VlB~1.:i 1 mm1~.:ifl.:ii1m1iiL'Vlm~1;"1ii .Yfo ( 13) 1~t1t1.:i1tJ1;"1111;"1m 'Vl\31'Vl1.:J~1n'1~b zjaii 1~.:in'lJ (Business Information Systems) 1,X~1V1-U'1nzjii .:i1m 'Vlfl 1 tJ fa ~1;"1111;"1m 'Vl\31'1lv.:i h.:i'Yl~1t11'111'1l1~ Yl1i111ti.ntJ1~b~'lJ~1.:i 1 'Vl1.:i~1tJm1ii~'lJfl.:JtJ'1ei~.n ~ Lb'1~ '1 ~~ei'lJ~1.:i 61 na'lJ~ ~~'lJ11i! 1-U-LJeiii'1~1iin'lJ 1'lJ1~t1t1.:i1'lJ V1~a1~t1rn 'Vlfl 1 'lJ fa ~1;"1111;"1m 'Vl\31~'1~Lzjaii1~.:i b .LJ1 • I ~

~1 ~ntJ b 'litJ 1~V111.:i 11.:iYl~1t11m1'1li~nt1V1i!1~.:i1tJ~m'1lm zjeiii 1~.:i ( 1) n1'Vl'lJ~'Q 1~tJ1mb'1~lJ1~1fl11L ~vfn'UfllJ Dv.:Jtl'lJ bb'1~'U~'Vl11~~fl111 oUoLJeJlJ'1~1lJtl'lJ ' ~

(2) Yl1i111ru1'11n~V1~ei hJm~qi1~ n11b -LJ'1fi.:i.LJ'eilJ'16'i1m.Jflfl'1

(3) Yl1i111ru111i1t1flm m 1~iJ1.:i~i1~'VlBV1~ei 1~foeitJru11'11,XL .LJ'11-U.:i1tJ ' '., (4) Yl1i111ru1 b~ei.:im1'1.:i'Vl~bti~tJm <U'.:i1'lJ

~

(5) hfomU1~ 1,Xi1m11 i.:i1'lJoLJvlJ'1~11°lruV1~voLJ eJl.1'1 ~1lJ n'lJ 1tJmru~W'U'U1~i1mmn11ll a.:i n'lJ q Ill \I u 'U

~1'W~ 3 m·n-h'Vl'W~'VIU'l~fl11l.J-ru~~"IJe>tJ'tle>.:Jm-U.:i-i'W (User Responsibilities) 'IJ

.Uei (14) m-s1.U.:i1'U-s~6'1e..iTw 0i.:i1'W~eNtl~u1i v1'ld

(1) m-rr\l1'WiiVti!1m 'Um-sueJ\ln'U (9lm1 -rn~1-LJ'eJlJfluru~rn-if'l1'W bbfl~-s~6'1e..i1'U 1~wrn-if 'l1mb~fl~ \I \I \I ti \I \I

f1'W~€l'liiurn~ffi-if 'l1'W"IJ€l\l~'Wb€l\l ~1lJ1 oif~1lJnuer~'W -s1lJ~\l~1lJ'Vl1m-sbe.J ~ bL td Lb'1n~1CJ v111 ~er~'Uci1\l~ •jj 'IJ - 'IJ 'IJ 'IJ

(2) n1Vt'Wm~6'1e..i1'Utl-s~neJu~1 CJ{l]1eJ'n~-shli!mi n11 6 (1)1eJ'n~-s zj\l~eJ-:itlwneJu~1 CJ{l)1 bfl"IJ

(Numerical Character) IJ11e)n~-s (Alphabet) bbfl~{l)1eJ'n~-s'Wbl61~ (Special Character)

(3) hln1Vt'W(9l'S~6'1e..i1'l.J~')'W'Uf1f1fl'11n~€l'\1!~€l'W1lJ6'1 nfl"Utl\l~'Wbtl\l 'V!~tl'U f)f)fl b 'W f1'S€l'U 1411'1 ' ' ,

( 4) 1l-l"l oif-s~6'1e..i1'W~1'W'Uf1f1fl6'11Vt1''U fl1'S 1 oli'bb YllJoLJ€llJfl~')lJ n'U'Uf1f1fl~'We..i1'Wbf1~€l"t11 CJf1m.JYl1 b~ €1{ ' 'IJ '

(5) 1~1 o1f1 tl-s bbn'S3.Jf1 €llJYl1 b~ €1{'1i1 CJb 'W m1"il11~6'1e..i 1'W~1'W'll f1f1fl e)~ b 'WlJ~ (Save Password) ' . Gi1Vtfo b f1 ~€1\l f1 €JlJYl1 b~ €l {~TW'U f1f1fl~ffio1f\l1'U f11€l'U f11€l\l €l ~

' 'IJ 'IJ

(6) 1~'1(9l'V!~€lu'WVim~6'1e..i1'W~1'W'Uf1f1fl 111 'WG'lm'W~ ~41CJ~eJm161-:i bn~b-M'U"ll€l\l'llf1f1fl~'W ' '

(7) n1Vt'U(911~6'1e..i1m~lJ~'W1 ~nuffi i-:i1'W 1 ~CJ1n~€lm1b(911 bbfl~m1~-:ilJ€lu1~6'1~1'W1 ~nuffi oif-:i1'W 'IJ 'IJ

~€1\lb ll'W1 tleJ~1\ltlfleJ(91.t1CJ

(8) rnoif-:i1'W~€l\lbtl~CJ'U'S~6'1~1'W 1~bn'W 90 1''WVt~€l'Vlnri~-:i~iim-sbb..J-:ib~€l'Wb~btl~CJ'W1~6'1e..i1'W 'IJ '

.Uei ( 15) fl11U1fl11b oV11~6'1 m1 oif nuoVeJlJfl~ b U'Wf111lJ~'U m oif-:i1'U'1~~ €1\lUDU~ ml-11~ b i'foum1fo~1 'IJ 'IJ ~

Cl.I SI , lh::i.o::::f ti Q.J' .J ~I f111lJfl'U'Vl1\l11'l!fl11 V'l.161. 2544 bbfl~~tl\l b'l!15fl11b"IJ11'\1!6'1'Vlb u'Wm~'S~1'W6'11nfl .. .Uei (16) m-snwv111\91 ~ ~Ln\91'11nm11-1i'uf1J~"UeJ-:i0-11-:i1'W eJ''Wiin~VtmCJn1Vt'W\9lb~ bll'Wri11lJ1'u~\911~11 n11m~v11i!'U'1~ bn\91'11 nm i-:i1'U'\1!~€l hi nmlJ 1 ~'1€111 b ll'Wm1lJ1'u ~ \916!1€lu~1'Uuf1f1flzj-:icrt i-:i1'W'1 ~~ €1\l

'IJ ' 'IJ ' "'

fo ~ \9l'l!ff\J 191 €l f111lJ ~ \91Vi bfl \91"1i'W b €1\l

oUel ( 17) rn oif 'l1'W~€l\lvl1fl1'SYl6'1'1tl!Ji'1~'U'Vlnf1~\ln€l'W~'1~ b oif~'W'Vl1'~~'\1!~€l'S~'U'U6'1116'1'Wb 'Vll61"1J€l\l h \lYW1'U1fl 'IJ 'IJ '

-s1'l!1n bbfl~Vt1 n m-s'W6'1'1tl!Ji'1~'WJ'Wiiu ruVt1 hl11'1~Ln\91'11n1~-s~G'l~\91 Ln'W 3 141~\l n~ Vt~mn\91'11 nm13.1 'IJ u

~\91~"11\911(91 6'l fi~ m-11\l1'W~€l-:ibb..J-:i1~er\9lbbm~'U'U'Vl11u~'WVi b\91CJtln~m3.Jbb'W1'Vl1-:i vr-:id I .., ..,.., ~

( 1) f1€13.!Yl1 b~€l1'VI ntl-s~ bfl'Vl neJ'W fl11b oV15-:i1~'U'Utl nu~ fl1'S~ €l\lvl1 fl1'SYl6'1'1tl !Ji'1 ~'W'Vl nri~\l , d..J \I ,

(2) m11 oif-:i1'W1~uu f1€l3.l'W1 b~eJ1~'W b 'W bf1~€l"tl1CJ'1~~ eJ-:ivl 1 m1Yl6'1'1tJ!Ji'1~'W'Vl nri~-:i 'IJ '

(3) m11 i'l1'W~'Wb~eJfru~ (Internet) ~eJ\lv11m-sYl6'1'1tl!Ji'1 ~'W Lbfl~~eJ'lii m-su'WVi noVeJ3.Jflzj-:i "' 'IJ 'IJ

6'113.!11t1u\lu€ln (1)1~'W neJ'W m-s 1 oif 'l1'U'Vl nri1''l '

(4) LdeJm oif 'l1'W 1~€1 ~~ Lf1~€l\lf1€l3.l'W1 L~eJ1 ~ eJ'lv11m1~ eJnVti!1'1 eJ'Vlnri~-:i LL"1 ~ ~ eJ-:iv11m1Yl6'1'1tl \I \I , \I

!Ji'1 ~'WneJ'W fl1'S 1 -1i''l1'W'Vl nri~-:i '

(5) bf1~€l\lf1€13.!Yl1 b~€l1'Vl mri~eJ\l~ €l\lvl1 fl11~\l b1fl1~ nVti!1'1€l (Screen Saver) b\91CJ~\lb1fl1€l ~ 1-:i '

iJeJCJ 30 'WTVi

.UeJ < 1a> m i-:i1'W~€l-:im~Vttirnbfl~-s~ir\91-s~1\l~€lm11i-:i1'W-Vmm1~11.VeJlJfl,r'W'1~b ll'W"IJ€l\l b 1\l~CJ1u1fl-s1'l!1n 'IJ 'IJ 'IJ

Vt~ el b tJ 'WoLJm;J"1"1l el \l~ f1 ri fl n1 CJ 'W €l n

.uel < 19> oLJ€l3.J"1~b ll'Wm13.J~'U'\1!~€lii-s~vruf1113.J6'11fi'ru ~€1 CJb 'Wfl1'Sf1'S€l'Uf11€l\l / (91 bbfl"IJtl\l h'l~CJ1u1m1'l!1 n \I QJ \I \I

~13.11lJ1 ~v11m-sLt:-Jmb ~~ b tl~CJ'Ubb tl"1\l v11sff 1 Vt~elv11"11CJ L\91CJ1lJ1~1''llel'Wru1~'11n~eJ1'W1CJm-sh'l~mu1"1 ' u 'IJ

ifo (20) rn sif .:i1'Ui'.ici1'U~1lJ b 'Uf111Vl bb'11'f1~1bb'1~fo~V1'1lf.l'U~f.loLJf.llJ'1'lJeN 11.:J'VW1'U1m1'1ll~ bb'1~oLJf.llJ'1'lJf.l.:J~ 'U 'U 'U 'U 'U

lJ1fo'U~f111 'Vl1f1bflVlf111~t1J'Vl1EJ 1viml11 tJ1 m 'UV11.:J~~Vl f111be.J mb Vl1bV1EJhJ1~1''Uf.l'4t1J11'1 rrt sif .:i1'U~f.l.:Jiici1'U ~1lJ 1 'LI m11'u ~ V1'1lf.l'U ~ eim1:iJb~ EJV11EJi1'U~1 EJ

ifo <21) rnsif.:i1'U~ei.:iuei.:in'LI vibb'1 1'm~nHzj.:im1:iJ~u 1°111:iJf;1n~ei.:i bb'1~m1:iJV11ei:iJ1sif'llei.:i-U'ei:iJ'11'1'1eivi'1'U 'U 'U 'U 'U

bein?111 ~eiiJ'LIVin-U'ei:iJ'11°1f.l:iJ'W1 bl'lei1 V1~m111?1'Ub Vliat~1.:i 61 ~b~EJ.:i~eim1b .U1n.:i 1viEJ~zj.:i1l.lii~Vl~ 'U I -u

ifo <22> rn-U.:i1'Uii~Vl~1viEJ'1lau511:iJ~'1 ~ bnu1'n~1 1-ii'.:i1'Ubb'1~ua.:in'UoLJ'ei:iJ'1611'Uu 1°11°1'1mm ~'U?tlJ A11 '\J . '\J q

b 1.:JVIEJ1'U1'111'1ll5'1~ 1 ~f111?fi.J''U?f'U'Ubb'1~ bl°111Vl~eJ~VlB611'LI'Ul°1 A'1 bb'1~ 1l.JeJ'Uf1 '11'1b~'U1°11°1'1'Vl~.:J'UA1°1'1 bV1Vh ct q qot q q

f111'1 ~ blJVl~ eloLJf.llJ'1 ci1'U'Ul°11°1'11vi EJ1l.11~1'ueiw;u11'1'11 nrn sif .:i1'U~l°11f.l'U1°11f.l.:JoLJ f.llJ'1,r'U EJ f1b 1'LI1 'LI mru~ C\J q \"' '\J '\J

b 1.:JVIEJ1'U1'111'1ll~ ~f.l.:J f1111'111'1?ff.l'UoLJf.llJ'1 'Vl~fJA1V111oLJf.llJ'1,j'Ub~EJ1oLJf.l.:Jn'U b 1.:JVIEJ1'U1'1zj.:J 11.:J'Vl EJ1'U1'111'1l 'U 'U

l~el1'1bb~.:J~.:Jb ~~vl1'VliJ1~1'111'1?ff.l'U vl1f1111'111'1?ff.l'UoLJf.llJ'1b 'Vl~1,j'U 1~1'1'1f.IV1b1'11 bVlEJ 1l.J~f.l.:J bb~.:J b ~rn-if .:J1'U 'U 'U 'U

Vl11'U

"lia (23) ~1lJbUV1V1~fatsif.:i1'U (Run) 1tJ1bbf11lJU1~b.flVl Peer-to-Peer ('VllJ1EJA11:iJ1116n11~vibA~a"111EJ

Aa:iJ'W1 bl'la1bb uu'Vl~.:i ~n1V1'Uvi 1 ~Aa:iJ-W1 bl'leifl 'Ubl°1~a"111EJVlmA~a.:ib 'Vlija'Un'LI'Vl~m v11 bViEJ:iJn'LI bb~'1~ bA~a.:i '

. ~1.:im tJ1 bbf11lJ'Vl~aii bb Yl:iJoLJellJ'1 bnu11 b a.:i f111~Vl bb 'U'Ut1'Vi11~?f1lJ11f;1 b m tJ1 bb f11lJ'Vl~mb YllJoLJf.llJ'1'lJ a.:i 'U 'U

AeJlJoW1bl'leJ1bA~f.l.:J1vin1~ bbVl'U~'1~~ei.:i1<if'11f1bA~f.l.:J'U~f111bb~:iJ-U'm;J'1 (File Server) bvl1,j'U) 'Vl~f.l 1 U1bbf11lJ

~iim1:iJb~EJ.:Jb'U1~~'Ub~EJ1n'U b61i'U 'LiV1Vlf.l1b1'LIVi (Bittorent), ~lJ'1 (Emule) btl'U~'U bi''Ubb~'1~1~foa'Urn11'1 'U '•t1

'11f1~el1'U'Wf11111.:JVIEJ1'U1m1"1ll~ 'U

"lia (24) ~1lJbUV1'Vl~ei1-ii'.:i1'U (Run) 1tJ1bbm:iJeim.11m1'VlntJ1~b.flVl b~am1:iJiJ'UbVi.:i b61i'U m1~V1i.J'.:i ~.:Jb'Vl'1.:J bnlJG1 b tl'U~'U 1 'LI1~V111.:itJ~iJ~.:i1'U ifo (25) ~1:iJ1il'~'LIV11'V16'lJei.:ih.:iV1mu1m1'111~ ~~V1bl'l~EJ:iJ1~ b~f.lf111be.Jmb'Vl~ oLJ'ei:iJi;:i oLJ'eim1:iJ 1tlmV1V1~a

- 'U 'U

~.:i~'U1vi ~ii~n~ru~oLJ'vi~a~'1511lJ A11:iJ~'Ul°1.:J'lJf.l.:Jtl1~bVll31 n~'VlmEJ V1~eim~Vlu~ei.n11n'1"1Jf.l.:J 11.:1V1EJ1u1i;:i

'""'" 11'lJ1f;1

.Va (26) ~1:iJ1-U'~'UVl-r'Vl~'lleN h.:iV1mu1'111'111~ b~eim11um'U ria 1 ~bnV1A11lJb~EJ'Vl1EJ 'Vl~ei1.Um11'11m1:iJ

.Va~'1 'Vl~ei~.:i~'U 1vie1'U b U'U m1-LJ'vi~ eJf1!)'VllJ1 mb'1~~'1511lJ 'Vl~am~Vl'U ~eim1n'1"1Jf.l.:J t 1.:iV1mu1'111"1l1~ -Vf.l c21> ~1:iJ1-U'~'UVl-r'Vl6'lJei.:i 11.:iV1EJ1u1'111"1l1~ b~eitJ1~ fo"1JtlV11.:im1~1 ~m.u.n11n'111.:1V1EJ1u1'111"1l15 .Va c2a> ~1lJm~Vi1m11vi 1 b~eim1~noLJ'a~i;:i hl11'1~bu'UoLJ'am1lJ .n1V1 b~EJ.:i ".1~ei~.:i~'U1vi1'Ub1°1~e.i-U1EJ wuu?111?1'UbVliat"1Jei.:i h.:iV1EJ1u1'111"1J15 tvim~vi"1J1vi 1l.111'1~~1EJ16m11vi 1 ·n1'11:iJ

.Va (29) ~1lJm~Vi1m11um'U Vi1mEJ 'Vl~eiv111 ~1~uu?111?1'UbVliat"1Jei.:i h.:iV1EJ1u1m1"1l1~ ~f.l.:J'VIEJV1"1l~.rn '

"lia (30) ~1lJ 1 il'1~uu?111?1'Ub Vliat'lJei.:i h.:i'\l'j mu1m1"1l1~ b ~f.lf1111°11'Ul°1lJAeJlJoW1 bl'lf.l1'Vl~m~uu?111?1'Ub Vliat - ' m EJ'U ei n 1viEJ1:iJ 1~-ru f.1'4t1J11'1 '11n~f.l1'U1EJm1V1~a ~ ~ bb'11 ~uu ~1~-ru lJ eiu 'Vim EJ

-if a (31) ~1lJm~v11m11vi 1 eJ'Ul'.i~n~ru~b iJ'Um1~ni;oie.i'Ul '11.:i1'UV1~e.i1''Ui~~?!~TutJl°1A"1"1Je.J.:J~~'UhJ11'1~ Lll'Um&tvi 1 b ~eitJ1~ 1EJ"ll'LI1 'Uf111b .U1n.:ioLJ'e.i~i;:i 'Vl~m ~an111-UV11'Vlmmnm:iJ oila (32) ~1:iJ~vi~.:i~tJmruV1~e.im~Vi1m11vi 1 b~moLJ'1n.:i1~'U'U?111?1'UbVll31"1Jei.:i h.:1V1EJ1'U1m1"1J15 tviEJ1l.11~

-r'Ue.i'Uru11'1'11n~ei1'U1EJm1V1~e.i~vibb"11~uum~folJe.i'UV1mEJ 'I QJ '\J '\J'\J

...

..

fl1'1.J~ 4 n1"J'U~'Vl1"J-.5'V1n1"J~'IJ'Vl~'V'la (Assets Management)

-Ue> (33) 0i.:i1'Wl'i'B.:i1~b-U'1 hfl uV!eJ.:itl~u1in1'Hf1~eJ-ll1CJf1e:JiJ'W1b~erf (Data Center) V1mCJm1ii11 G'fm'W~ m i611V1~tJ~Vl~\lbf1~f)\jf)f)iJ'W1 b~ e:ifo~-tl1CJ bb~~ Vl~erntl f1'HUtJ~V11"J~Vl f11"Jbf1~fl-ll1 CJ ~ b U'Ub "!J~Vl1\!Vl1il LVl CJ

' b~Vl"!l1V1 L1mL~1~~tJeJ'Uru1~'11fl~Vlbbm~uu

, IU '\1\1

oUe> (34) rn oU\l1'Ul'i'e:i.:i1~i11eJtl mruVl~el~'W~1'W1V1Bfl fl'11 flVleJ\ltlniJ~ f11"J bf1~eJ-tl1 CJf1eliJ'W1 b~ e:i1 (Data v ' ~

Center) b 1'Wbb~1~~tJe:J'Uf1 '1~'11fl~Vlbb~"J~tJtJ ,·~ v v

,, ~ ., ., 1 ' 0 "" "' "' • I .. .,, 1 "" ., "' I "" • I "' I "!JV (35) i:.J b'll\l1'U~el\l il'U1bf1"Je:l\lile:l Vl"Je:le:l uf1"JUJe:l'U Vl b'1le:lilb"!J1bf1"Je:l"!J1CJb'l"le:lf11"Ju"J~fle:ltJ5"Jfl'1'11'UtJf1f1~ '\I . , , ,

-na (36) m i.:i1'Ul'i'e:i.:i1~f"i'vi~e:inV1~e:ivl1'11b 'U1bb-Wii-Ue:iii~~n~"!J~'V1Bn1num"J1 i.:i1'U ne:i'U1~~ue:i'Uru1~ bb~~ '\I '\I 1 IU

m oU\l1'Wl'i'e:i~1ii1 i Vl~f)~tJbb oWiJ-U'eliJ~"!Jf)\l~~'U 1~11mru1vi 61 v v v I

-Ua (37) mi.:i1'Ul'i'e:i.:ivl1~1CJ-U'Bii~ 1 'We:itlmru~eJD'UVin-U'e:iii~ bbYl'ii-U'e:iii~ neJ'U~'1~n1~vmtlmru~.:in~11 bb~~ '\J '\J , \I 'U ,

H'L 'Vlf1ilf11 'W m"J~uV!~e:i b ~CJ'U-U'e:iii~Vluu'U-U'Bii~Vin f111ii6i~ ru1 'U e:itl mru6i1V1-ru~viLfiu-U e:iii~ ri e:i'UVi '1 ~ I iJ \I '\J IU , ti \J

e:i'Uru1~ 1 Vf~B'Wi11e:itl mru'W''W1 tJ1 i.:i1'U~ B b Yle:itre:i.:i n'W 1~1 Vfil n1"J L-U'1fi.:i-U'Bii~ 6'11f"i'ru'W''W1~ bb~ ~'W'11"Jru1 'I QI '\J 1 I tJ '\I IU

i6m"Jvl~1CJ-U'e:iii~u'W~e:ii1'WVin-Ue:iii~bb~~~tl-a~bfl'Vl ~.:i-W '\I I '\J I I

-Ua (38) 0 oU\l1'Wiiw1hVil'i'ei.:i~tJ~V1'1leltJ~el~'U'Vl~Yl6Vi1 "J\l'l"lCJ1tJ1m1'1l1n iieiu111 moff\!1'UbG'!lJel'UVIU\lb U'U

~'W'Vl~Yl6"!le:i\l0-U.:i1'UbeJ\l LV1CJtJ"J"JV11"J1CJfl1"J~'W'Vl~Yl6 (Asset Lists) ~0i.:i1'Ul'i'ei.:i~u~vi'1leitJ m"JfoVl1eim"J

~'W~'W'Vl~Yl6 '1~'1 ni1'WVimL~~f11"J(?l"J1'1'1e:iu'Vl flf1~.:i 1vim ~1V1-U'1~ffi -a.:i'l"l mu1m1"Uin iiauvtii1 CJ v '

-Ue> (39) mruvl1.:i1'U'We:Jfl'1m'W~rn off .:i1'Wl'i'e:i.:ivi bbmb'l:::~u~vi"UeJu~e:i~'W'Vl-rYl6'1Je:i.:i 1 "J.:ivm1u1m1"Ui~ ~1tiWu v v

:We:ltJVlil1CJ

oUeJ ( 40) rn oU\lJ'Ui:ivttJ'1~\9leJ\l"UVl 1 <lf fi1 b~ CJV11CJ1~11'Vl-r'l"l6~'U,!Wil ~6lJ1"JVl vt1eJG'f rnvt1 CJ miJiJ~rl1'Vl~Yl 6~'U \I , \lg~ '\I ,,

V11 fl m1ii b~ CJV11 CJtimfi V1'11 nf111iitl "J~m'Vl"!lei.:i 0 i.:i1'U

-Ua ( 41) m oU\l1'Wl'i'B.:i 1ii1 Vf ~~'U~il f)eJiJ'W1b(?leJ1 vt1ei L tJ(?)Uf) 1~11mril1vi 61 b 1'Wbb~f11"J~il,r'U 1~foe:i'Umlb U'U 'U '\I , I ,

V d' OJ V II I

~1 CJ~ fl'\!}UJf) fl'l!}"J'11fl'Vl'JVl'U1 fl ~il\l1'U '

-Ue> <42) rrt-U.:i1'Uil~'VlB1.ff~'U'Vl-r'l"l6bb'l~"J~uuG'!1"JG'fm'Vll"1~1.:i 1 ~ h.:i'l"lCJ1u1~"J1"Ui~ ~Vlb(?l~CJ:w111 m.U.:i1'U

LVl CJiJ1(?)'1U"J~G'f\lrl b Ylf) fl1"J1 oU\l1'U'/JeJ\l L "J\l'l"lCJ1tJ1~"J1'1lin b vi1i!'U Vf 1:wi11Vfrni.:i1'U'U1~'U'Vl~Yl6'1JeJ\l"J:::tJtJ "I ,, '\I

G'!1"JG'fm 'V11"1~1.:i 11 ut it 'U n'1 m"J:w~h .:i'l"l CJ1u1~ "J1"Ui n 1~1~ n1vt'Uvi vt~e:iv111 VI bnvi f111m~ CJV11 CJ~ ei L "J\lYlCJ1u1~

-Ue> (43) f111iiL~CJvt1CJ1vi 1 ~bnvi'11nm"J~~LiJvimii-Ue:i (42) 1Vf~mlJ'Wm1ii~vi~1'W'l.Jf1f1~1viCJ0i.:i1'Ul'i'ei.:i Q.I ..::ii. I q d .c:i., ~ "JU i:.J Vl"Ue:ltJ (?) e:l f111il bG'! CJ Vl1 CJ'Vl bfl Vl"!l'U

,J d II .. d • '11'1.J'Vl 5 fl1'aFl1'UFJ11n1'H"ll1fl.:lbFl'ael"ll1eJ (Network Access Control)

.ziv (44) mmfl1';ifn'U~:Wfl1';ib'111-e:ie:ifl'IXe:i.:itJl)Wirn';ibF1~e:i'll18ri'il:w~1b1ne:i{

( 1) ~~~~ e:ilil1flV1t118.:i1'U.fl18'U€lfl'Vl flri'LI l?i'e:i.:ivi'1 fl1';j bb~ flU!n';i~1 oU';i~'U~11n'U b-d'U u 1n ';iU';i~'lJ1'll'LI .., . . V1~e:i 1 LJe:i'Uru11n.LJ'LJ~ n'Ub~1V1u1~~bb~m1:wtJ~e:i~n8 b ~e:i-ruu1n';i~~~~e:i (Visitor) bb!K1vi'1rn';i~.:Ju'LIVi fl 1 'LI

, QI 'U 'U

G'l~~U'UVifl ln1:W~';i~'-l 1 i1 'Ub€lfl6'111 ""ll'il'il'4'l:!1~LoU1-'il'iln'il1Fl1'a"ll'il.:I 1 'a.:l'We.11'\J1lil'a1"li1~ ('4FIFllilfl1e.l'U'iln)"

(2) er~~~€llil1fl'VIU18.:J1'U.fl18'U€lfl ~tl1e:itJ fl';itUFl€l:W~1 L!n€l{ 'Vl~€l€JU mru~1 -lit 'Ufl11U nu~.:J1'Uln 'U " , d.J

tJ l)u~.:i 1'1.J~'!Xe:i.:itJl)u~ fl1 ';j bri~e:i 'll18 ri e:i:w~1 bin e:i{ l?i' e:i.:i~.:iu'UVi m18 fl1 ';j ~tJ mru1 'LI bb 'U uvJ e:i{:w fl1';j'LJ e:i e:i'411J11n 11 d 1!;:"1 II 'j .,.... 1" b '1J1€l€lflm:W'Vl';i~'U 1 b 'Ub€lfl6'111 ""llvm..m.J1~ L "l11-e:ivnv1F11<a"ll'il.:I b ca.:icwa1u1~-a1"li1ri ('UF1Fllilfl1aimn)" 'VI

, • QI • ,, ., flfl!n€J.:J'lj~ b lil'U ..,

(3) ~~Lb~';i~'U'U l?i'e:i.:i!n';i11il6'1€l'UF111:Wflfll'i'e:i.:i'1Je:i.:i.LJe:i:w~ 1 'LIG'l:W~u'UVifl bb 'U'UvJe:i{:w'1J€l€l'Utu11nb '111-e:ie:ifl 'U'\J 'U 'U , , IQJ

'€11 Fl1'a'1J€l.:J b ';i.:JV'W1'U1~'a1"Ul5 ( 'UFIFl~.fl18'U€l fl) tl'U b ~1'VIU1~-rfl'l11fn1:WU~ e:i~n 8btl'UU';i~':il1Vl flb~€l'U • • .zi 'ii ( 45) m i.:i1'Ulil~tl1 bFl~e:i.:iri e:i:w~1 bin e:i{ e:itJ mrum b zje:i:w~ e:i tl'U bFl~e:i.:i rie:i:w~1 bin e:i{ ';i~'U'UbF1~e:i'll18'1J e:i.:i .., . 11.:i"W 81u1~ ';i1"U15 l?i'e:i.:ihi'-rLJe:i'LI ru11n lil1fl~1V1u1l31'LI~rie:i:w~1 bin e:i1 bb~~~e:i.:itJ nu~ 1n1:w bb 'U1tJ nu~t1t~ 8

, QI 'U d.J d.J

bFl~.:Jri-r~

.ziv (46) fl1';i'1J€l€l'411J11n1i.:i1'Uvr'U~ Web Server zje:i L~b:W'U~€l8 (Sub Domain Name) ~'VIU18.:J1'U -r'U ~ ~'lJ€l'U€l ~ liJ ~ ~€l.:Jvl1'Vl'W'.:J ~€l'LJ€l €l'U tu11n ~ €l er eJ1'U18 fl1 ';i brn ~lil ~~ €1.:J 1~ ~ ~tK.:i b tJ ';i bbfl';i:W 1~ ., ~G'i.:i e.J!;Wl €l

'U , u 'U I

e.J~ m~vi'U ~ e:irn';ivi'1.:i1'U'1J e:i.:i';i~'U'U bb~ ~en .U.:i1'U~'U ..,

.ziv ( 4 7) '\X1:wm~m~vl1fl1';ibFI~ €l'U~18 ~ ~tK.:i b ~:wb~:W'V1~€lvl1fl111~ ., ~€l€JU fl';itLl~1'Uflm.:J 1~ bbrl €JU mru 'U I , ,

~ ~ b~'UV11.:J (Router) e:itJ mrum~lil185'ruru1ru (Switch) e:itJ mrub zje:i:w~m~'U'U bF1~€lazl18'VI~ fl L~ 81~1~-ru , QJ llV ,

.ziv (48) ~~ bbm~'U'U l?i'e:i.:imuri:wfl11b .LJ15.:i1~'U'U bF1~e:i'll18 b ~€l'U~V111~ ~fl111~'U'UbF1~e:i'll181~e:i ~1.:i~ \1\1 •

" tJw~vi6.fl1"W ~.:i~e:i 1 tJ-Ll

( 1) ~ €l.:J':iJ1tl~~Vl~fl1';i1 oU.:J1'U b ~€JFl1'U Fl:W m oU.:J1'U1'\X6'11:W11fl1 oU.:11'UbO'W1 ~1~'U'U bFl~€lazl18~1~-ru • \I

" €l'Utu11n bvl1'W''U ....

(2) l?i'e:i.:i'11n~ b~'Uvi1.:irn1b '1115.:i1~u'U bri~e:i'll18~~ rn11 i.:i1'U~1:w n'U

(3) l?i' e:i.:i':iJ1n~ fl111 oU b~'UV11.:l'U'UbFl~€lazl18 lil1 fl bFl~€l.:J Fl€l:W~1 bin e:i1\ tJ ~.:I bFl~€l.:JFI €l:W~1 bin e:ifo~azl18 d1~"~" 1"" d 1" b'W€l :w b'VI~ b'll-!l1'U6'11:w11t:l "Ub6'1'UV11.:J€l'U 1 ~

(4) ';i~'U'U bF1~e:i'll1 m~.:i'Vl:w~'1Je:i.:i h .:i'W 81'U1~11"U15 ~~ fl11bzje:i:w~e:i1 tJ ~.:i1~'U'U bF1~e:i'll18 ~'LI 1

.fl 18'1.Je:i flV1t118 .:11'U l?i' e:i.:i b zj e:i:w ~ e:i~1'U e:itJ mruifo.:i n'LI fl11'U m fl n :w~.:i~ e:i.:i~m 1:w6'11:w 11'11 'LI fl11m1lil~'U • • • 1 U';ibbm:wtJ1~6'1.:Jrl~18 (Mal ware) ~18

(5) W'U'UbFl~e:i'll18~.:J'Vl:W~l'i'e:i.:i~~~.:i1~'U'Um11il~'Ufl11'Ufl';ifl (Intrusion Prevention System I •• Intrusion Detection System) b ~ €1 Inn lil 6'I €l'U fl 111i.:i1'U'1J €1.:11..l Fl Fl~~ b .LJ 11i.:J1'U1~'U 'U bFI ~ e:i'll 18'1J€l.:J

1 ';i.:i'Wcn'U1~';i1"U1m 'U~fl'\1ru~~~~tJfl~

,.

(6) m'wu161·rn'U'U bfl~a'll1CJn1CJ 1'U1-a'lvrn1'U1m1'1J1~ 1viCJ~1'UV11\l-a~'U'Ua'Ub~a{ b'Ul'r'il1 b lJ'Ul?i'v'lii ..,

n 11MD'U Vi fWU11 '1f '11'U (Looin) LVJ CJ bb?f V1\I \Pi'1 l'l'U ~1 CJzjB m '1f '11'U bbfl ~Ji' B'lii n11~ ?f '<il tJ~'l.HJ'UIPi''J l'l'U ::. .., ..,

(Authentication) ~1CJn111'1f1~6'f~1'U b~B~111il?fB'Ufl11imnl?i'a'l"tJB'lrni'l1'UnB'UV1nfl#\I .., .., . (7) vlB\IDB\ltl'Un1 iXV1t11CJ\11'U.tl1CJ'UBn~bzjBl.J~B6'f1l.J11'1l.JB\lb~'U IP Address il1CJb 'U"1JB\11~'U'U

bfl~B61J1CJil1CJ1'U"1JB\lL1\l'VW1'U1"1'J1'1J1~

(8) vlB\l~V1Vl1 bbt:-J'U~\11~'U'Ubfl~B'll1CJ (Network Diagram) zj\liJ11 CJfl~ bB CJV1 b~ CJ1 tl'U"LJB'Ub "11\?l"LJB\I

wurnfl~a'll1CJmCJ 1 'Wbbfl~bfl~a'll1CJ'WBn bbfl~a't.Jmru~1\I 61 'W~Bl.J~'l'tJ1'u'tJ1'l 1 iXL U'WU'<il'<ilD'UB~b?fl.JB , I , , "

(9) m11~ua't.Jmruu'Ubfl~a'll1CJ , , SI .c:::ri1 ~ Q.I Ci1 d I C:I I 111 I d SI 1" "' q

- t:-JV1bb6'11~'U'Ul.Jn11bfl'U'Ut:U'Un11"1JBb'UBl.J~Bbfl1B"111CJ Vlbbfl 11CJ'UBt:-J"1JB 'U'U1n11 11CJ6'l~bBCJV1 \1\1 Q,.I \I

.., "' .-.d 1""' ..1::: bfl1B\lflBl.J'W1b~B1V1"1JB 'U'U1n1'a IP Address bb6'1~6'fm'UVl~\I V V C., ~V .J "1" al '.'IV

- t:-JV1bbfl1~'U'Ul'IB\l'<il1flV1t:-J b'U\11'UVl6'f1l.J11m"111 'UB uflWJ bVl \1\1 \I ,

- mrua'tJmruiJm1bzjBl.J~B'<il1nbfl~B61J1CJil1CJ'UBn l'i'v'liJn111~'UVll.J1CJbfl"tJB'tJmru',h . ' . 6'f1l.J11m-U'1b zjBl.J~Btl'Ubfl~B'll1CJil1CJ b 'U 1~ Vl~B hJ6'f1l.J11m zjBl.J~B 1~

- a't.Jmrubfl~a'll1CJl?i'B\16'f1l.J11'11'!111il?fB'U IP Address "1lB\l~\lvl'UVl1\lbb6'l~'tJmCJVl1\11\91 • - n11 b oLJ1 b '1f \11'U B'tJ mru'U'Ubfl~B61J1CJ vlB\IVl1 n11~6'f'<iltJIPi'1 ~'UVI nfl#\lm '1f v'tJ mru

, '\I 'I 'I

.u B ( 4 9) ~ Vl bbfl 1~'U 'lJ Ji' B \l'U ~Vl11 fld 'U fll.Jbfl ~B \I fl Bl.Jtl'J b~ a{ bb:W 'll1 CJ bb6'1 ~ -ru ~ Vl'U B'U 1 'W n11Vlbbfl1 ~ 'lJ 'lJ \I \I 'I \I

f1Bl.J~1b~B{bb:W'll1CJ b'Un11rl1Vl'UVJ bbm"LJ Vl~Bb'tJ~CJ'UbbVfl\lfl1~1\I 1 "1JB\161!B'V'l~bb1{1~'U'U (Systems

Software

oUeJ (50) n11~Vl~\IVl~B'tJ-ru'IJ1\161!B'V'J~ bb 1{-a~'U'U\11'Uvl B'liJn11"1J BB'UWl'<il1fl~Vl bb"1'J~'U'U nB'U~1 b ti'U n11 , " \1\1

oU'iJ (51) rl1Vl'UV11 iXi1m1~vibn'U61!BfoL~Vl 1"1'U1~ bbfl~bBfl6'f116'f1Vl1''U61lB'V'l~bb1{"1JB\11~'U'U\11'U 111 'W?fm'UVi~iJ fl11l.J~'Ufl\l'IJ"1BV1J1 CJ

oU'iJ (52) fl11~V1bn'U-U'Bl.Jfl n111il111il1Vl1\lf1Bl.Jtl1 b~B{ (Loo) b ~B 1 iX.LJ'vl.Jfl'<il111il1Vl1\lflBl.Jtl1 b~B{i1m1l.J .., ::. .., '1nl'i'B\lbb6'1~6'f1l.J11'11~'Un\llP11'Uflflfl 1\91~1l.Jbb 'U1Vl1\I 'W.1. 'U. fl~l.Jtl1L~B1 2560 .., , . oU'iJ (53) rl1Vl'UV1l.J1m:01'U fld'U fll.J m11 '1f \11'U i~'U'U bfl ~B61J1 CJ bbfl ~ bfl~B\lfl Bl.J~'J b~ e:i{ bb:W61J1CJ'<il1nrn'1f\I1'U "' , .., mCJ'Ue:in 11'lvw1u1m1'1J1~ b ~B~LLfl-rn~1fl11l.J'IJi;ie:iV1nCJ"tJB'lwuu ml.ILL 'W1V11'1'1Jljllii~'l~B 1 'IJ~

(1) 'Ufl"11m'<il1 nV1i.11 CJ\11'Uil1CJ'We:in~l'i'a'I m1~V1~1 'W m1L -U11 '1f '11'U1~uu Lfl~e:i'll1 CJ LL"1~ Lfl~B\I , . flBl.JVl1b~afo:W'll1CJ"tJB\l L 1\l'WCJ1u16'111'1J1~ 1il~l'i'e:i'lv11L~e:i'l"11e:ie:i'Uru11'1 b lJ'Wmm:Jn~ruern~1 b ~B"LJBB'Wru1~

1 '-I 'I CV

1il1n~1V1-U'1n~l.J\11'Wb Vlfl 1'WL"1~?f116'fmV1l31L1\l'Wmu16'111'1J1~

(2) iJm1fl1'Ufll.J"liB\IVl1\I (Port) mm 'Un11b oU11~'U'UeJ~1\l-rV1nl.J • • (3) 1~m-a 1V1 61 ~?f1mwb -U1n\l.LJ'al.JmL"1~1~uu-U'e:il.J"11\911il1m~CJ~1ni;i l'i'e:i'l 1~1u m1a'Uru1\?11il 1 n

I " \I , "'

~1V1u1n~l.J\11'WL Vlfl L 'W fa~?f116'f'Wb V1l31L 1\l'Wmu16'111'1J1~

(4) fl1ib-U'1fi\11~'U'U'<il1m~CJ ~ 1n'1 m '1i''l1'Ul'i'B\lbb6'f Vl\IVI~ n:o1'U i~'U b Vl\?lt:-J'1Vl~Bfl11l.J'11b U'U1 'U fl11 \I doll , ,

~1b tJ'Ufl11fl'U L 'a\l'WCJ1'U16'111'1J1~ B~1\lbYlCJ\l'WB

(s) mwu1fi'l1~u'U bfl~a'll1CJn1CJ1 'Ubb"1~1~'Uu?f116'f'WL VJ\311'U1-a'l'W CJ1u1m1"ll1~ '<il1m~CJ~ 1n'11'i'B'I

iJ fl11"1\ID'WVi m .LJ'11 '1f '11'U 1vi mb?f V1'11Pi'11'l'W\911 CJzjBrn '1f '11'U brn~l'i'v'liJ fl11Vl6'f 1ilt1~'U~'U\Pi'1~'U \911CJm11'1f1~6'f~1'U .., ..,

b~am11il6'fe:iuf111l.J'1nl'i'e:i\1"1JB\lrn.U\11'Una'UV1nfl#\I .., .., .

oifo (54) tl1'Vl'U~1Vfiirn1LLU,mCJflbfl~e:J~1CJ ~-:i~e:i1tJ.0 ( 1) Internet LL tl-:iLLCJflbfl~e:i~1 m ~'ULfl~e:i~1CJ ve:iCJ 1 ml.lm1~.r<il1Lll'U 1 'Ufn11.U-:i1'U L ~e:Jfld'Ufll.I m1 •

L .U1'1-:iLfl~e:i~1CJ 1~CJ 1l-11~-rue:i'Uru1~ . ., (2) Intranet LL U-!!Lfl~e:J~1CJ.fl1CJ1 'ULL~~ Lfl~e:J~1CJ.fl1CJ'Ue:in L ~e:im1l.ltl~e:i~.t1CJ1 'Urn11.U-:i1'U1~'U'U

'111'1'Ub'Vll'l.fl1CJ 1 'U

oifo (55) n1V1'U~rn1tle:i-:in'ULfl~e:i~1mL~~~tlmru~1-:i 1 ~Lzje:Jl.l~e:inu1~'U'Ubfl~e:i~1CJe:iv1-:ii~L"il'ULL~~~e:i-:i O I I I 11/.c:f ~ ~ O

'Vl'U'Vl'l'Ufl11n1'Vl'U~fl1 Parameter ~1-!I 1 L"ll'U IP Address e:JCJ1-!l'Ue:JCJi:J~~ 1 m-:i 'Ue:Jn"il1n'Un11n1'Vl'U~ !:'1 4 ol.J ol I tJ tJ 1" .J .J tJ 1""' :::: LLn b'IJ'Vl'~m u~ CJ'ULL u~-!lfl1 Parameter ~e:J-!ILL"il-!I 'Vl'Uflfl~'VlLnCJ'".l'/Je:J-!I 'Vl1'U'Vl11'U'Vlnfl1-!I • •

oifo (56) W'U'Ubfl~e:i~1CJ~-!l'VllJ~~iim1Lzje:il.l~e:i 1 tJEJ'-:i1~'U'ULfl~e:i~1CJ~'U 1 .fl1CJ'Ue:in h-:i'l"lCJ1u1~1161J1~ ~e:i-:i Lzje:il.l~e:i~1'U~tln1ruue:i-:in'U m11in1nV1~e:i 1 tl1LLml.11 'Um1v11 Packet Filtering L"li'U m1·1-tl'1 vH1e:im~ (Firewall) 'Vl~e:i ~n{~LLT~~'U 111ii~-:i~e:i-:iiim1l.1'11l.111t:l1'Urn1~11"il~'U~~Ln{ (Malware) ~1CJ .Ue:i (57) ~ei-:iiim1~~~-!11~'U'U~11"il~'Ufl11'Umn (IPS/IDS) b~fl~11"il'1fl'Ufl11b'l'1-:i1'U'/Je:J-!l'Uflfl~~boLJ11i-:i1'U • • • 1~'U'ULfl~e:i~1CJ'/Jei-:i 11-:i'l"l CJ1u1~1161J1~ 1 'U~ rn~ru~~~~tl n~ 1~CJiirn1~11"il'1ffurn1u mn~1'U1~uu Lfl1e:i~1CJ ••

.J ., LnCJ1'/Je:J-!I

oi1 e:i (58) IP Address 'IJ e:i-:i1~uu-:i1mfl1e:i~1 CJ.fl1 CJ1 'U'11 L ll'U~ ei-:iii m1uei-:i n'Ui31 vrV1ti1 CJ-!!1'U.fl1V'Ue:J n~

L zjeil.l~e:i'11m1t:lmM L ii'U1~ L ~e:i L ll'U m1tl e:i-:i n'U hl1 Vl'Uflfl~.fl1 CJ'UeJn'11ii11t:l~oLJeil.I~ L~CJ1 nu LA1-!1'1~1-:i'/Jei-:i • 'IJ 'IJ

1~'U'Ubfl~fl~1CJ1~~CJ~1CJ

.Yfo (59) m11.U-:i1'Ubfl~e:i-:ii'.le:i~1-:i si (Tools) L~e:im1~11"il'1e:J'U1~'U'Ubfl1e:i~1CJ~ei-:i1~-rum1e:i'U~~"il1n~~LL~ I " \l'\J

cv 111 1dofl .~ 1~'U'Ubb~~"il1n~fl11 61J-!11'Ub\l'l"l1~ L'Vl1'Vl"il1L u'Ub 'Vl1'U'U

~1'1..1~ 6 n111"11'U"'l1ln1'HoU1~-!11::'U'Utl~u~m1 (Operating System Access Control)

.Ue:i (60) ~~LL~1~uu ~e:i-:in1V1'U~rn1~-:i'Vl~LliCJ'U'iflmm1V1li'IJe:i-:ih-:i'l"lCJ1u1~11"ll1~ (t~CJtl~~~m11.Uei 8)

1 'U m11 .U-:i1'U~1l.lfl11ii-.J1 L ll'U11ii~-:i~'U~ e:i'Utl~u~G11V1-ru m1CJ m~ n~'V1Brn11 .U-:i1'U (1~ CJtl~~~ ml.l.Ue:i 1 o)

L"li'U m1~1.e:ie:in 'Vl~e:Jfl11Ltl~CJ'U~1LL'V!ti-:i-:i1'U.fl1CJb 'Uh-!!'l"lCJ1'U1m1"ll1~ Lll'U~'U II o ~ ... l~QJ.Q d 1112'

"1.li:l (61) fl1Vl'UV1'1J'U(?leJ'Uu!)tJ(?lL 'l"leW1J1 "11-'l1'U

( 1) m oU-!11'U~fl-!I tl1'Vl'U~1~'1~1'U 1 'Urn11-ti-:i1'Ubfl~eNfle:Jl.loW1 b~ e:ii~-r'U ~~"11e:J'U 'IJ

(2) V1~-:i"il1m~uu~~~-:iL'1~"il ~e:i-:iCJm~nuru~m.U-:i1'UV1~e:iLtl~CJ'U1~'1~1'U'/Je:i-'l'Vlm~"'m.U-:i1'U~1~ . v \I , \I

t:lnn1V1'U~ 11 L~l.l~'U~m'l"l~e:il.ln'Urn1~~~-:i1~uuVi''UVi "

(3) m otl-!11'U~e:J-!l~-!lrl1 n111 otl-!11'U L tl1Lbn1l.lt:l'Ue:Jl.l'VltJ1"ile:J b ~tlvl1fl11~e:J n'VltJ1"ile:J Ldei 1lJiim11 oU-!11'U 'IJ

V1~-:i"il1n'1mde:i~ e:i-:i rn11 oti-:i1'Um .U-:i1'U~e:i-:i 16'11~'1~1'U L ~e:i L -U11 -tl-:i1'U 'IJ

( 4) rie:i'U m1L -U11 .U1~uutl~u~ m1~e:i-:iv11rn1~-:iu'UVi m-if 11.U-:i1'U'vJ n fl~-:i

...

(5) mi-:i1'U~ €ML~B'U ru1~ b ~~~'U b .Uzjeim i-:i1'U bb'1~1~'1~1'U'1JB-:i ~'Ub LJf111 b .LJ'11 i-:i1'U bfl ~ ei-:i '\I , la.I \I 'U

flB~'W1b~B{'1JeJ-:j L 1-:j~CJ1U1'11161J1n ~1W1'U (6) m-U-:i1'U~B-:ivl1f111'1-:iU'UViflBBfl (Looout) VJ'UVibdm~ flboU-:j1'U'Vf1B 1~1~ei~~'V!tJ1'1Bb U'U

'IJ ::> 'IJ

b1'11'U1'U

(7) ~1~btlVlvr1ei 1i-:i1'U1 tl1bbm~tl1~ b.flVl Peer-to-Peer vr~ei 1 tlibbm~~i1fl11m~CJ-:i b 1mb~'1~

1~1'uei'Un 11~'11fl~1vru1fl~~-:i1'UbVlfl 1'W1'1~'111'1'Ub vi!31'1Jei-:i 11-:i~CJ1u1m161J1n '•t: '

(8) 61lB~~bb1{~h-:i~CJ1U1m161J1n 1-lii1~'1JaVJ~ moU-:i1'U'11~11'1"lJBbm~m~'V!tJ1~fl11~1iJ1bU'U ., 'IJ

bb'1~~1~ 1~1 ~m i-:i1'Uv11m1~~~-:ivr1ei t-U-:i1'U61lei~~ bb 11~'U1~~1~i1~"llavi~ vr1fl~11'1~u ~ei11 b tJ'Um1~~~ 'IJ

~1'UUflfl'1 rn-li-:i1'U1'U~~6/JBUbb~LVfo-:i~L~CJ1 ' 'IJ 'IJ

(9) 611B~~Lb11~h-:i~CJ1U1m161J1n ~~L~~CJ~111~rn-U-:i1'U ~BbU'U~-:ilil1LU'U ~1~m~rn-U-:i1'Uvl1fl11 'IJ 'IJ

~~~,:i '1B~'1B'ULU~CJ'UbbU'1-:i Lbm'1J 'V!~Bvl1'11L'U1b~BtJ1LtJboU-:i1'U~~'U ,, 1"., .J~I L ''"''..!.I L ,. ,, (10) 'V!1~ 6/JV11~CJ1mVlfltl1~L.fl'Vl'V1Lu'U'1JB-:i 1-:i~mu1m16/J1'1 b~Bu1~ CJ6/J'UVJ1-:im1fl1

' (11) ~1~rni-:i1'UtJ1L'1'UB.LJ'B~'1~~~flll'VfmCJ '1~LlJ~~'1JaVl~ LL61~-:i.Ueim1~1tl.fl1~1~L'V!m~'1~

'IJ 'IJ d-J 'IJ

'Vl1BoLJ'~ ~B~'1511~ mrurrt oU-:i1'U'1~1-:i L :Ju b ~'1U'ULfl1B~1 CJflB~'W1 b~ ei{

(12) ~1~mi-:i1'U•1rn-:i 11-:i~CJ1U1'11161J1n fl1Ufl~flB~'W1b~B1'Vl1Bi~UU'111'1'UL'V1!3f.fl1CJ'UBfl1~CJ 'IJ '

hJ1~1'UB'4q)1~

.Uei (62) m11~u~'UeJ'U~1~'U'1JB-:irn i-:i1'U (User Identification and Authentication) thvr'U~ 1 ~rn i-:i1'U ' 'IJ 'IJ

bb'1 ~ -:i ~1 ~'U ~1 CJ zjB rn-li-:i 1 'U bb'1 ~ ~ ei,:iij fl11~ 61'1'1~ 'UeJ'U ~ 1 ~'U ~1 CJ fl11boU1~'1~1'U L ~ B ~ 11'1 '1 BU fl11~ '1 fl t>lei-:i 'IJ 'IJ 'IJ

'1Jei-:irn-U-:i1'Unei'UVJflfl~-:i 'IJ '

.Uei (63) m11-U-:i1'U1tl1bLm~tlWLflVl~Vi~~ (Use of System Utilities) l'lei-:ili\'1n~Lb'1~fl1Uf1~f1111-U-:i1'U 1tl1Lbm~CJVi~~'11vr1'u1tl1bbm~flei~'W1L~ei1~611~n1 b ~ei-:i'11flm11i-:i1'U1 tl1bbm~CJVi~~u1-:i61Jii~'11m1'1v11

'IJ •t: 'IJ

1 ~rn oU'Vl~fl b~CJ-:i~1mm1u ei-:i n'U'\111-:i~1'Ufl11~~'Ufl-:i'1lei-:i1~UUL~ L ~eiuei-:in'U fl11'1~ LlJ~'V11Bvr~ fl b~ CJ-:i 'IJ

~1mfl11fl11~U'1B~nCJ~L~fl1'V!'U~ 11vr1ei~i1ei~ bb'111 ~vl1L ii'Ufl11 ~-:id 'IJ

" (1) m11-U-:i1'U 1 tl1bbm~CJVi~~ l'lei-:i1~1'uei'UlJ~'11fl~~ bL'11~uu bb'1~~ei-:ii1m1~'1'1i1~'UeJ'U~1~'U 'IJ ' 'IJ'IJ 'IJ

611vr1'um1b.U11i-:i1'U1 tl1Lbm~CJVi~~ b ~eili\'1n~bL'1~fl1ufl~m11 i-:i1'U 'IJ '

".J .. (2) 1 tl1bbm~~Vi~~vitl1~11 i-:i1'U~ei-:i1~'1~bl3~~'1Javi6

(3) ~ei-:i~~bnu 1 tl1bbm~CJVi~~BBfl'11fl61lB~~Lnfo1vr~u1~urn1'U 'IJ

(4) i1m1'11n~avi~~m~~uei'Uru1~1-m-u-:i1'U1tl1bLm~CJVi~~ 'U , QI '\I

(5) ~ei-:iCJfl b~ flvr~e:i'1uvi'-:i t t.l1bbmiiCJVi~~bb'1~61lei~IA' LL 11~LM CJ1one:i-:inu1~rnN1'U~hJS1m1~1ii1 L iJ'U 'IJ

1 'Wm11-U-:i1'U 11~~-:il'lei-:it1ei-:in'U1~1 ~m -U-:i1'U'11m1m .U1'1-:ivr~ei 1-U-:i1'U1 tl1Lbm~CJVi~~1~ 'IJ 'IJ

.Yfo (64) m1n1vt'U~b1m1-U'.:i1'U1::tJ'U""11G't'Ub'VlP1 (Session Time-out) 1Vf~1bi1'Ufl11 li1.:id

( 1) fl1Vl'U~ b Vf 1::'1.J'U b 'Vl A 1 'Ufa fil6'!11G't'Ub 'VlPlii fl11~1tl~1::CJ::b1'11 fl11L zj€JlJ~€JG't1V11'U fl11b oU.:!1'U

b ~e:i 1 vrm .U.:i1'UG't1m1t11-u.:i1'U 1~'U1'U~G't~.n1CJ 1 'U1:: CJ::L 1m~n1vi'U~ bb"1::n1vi'U~ 1m-U.:i1'U1~\911lJ"1h.:ib 1mm1 ~ .

0 d I 0 I ~ 'V11.:!1'U'VlVl'U1 CJ.:!1'Ufl1Vl'U~ b 'Vl1'U'U

(2) n1vt'U~ 1Vf1::tJ'Ub'VlA1'U1"1fil6'!11G't'Ub'V1Pl ~iiA11lJG't1AruG't.:i 1::'U'U.:!1'U~ii11111-li.:i1'Ub 'UG'lt11'U~~ii "~

A11lJb~CJ.:J (1'U~G't1511ru::vt~€J~'U~fl1CJ'U€Jfl1 Hl"W1'U1"111'1ll~) iim1~1n~"li1.:i1::CJ::L 1Gnfl11bzj€JlJ~f)

,.J d IJdl'jtl tl '"" ... ~ 1>1TUVI 7 fl111°l'J'U~lJfl1'H"ll1tl.:I b 'aLbfl'all -a::~n~'Vi'aelbLV'W'Wf!Ll°l"lf'ULLft::fl11flm'Vlf1 (Application and

Information Access Control)

.zJei (65) ~~bbm::tJtJ vi'e:i.:in1vi'U~m1"1.:i'Vl::buCJ'Urn-li.:i1'U1vill a~m.JntJ1i\911lJolfei 8) 1'Um11.U.:i1'UmlJm1lJ ~~ ~ ~

~1 b ll'U11lJ~.:i~'U\91e:J'Ui.J{ju&\G11vi1tJ m1CJ m~ fl~'Vl~m11.U.:i1'U (1~ CJi.J{ju&lmlJolf ei 1 o) b "li'LI nTrn1e:ie:ifl vi~e:i .m1btJ~CJ'U(911bbvti.l.:i.n1CJ1'LI11.:ivm1tJ1m1'1l1~ LU'Uvl'U

olf ei ( 6 6) ~ ~ bb"11::'U'U vi' e:i.:i n1vt'U ~1:: CJ:: b 1"11b'U1111 b zje:ilJ\9lers::tJ'UG't11G't'U k'VlPl ~1m'U1111i.J nu&\.:i1'U1::tJ'U ~~ ~

6'!11G't'Ub'V1Pi\911.:i '1 bne:iert-U.:i1'U1llilm11.U.:i1'U1::tJ'UG't116'!'Ub'VlPi bn'U 30 'UTVi 1::tJmi::CJ&111111-U.:i1'Urn-li.:iTu I " , "'

~e:i.:iv11 m1"1.:iu'UVifl b -rr11.U.:i1'Unei'Ub -V11::'U'UG't11G't'U b 'Vl Pia fl A~.:i ' v

olJeJ (67) ~~bb"11~'U'U vleJ.:l'U~Vl11~~fl11~'VlTifl11b oU.:!1'U1::'U'Ubb"1::1'HG't~1'U'lJ€J.:J'UAGnfl1 \i1.:i\9le:i 1 i.J\j ~~ , (1) fl1Vl'U~fl11L i.J~CJ'Ubb D"1~ bb"1~CJ m~ m'HG't~1'U bneirn-li.:i1'U1~'U'U'11eJ€Jfl V1~€J~'U"i11fl\911 bb VltJ.:l

~

Vl~eJCJflb~flfl11boU.:!1'U .

(2) n1vi'U~ 1 vrm .U.:i1'U1l.iu'UViflvi~mntJ1-HG't~1'U1 n 'U1::'U'UAeilJ~1 b\91e:in 'U1i.Jbb 'U'U~1ll1~uei.:i n'U ~ ~

., ""' fl11b 'LJ1f;).:J

(3) n1vi'U~zjmn .U.:i1'Uvi~m'HG'trn .U.:i1'Uvi'e:i.:i 1ll~1n'U ~ ~

( 4) b 'U mruilm1lJ~1 b U'Uvle:J.:Jb Vl~'Vl~~ bPl'!;tl'Urn oU.:J1'U~ii~'Vl~G't.:JG't~ rn-U.:i1'Ui!'U"il::vi'ei.:i 1~1'UA11lJ \I \I '\ "

L ~'U'1l€J'U bb"1~€J'UiJ&\ "ii 1fl~€11'U1CJfl11 1~ CJ ii fl11fl1Vl'U m:: CJ~ L 1 "11 fl11 b oU.:!1'U bb"1~1::fo1111 b oU.:!1'U~'UVi b~ e:J~'U . ~

w CJ:: b 1mli1.:i mh1vi~e:i~'U"i11 n\911 bb vii.J.:i bb"1 ::ii m1n1vi'U ~~'Vl~~ bPii;~1~1tJ11L.LJ1fi.:i1~fi.:i1:: li1tJ 1~ 1~\J 1.:i bb"1::

vi'e:i.:i n1vt'U~ 1Vf1'HG'trn-ti.:i1'U ~1.:i"i11m'HG'trn -li.:i1'U\911lJi.J fl&l ~ ~

olf ei ( 68) ~ ~ bb"11::'U'U ~ €1.:!'U~Vl11~ ~ fl11fl11b -LJ'1fi.:i-LJ'e:JlJ"1\911lJD 1:: b.f1'Vl~'UA11lJi;r'U b 'Ufl11'°11'U AlJfl11b -LJ'1fi.:i \1\1 \I ,

-U'eil.1"1 bb\91"1::i.J1:: b.n'Vl~'U m1lJi;r tJ~.:i m1b .LJ15.:i 1~ CJ(911.:J bb"1:: m1b.U15.:i~1'U1::tJrn1'U 11lJ5.:i15m1v11"11 CJoLJ Bl.1"1 ~ ~

bb\91"1::i.J1~bfl'Vl~'UA11lJi;r'U \i1.:i\9le:i 1 i.Jd

( 1) vl eJ.:!'°11'1.J Al.I fl11 b -LJ'1fi.:JoLJ€JlJ"1 bb\91"1::i.J1:: b.f1'Vl~'U A'J1lJi;r'U~.:J fl11boLJ1fi.:i 1~ CJ \911.:J bb"1 ::1111b-LJ'15.:i~1'U , ~

1::'U'U.:!1'U

(2) vi'ei.:in1wu~11CJzjeim .U.:i1'Ubb"1::1-HG'f ~1'U b ~ei 1 .ut 'Um1m1"ilG'te:itJ\911(91'U"il~.:i"1Jei.:im -U.:i1'U-U'e:ilJ"1 1 'U ~ ~ ~

I ~ Q.J 1J

ib\91"1::'1l'UA11lJ"1'U'lJ€J.:J'LJeJ&J"1 0 1 tJ Q.J ~ ti CV Cil d II Q.J I

(3) mvi'U~1:: CJ:: nm m1 '1l.:J1'Ubb"1::1::.:itJm1 b '1l.:J1'U'Vl'U'Vl bl.I eJ'W'U 1:: CJ:: nm~.:i flm1

( 4) m11tJ~.:loUeJlJ"16'!1An1~1'U1::'U'U bA~eJ~1CJG'f1511tu:: '°1111~-r'Ufl11 b .U11'HG't~ b U'UlJ1(911~1'UG'f 1fl"1 ~ "ll "'

b"li'U SSL, VPN vt~e:i XML Encryption LU'Uvl'U

(5) n1vt'U~fl11bi.J~CJ'U1'HG't~1'U \911lJWCJ~nm~n1vt'U~"1Je:i.:i1::1i1tJm1lJG't1AflJ'll€l.:!oLJB&J"1

(6) n1 Vl'U ~l.l 1~1n11 -r n ~1 l°l11l.l~'U l°l-:itJ '1 el ~11 el 'IJ el-:! ii el l.l '11'Un1ru~tl1 ~ 'UVl -r~ v el el n 'U el n 'IJ

h·meJ1U1'111'lJ1n b~'U u11-:i-rn~1 m1'16ilell.J 1 ~~1b'Ll'Ufl11rl11el-:!bb'1~'1UoLJell.!'1~bnUel~1 'U·~ffU'UVinriel'U ' 'IJ 'IJ

.?1 ., bu'U~'U

-ifel (69) 1~uu~-:111vielrn11um'U ifo.mm~V1Ubbfl~ijl°l11l.!?111°i''l!~-:i 1 ~tJl)u~i;J-:id (1) bbelm~uu~11vielrn11um'Ueleln'11m~uu-:i1'U~'U 1 (2) ijm1mufll.!?1111~Ln~~ell.J'IJel-:i~'Ubel-:i 1~elij~el-:iul)u~-:11'Ubbelmtl'U61'~~1'U

(3) ijm1n1V1'U~~viB1 ~bfl~1~~~ij~viB1 i1~UUb vi1tT'U 'IJ

-iiei (70) m11i-:i1'U~tJmrul°lell.l'W1b~el{bbfl~~el?l11bl°l~el'U~ l'i'el-:itJl)u1ii;i'-:iviel 1 ud

( 1) m1'1?1elUl°l11l.J~~ell.J'IJel-:Jl°lell.Ji'l1b~el{ bbfl~eltJmru~'1~tl11 tJ1 -ff-:J1'Ul1elelb 'U?l.f11~~~ell.J 1 -ff-:11'U ' 'U

vi~el 1~ bb'1~~11'1?1elu 1 tJ1bLml.lm~1;i1'U11'1nl'i'el-:iml.l~'IJ~VlB ... 'U

(2) 1~l!~1~1-:i hJ1 ~Ul°ll°lfl.f11 el'UelnA~'1 elnoLJell.1'1'11 nl°lell.l'W1 b~el{~i111 tJ1 m~ b i''WbbvioLJell.1'1~1~ij ' 'U 'U

m1Lt:-1mb~~L lJ'Um1~11 tJ

(3) bdelvil.J~ 1°111l.J"il 1 b tJ'U l'i'el-:i1 ielumrul°l ell.l'W1 b\91 el{ bbfl~~ a?111 Ll°l~ el'U~ bb~11 ~~u'U1G'i-:i~'U ' . ti II .:::ii.Ju q v .::::ii

~1Vl'U1V1Vl"iUt:-J~'lJelUVl'UV1

(4) b~1VIU1~~-ru ~~'lJelD1 'Un11-ru~'Ul'i' el-:!~11'1?1elU?l.f11~1°111l.J~~ell.J1i-:i1'U'IJel-:JelU n1ru 'U '

q ' d d .J.Ju ~ I.I

l°lell.1~1 b~ eJ1 bb'1~?Iel?l1 "i b l°l fl €l'UV1Vl "iU l°l'U ~1 el

(5) vi1ntJ11 nn11A11l.l b~elvi1 el~ Ln~off 'UtT'Ubfi~'11nm1l.ltJ1~l.!1vie:i ~1-:i~1el bb 1-:i'IJe:i-:1~'111 tJ1-if

~i111 tJ1-if l'i'e:i-:i-ru ~~'lJau vie:iA11l.J b~ elvi1 el~ Ln~off 'U '\J

riTu~ 8 m1u'iV11"5:5'~ n1"i6lleiv.J\91bb1·fogi ~il"llflVl~ bbgJ~n1"iUeJ~tl'U 1 tl"ibbn"il.!1~tJ"i~"~ri'~ (Software

Licensing and Intellectual Property and Preventing Malware)

-if ei (71) L "i-:J~el1U1'111'lJ1n1m ~1°111l.Jrl1A1l!vim~e:i-:ivi-r~v~'UV11-:!U'l!'l!1 i;i'-:itT'U611€l~~ bb1{~L "i-:l~eJ1tJ1'1"i1'lJ 1n B'Uru1~1mi-:i1'Uvt~e:i~h-:i~el1tJ1'1"51'lJ1n ij~'IJ~VlB m-if-:i1'U?11l.J1W'IJ€l1m~~1l.JV!U1~1°111l.J"il1blJ'U mi~

'., '\J

~1l.!1l11 ~m i-:i1'Uv11m1~~~-:ivt~a 1-if-:i1'U'l!a~~ Lb 1{~'U 1~~hJij~'IJ~viB vt1nijrn1m1'1?1e:iu~uA11l.J~ ~;i1'U 'U ...

gi~ b~~~'IJ~vit ~e:i11 b tJ'U m1l.J~ ~G'f 1'Uu flflgJ m-if-:i1'U'1~l'i'a-:ifo ~~'lJe:irnbvi b l'lel-:i ~ b~ el1 ' 'U 'U

-ifei <12) 611a~~bn1~h-:i~el1u1m1'lJ1n1~~~b\91~ell.J111~0-il-:i1'U ~mtJ'U~-:i"il1btJ'Uvie:irn1v11-:i1'U ~1l.Jm~ 0-il-:i1'Uv11rn1 '1e:i~mJ'U b tJ~el'UbbUfl-:J Lbfi'l'IJ vt~av11rl1b'U1b ~atl11 tJ1-if-:i1'U~~'U 1 elm1'W1~-rurn1m~'l!1\91 '11n~el1'U1eln11vt~el~~~-rul.lauvtl.!1el~ij~viB1'W~'IJ~viB

'U 'IJ

oliei (73) Aal.l'W1b\91a{'IJa-:im-U-:i1'U~~~-:i 1 tJ1Lbml.l-t'1a-:in'U11-r?1l°lal.l'W1b\91el{ (Anti-Virus) \911l.Jm 1-:i~el1u1'1 'U

11'lJ1n 1~u1~m\3!1 m-if b v11t!'U

-iiei (74) u11~1o1Je:il.!'11~'1 611el~~Lb1{ vt~a~-:i~'U1~ ~1~-ru'11nm-if-:i1'U~'Ul'i'e:i-:i1~-rurn1~11w1e:iu11-r?1 'IJ 'IJ '

l°le:Jl.l'W1 b~a{ bb'1~ 1tJ1bbml.l1~tJ w?i-:il°l~ ria'Utl1m 1-U-:i1'Uvt~mf.luu'UVinvinA#-:i '

oaei (75) m-U-:i1'W~e:i-:in1'J'l.J-ruu<J-:i.LJ'm.m G'l1vt1'1.J\91'J1'1'1e:i'Ubb~~'l.J-r'Utl"i-:i'J~'U'l.J'l.Jnu~m'J (Update Patch) '\J , '\J , d..J

1 m vt~b?ll.JB b ~mlJ'Ufl1"iDB-:Jtl'Ul°l11l.Jb~elvt1el~m-o;i bn~off 'U

oaPJ c16) m-if-:i1'U~a-:i~-:i1~1-:i 11-rmbgi~ 1'l.J1LLml.J1~u'J~?i-:il°l~~flel~nm 11l.J~~Lda~u~-:i~~un~m-if-:i1'Ul'i'e:i~ 'U 'U

., I .,

bb'1-:Jb vt\91 bbnt:-1~bb'11~uu ' '\J '\J

-if PJ (77) bdelrn oU-:J1'U~Ul1 bl°l~B-:Jl°l€ll.l'W1 b\91a{~~11-r?I t.TI-U-:i1'Ul'i' a-:i1~ bzje:ll.Jvi Bbl°l~e:l-:Jl°lBl.l'W1 b\91e:i{boif1'1 'U 'IJ 'IJ

~ I II' ii Ill Q.l.cl

bl°l"i€l'IJ1 el bb'1~\91B-:J bb '1-:J bbnt:-1~ bbfl"i~'UUV1"i1'UV1'UV1 '\J'\J

-Uei (78) ~1iiri'm=rm.Jv11611b'U1 btJ~tJ'l.JbbU'1\I m.J~\I zj\l.LJm.ifi -Ue:im1ii bBrn'f11 vt~B~\11~ 1 ~blJ'U~'UVl-r'W~ 'llm 11\l'WtJ1'U1'111'1l1~ vt~e.J'llB\l~~'U 't~tJ1ii1~-r'Ue:i'Uru1\91'0iJ1n~eJ'1tJ1tJm1

\J , v \J

-Uei (79) ~1l.Jvl1fl11bt:Wbb'W~11-r?lflmJVi1b\91e.J{ ~'1bb1{ vt~BbU1bbfl1l.JeJ'U\9111tJ1~ 1 ~B1"ilrle.J1~bn~fl11l.J b~tJvt1tJmrj~'WYl-r'W~'ll'eN 11\l'Wm'U1m1'1l1~ ~YlB~"il~~w.Jm 1 tJ1LLmiivt~mn{~Lnfl~ 1 ?11m1'1~1bii'Wm1 1~bb~~e:i\11~~1bU'Ufl11 ~\l.Q'

(1) ~w.J'U11 tJ1bbmiivt~mn{~Lnfl~ 1 ~"il~vl1'11tJn'11nfo1!}1m1iitJ'1B~ntJ1~'1.J'l..l 11m~\lfl11 m~v111 'Uri' n1!}nw b lJ'U m1bbB'l..l1.U1~?1~1'U m1'1 n'1B'l..lvl1611 b m-U'BiJ'1'1..lflfl'1 ~'Uvt~B bbn~1~?1~1'U'llel\l'Uflfl'1 ~'U

'U • •

(2) ~w.J'U11tJ1 bbmiivt~mn{~ bb 1{1~ 1 zj\lv111 ~rrt oU\11'Wii~VlB bb'1~'11~'U m1ii?111"1' qi1 'U m1mB'Ufl1B\I ., ,~., .d

Vl1'WtJ1fl11~'U'l..ll.Jlfln11~ b '1l\11'UB'U • 'U

(3) ~w.J'U1 b U1bbfl1l.J1~~"il~vl1~1191'1 b U1bbfl1l.Jvt~mbe.l~l91'1 b U1bbfl1l.J1 tJnu b U1bbfl1l.J~'U1 'UrJfl1!}nJ~b"li'l.Jb~tJ1tl'U vt'UB'Uvt~e.J 11-r?lflell.JoW1 b\91el{

(4) ~w.J'U11 tJ1bbfl1l.Jvt~mn{~bb1TI~ 1 ~"il~v11mtJ1~uu'11n~~VlB (License) m11<U'61.!Bl'J~bn{ (5) i.11 b?l'U e:i-U'Bii"~ ~~fl 11vtm tJ "~ bi1~~'1l~YlBbb?l~\l-U'BFi11ii1tJn1'W 1~ b vtii1 ~?Iii vt~B-V'~~B~'1tfi1iitJ1~ b 'W ru

'U ~ 'U

<V cl al 1 c1d~11 V d cl I A ..

B'U~\11l.J'lle.J\lu1~ b Vlf'f VltJ mruVl~ b '1l\11'U?l11\I nub 'W"il'l..l'Ubfl1e.J'llti tJflell.J'W1 b\91B1

-Uei (80) fl11~w.J'U161.!Bl'J~bb1TI~tJvti.11tJ\11'U.fl1tJ'UBn (Outsourced Software Development)

(1) ~~ 1 ~i:lm1fl1'1.Jfll.J bfl1\lfl11~w.Jm61.le.ivJ~ bb 1fi~tJ~-ru~1\11 ~'l..l~fl11"il1fl.fl1tJ'Ue.Jfl • 'U

(2) 'W"il11ru11~'U111m'1~ b tJtJ~ii~YlB1 'WYl-r'W ~~'UV11\lu ruru1?11vt-r'U61.le:i{?1 i:fi'~ 1 tJm1~w.J'U161.le.ivJ~ Lnfi~ tJ~ "' '\f u QI • \J

{u~1\l 1 ~'l..l~fl11"il1fl.fl1 tJ'UBfl

(3) Yi"il 11ru1 n1vt'U ~ b~el\I m1?1\11'U~VlB~"il ~\9111'16'f elu~1'U fl run1'W bbfl~ m1ii '1 n~ el\l'llel\161.lelvJ~ bb 1 {~'OJ ~n m1 • 'U

~w.Jt.!1 t~mJl ~'U~fl11.fl1tJ'UBfl b~tJ1~LJ 111 'U~qjqj1~1\l~vl1tl'UrJl ~'U~fl11.fl1tJ'UelfltY'U ' ti II

( 4) 1 ~iim1\9111"il6'1B'U i: tJ1bbmii 1~tJ1~?1\lfi~ 1 'U61!ByJ~bn{~1\I 1 Vi"il~v11m1~~1?1\lnB'U~1b i1tJm1~~l91\I (5) vtrl\l"il1nm1ci\ll.JB'l..lm1~w.J'U161.le.Jl'J~ bb 1{'0J1 nvti.11 tJ\11'U.fl1tJ'Ue.ini:1 \l'W tJ1'1..l1'111'1l1 ~ ~ B\1~1 b i1'W m1 b tJ~ m.J

'j~6'f~1'U~1\I 1

lii1u~ 9 nT~tJ~u~~1u:u1n.r11EJuBmt1t1n-:nu (Teleworking)

-Uei (81) ~B\lii fl11\9111"il6'1B'l..l11BU mru~b lJ'U'lJB\lciTul?11zj\11 -til 'U fl11b -U'1G\11~'1..l'U b Vlfl i: 'U Lfi ~6'1116'f'U b Vlf'f'll B\I • i: 1\l'WtJ1'U1m1'1l1~ 'OiJ1m~tJ~ 1n'1iim1uB\lnu 11-rmb'1~m11.U\11'U1 yJ{1e:i'1~\911ii~vti.11tJ\11un1vt'U~ eliei (82) ~e.i\liifl11~~b\91~tJl.JBU mru611vt-ru fl11U nu~\11'U"il1m~tJ~ 1fl'1 fl11~~bn'l..l-LJ'Bii'1 bb'1~BtJmru , d.J \J ,

~e.i6'111111 ~num .U\11'U'OiJ1m~tJ~ 1fl'1 'U

eliei (83) mi\11u"il1m~tJ~1fl'1Ylflfl'l.J ~B\1~1'l.Jfl11oW6'f"iltJl91'1\91'U b~m~iim1iitJ'1e.i~ntJ"il~~B\li:lm119111"il?1e.iu 'U • 'U

b"li'l.J 1~6'1~1'\.J vt~eJ15m1b-U'11~?1 blJ'l.J~'U -if ei (84) 1~B'Uill11'11 m oU\11'Ue.JU mru~ b lJ'U'1Je.J\lci1'Ul?i'1 b ~m -U1fi\11~'1.J'U b Vlfl i: 'l.J Lfl ~6'1116'f'l.JbV1131'1Je.J\I i: 1\l'WtJ1'1..l1'1

, v ,

11'1!1~"il1 m~ tJ~ 1fl'1 vt1 fl e:itJ m ru~\I n~111~ e.i ~ n1tJ1~m1m'U Fiii 1'11il'U LtJ'U1 tJ fl11ii~'W fl\IU'1 e.i ~.n tJ '1l e.i \I , 'U •

i: 1\l'WtJ1'1..l1'111'1ll~

-Uei (85) ~e.i\ln1vt'W~'1li1~'1le:i\l\11'U -&1 i:ii'lm1v11\11'U .ff'l.Jm1iiri'u'lle.i\l-Um.i" 1~'1.J'U\11'l.Jbbfl~'U~m1~1\I 1 'llB\I

i: 1\l'WtJ1'1..l1'111'1l1fi ~B'4t1J11'1bb'1~ 1~e.i'4t1J11'11~tJ5u1i\l\11'U"il1m~tJ~1n'1 -Uei (86) ti) e)\I n1vt'l.J ~~'l.J \91 e.J'UU nu~ 611vt-ru fl11'1JB e)'l.J~~ fl1'jtJ rn~ fl fl1'j n1vt'l.J ~vt~e.itJ-r'UtJ1 \l~Vl Bm1 b -U1'1\I d.J • ,

'j~'IJ'U\11'\.J bb'1~m1fi'l.J~tJmrum.uu5u~\11'U'OiJ1m~tJ~1fl"

fl1'U~ 10 fl1'afl1tJfl:l.Jfl1"H.;J1-a::'U'ULfl~e:i-ti1aHa1a (Wireless LAN Access Control) '

.;Je:i (87) ~~bb'11::uu l'i'B\lfl1'Ufp.H1'Yqi1ru'lJB\l~tJmrufl'i::liJ1CJ61qiqi1rubb'U'UH&'f1~ (Access Point) 1Vf ~ 1 JI """1"' .. ' 1"' "' .,I 11 'Vl'1elel fl'Uelfl°f'l'U'Vl b "1J\11'U1::'U'ULfl1el'lJ1 CJ 1&'11 CJ'Uel CJ'Vl~WI

.;Je:i (88) erWlbbm::uu l'i'B\lvl1fl11bU~CJ'U~1 SSID (Service Set Identifier) ~{lfln1'Vl'UWlbU'UfhLWICJU~CJ1CJ m 'U'U 'U

"il1fl~t.J~l'lVl'UVi~t11~tJmrum~"il1CJ'1qiqi1rubb uu 1~&'11m.n1.U\11'1.J .;Je;i (89) erWlbbm~'U'U l'i'eNn1'Vl'UWl~1 Wireless Security bU'Ubb'U'U WEP (Wired Equivalent Privacy) 'Vl~el

'U'U

WPA (Wi-Fi Protected Access) 1 'Wmwu11-M'&'l-U'B:1.J'1'i~V111\I Wireless LAN Client bb'1::Bi.Jmrum::"il1CJ 'U '

~qiqi1ruLLuuH&'f1CJ

-ifo (90) erWlbb'11~'U'U b~elfl1oU1CTfl1'ifl1'Ufl:l.J MAC Address (Media Access Control Addres's) bb'1~zjel 'U 'U '

rn oU\11'Ubb'1~1-M'&'f ~1'U 'llel\lrn oU\11'U~ii~'Vl~1 'U fl11 b-LJ'11 oU\11'UW'U'U bfl~el-d1CJ1 ~&'11CJ LWI CJ"il~el'Uru1\?lbO°f'l1~eltJ mru \I ~ , ~ ,

Viii MAC Address Lb'1~zjelrn oU\11'ULb'1::'i'M&'l~1'U l'l111~n1V1'UW1 H b vi1J'U1 ~\-U11.Uwuu Lfl~el-d1CJH&'f1CJ1~ 'U

.;;el (91) erW1bb'11~uu l'i'el'liim'i~Wl~\l 1 vH1el'1a (Firewall) 1~V111\11~urnfl~el-d1CJ H&'f1CJnu1~urnfl~el-d1 CJ 'U'U

mCJ'Uelfl 11\l°f'JCJ1u1'111"1J1~

"ll e:J ( 9 2) er WI bb'11~'U'U fl1'in1'Vl'UWI1 ~m oU\11'U1 'U'i ~ 'U'Ubfl~ el-d 1CJH&'f1 CJ~ el~ el~ el&'! 11 nub f1~el-d1CJfl1CJ1 'U 'U'U 'U

h\IY-lCJ1'U1'111"1l1~ ~1'U'Vl1\I VPN (Virtual Private Network) b~el"t11CJUel\ln'Ufl11'Ufl1fl"il1fl1~'U'Ubf1~el-d1CJ ' '

1~&'11CJ

"lle:i (93) er WI bb'11::'U'U \9l el\lvl1 fl1'i'1\l'Vl~ bu CJ'U elU mru'Vl fl~1m -ti~ Wl~el1~'U'Ubfl~B-il1CJH&'f1 CJ \1\1 , ,

"!lei (94) er WI bbm~uu l'i'el'l 1-ti611elyj~ bb 1'~'Vl~el ~1{W1 Ln{m11iJ&'lel'Um111~'Ufl\IU'1elW1n CJ'llel\11~'U'Ubfl~el-d1CJ1 ~ 'U'U

&'11 CJ b ~BflB CJ m1"il&'lelu bb'1 ~u'WVi fl b 'Vll'l m1ru~il1&'1\161 CJ~ LnWl~'U 1 'U1~uu bfl~el-d1CJ1 ~&'11 CJ bb'1~~ W1?i\111 CJ \11'Ut.J'1 '

m1m1"il&'IB'U'Vlfl 3 L~el'U bb'1~ 1'Umru~l'l111iJ&'lelu~um'a1.U\11'U1~uu bf1~el-d1CJ 1 ~&'11CJ~~W1tJfl~1 ~erWI bb'11~uu ' 'U 'U

.;Je:i (96) 0 oU\11'W~l'i'B\lfl1'ib-U'1~\l'i::uu bf1~el-d1CJ 1 ~&'11CJ'llel\l L 'i\IY-lCJ1'U1'1'i1"1l1~ "il::l'i' el\lvl1fl1'i'1\l'Vl::b u CJ'W nu

er WI bb'1W'U'U mrnl'i'B\l 1~-r'U'~"il11'1J1el'Ufl '11'l"il1 fl'M1'VIU1Pl'U6fl el:l.J~1 b\?l el{el ~1\1 b U'U'11 CJ~ fl1juJ elfl1j'j 'U 'U '·1: 'U

"ll e:i < 97) er WI bb'11~uu l'i' el\lvl1fl1 'i'1 \I 'Vl~ bu CJ'U n1V1'U WI ~'Vl ~m .U\11'Ut'Um1b-U1 ~\lwuu bfl ~el-U1CJ1fa1CJ1 ~ 'U 'U 'U

L V1m::&'f11nuV1u1~.fl1111-ru~W1"1lel'U 1 'Wm1tJ~u~-:i1'U rielm-U'11.U1::uu bfl~el-d1CJ 1~&'f1CJ 1111~\I iim1'VlU'Vl'Jk! ~ "' "' A A 91 4 I I CV ~ 9.J \1 !Jcv 9J 0 .. C} &'( fl 9J

°Z'li'lfin11L"ll1r:l\l'flEl1\l'Z'la..J1 L'Z'la..J'fl i'l\l'W r.i:::111'fl\I ~c;JJ'U?l~'1J1111r.i1n~~LL'tlJ':::uu1111a..i '°1'J1:i.J'°l1 Lu'W b'Wn1J' b6ll\11k!

I d "I II • I ..• '1 ., "' I (

~'l'U'VI 11 f11';iFITU~11m,- b"!l.:J1'U~-umruuei.:inmri,-ei"ll1£J Firewall Control)

.z; el (98) f'l'U~ 1°18lJ~1bVl8ft 'j 'l'VW1'U1'1 i1"1J1~il'Vlif1~1 'U fl1'j'lJ~Vl1 i~ VI fl1'j mi&\ VI ~'l bb'1~ n1Vl'U VI A1'1J8'l ,, Firewall ~'l'VllJVI .zfei (99) min1Vl'UVIA1L~1l~'U'll8'l Firewall ~eMri1Vl'UVILll'Utl~L~u~'l'VllJVI (Deny)

.zfei (100) Vlf1'U~f11i (Services) LL'1~L~'UV11'lLzjm.J~8B'ULV181Li1vi~hJei'Urn1vimlJ Policy '1~~8'l'1f1'U~8n ci ,.o~ \J

(Block) LVICJ Firewall

oifo ( 1o1) m-i!'l1'UB'U Lvi 81L i1vi'1 ~~ ei'lvh f11i'1'lU'UVi m -U'11-i!'l1'U n8'Uf11i 1-i!.:i1'UV1f1A~'l ,, ' .zf ei ( 102) f11in1Vl'UVIA1'U~f11';ibb'1~f11'jb zj8lJ~8~8'Uill1Vl '1~~8'liif11iU'UVif1f11'jb tl~CJ'Ulb U'1'lVlf11°l~'l V11nii

' v '

f11ibU~CJ'ULLU'1'lA1~1'l 1 'lleJ'l Firewall

.zf ei ( 103) fl1iL-U'1~.:i~18tlmru Firewall '1~~8'l~1lJ1im .U1~.:i1~Lu'V'l1~~~1~-r'UlJ8'UV!mCJ1 'IXVILL'1~Vlf11i ' ,, ,, "

bvl1tJ'U

.zf ei ( 104) oU8lJ'1 f11i'1i1'1iV11'll°l8lJ~1 bV'l ei{~L oU188f18U mru Firewall '1~~8'l?i.:ir\11 tl~VI Ln'U~eitlmru~ VI ,, ' ' oU8lJ'1 f11i'1i1'1iV11'll°l8lJ~1 bV18{ LV1CJ'1~~8'l~VI Ln'UoU8lJ'1'1i1'1i 1lJif 8 CJf1l1 90 1'U ,, ,, . .zrei c 1 os) min1V1'UVl'U 1CJ'U1CJ1 'U mit 'iX'U~fl1iB'ULvi81 b -Wvi nrnA~8'll°l 8lJ~1Lvi81'1 n~1CJ'1 ~ b UVl'V'I fl1 vim i ,, L zjfllJ~fl~Wo1'U'llfl'l L tliLLmlJ'*11 tl ~8'U ru1vi 1 m-i!.:i1'U zj.:iV11 niiA11:iJ'11 L lJ'U~lil ~1-if 'V'lfl1vi fl1ib zjfllJ ~fl

... ' v

'Uflm'V!'u8~n1V1'UV1 '1~~fl'l 1~-r'UA11lJ~'UCJ8lJ'11n~1V1if 1n~:iJ.:i1'UL VJA L 'Ufa ~~1i~'UL'Vlf'l nei'U . '

.zrei c 106) mi n1V1'U VI r11 mi1 '!X'U~ fl1'j'1J fl'l bl°l ~ fl'l l°l fllJ~1 L~rn1 bblJ~1 CJt 'U bb~!;l ~?11 'U'll8'l bl°l ~ fl~1CJ'1~1>18'l

n1Vl'UVIA1 fl'Uill1V'l bu'V'l1~'V'l8{vi fl1ib zjfllJ ~ fl~lil1 L tl'U~ fl f11i 1 '!X'U~f11ib vi1tY'U ' v

.zfei (107) '1~~8.:iilmi~1i8.:i-U'fl~'1min1V1'UV1A1~1.:i 1 'llfl'l~tlmru Firewall Lll'Utli~'11VJn""tlm~V1~fl " ' '

VJ nA-r'ln8'U~'1 ~iim'H tl~ CJ'ULL tl'1'lr11 ·'

.zf iJ ( 108) Ll°l~eJ'll°l8lJ~1 LV1fl{LLlJ~1CJ~L 'iX'U~f11ii~'U'U'l1'U~1i~'ULVlf'1~1'l 1 il1CJL 'U 1i.:i'V'ICJ1'U1'1i1"1l1~ ~ii ·~m~m.1~~ L tl'UB'UV1i1 L uvi'1~~ fl'l 1lJfl'Uru1vi 1-Mii f11iL zjfllJ~8 L ~81-il.:i1'UB'ULV1 fl1L uvi L 1'ULL~ilA11:iJ'11L lJ'U LVICJ

' v

'1~~fl.:iriTvt'UVILll'Umru1 tJ

.zf ei ( 109) f'l'U~AfllJ~1 Lvi8ft i'l'V'ICJ1'U1m1"1l1~ il~V1~~'1~i~~'UVl~fl'U~flnmi1-il.:i1'U'll8'l LA~fl'll°lfllJ~1 Lvifl1 ,, ~ n~1 CJ~il'V'lq&\ mill mi1-il.:i1'U~ ~ Vl'U LCJ'U1 CJ V1~8 di V1'11nmiv11'l1'U'1Jfl'l1 tli LLmlJ~ilA11lJ L~ CJ.:i ~ 8m1lJ

tl'1flVlnCJ'1'Un11'1~ 1~-r'UmiLLm '1J

.zfei (110) miLzjfllJ~flL'U~n~ru~'llfl'lfl1i Remote Login '11f1il1CJ'Uflf1lJ1tJ'lLA~8'lLLli~1CJV1~8~tlmru LA~fl~1CJil1CJ1 'U "il ~l'i' fl'lU'UVi m1 CJ f11i'llfl'l mi ~1 L tl'U mi vi1:iJ LL 'U'U m i'll 8 8'4 ~1 vi ~1 L -LI 'U mi L~ CJ1 n'U LA~ 8'l

1°18lJ~1LV181LLli~1CJLL'1~fltlmruLl°l~8~1CJ bb~~'1~1'i'8'l1~fo1°111lJb~'U"1lfl'U'11f1~1Vlif1f'l'U~l°l8lJ~1LV'lfl{n8'U ' ,,

lii'J'U~ 12 i~LUEJ'Utl~mifl11fll'J'U~"fl11boU~1'U'1~'Vl"1EJ~L~n'Vliviln~ (E-Mail)

-Uv (112) b 'Ufl11'1\l'Vl~Lu ffwurn~crl.U,nt.r'il\?lVlmEJBL~ nvrrn'Wrn~ (E-Mail) vi'ei'l'Vi'1fl11mein.ifmJ'1'1lm -if11.U ·~ v v

tJ1fl11"iJ~VllJ1EJBL~fl'Vl1eJUfl6'f L~EJ~'Ufl1'1lBn'U~~LL'1W'U'U~-r'U~~'1JB'U vv

-Uv c 113) ca'IX"1"iJ~VllJ1EJB L~n'Vlcaeitln~ nm16'111X6'1~1'Uvi'B'11lltJ11nnV1~mL"1~'11'1X6'1eieinlJ1LL~vi'ei'ILL6'1\?l'I

BBfllnb'W~U'1JB\l~qj"'fl'l.;ruLL'Vl'W~1Bfl'l!f1J'W L"1i'W " ** " Vl~B " .. "b'Wfl11oWlJ~LL~'1~~1Bfl~1 ifo (114) Ldei 1~1tJca'!X6'1~1'Wl"l~\ILL 1flb 'Wfl11L-if11~'U'U'1~VllJ1EJBL~fl'Vl1eJUfl61 LL'1~Ldeii1fl11L.if16'i1~'U'Ub 'Ul"l~\I LLcanJ'U 1 ~LtJ~EJ'U1'tX6'1~1'WL~EJ~'WVi

v

ifo (115) ~~bb'1)~'\.J'l.J vlB\lrl1Vl'U~"il1'U1'Ufl~\l~EJBlJb~rnoti'11'UbG'i1'1X6'1~1'U~\?lL~ L-d'U 1l1Ln'U 3 fl~\! vv v

-Uv c 116) 1llu'WVinV1~mntJ1'1X"111l 'U1~tJtJflBlJ'W1 L~rn1 •.:

-Uv (117) LtJ~EJ'W1'lX61~1'UVJfl 3 - 6 L~ei'U -Uv (118) LlJLoU~BV"iJ~VlmEJBL~fl'Vl1Bi1n61 '1lB\l~~'UL~B~1'UVl~ei-r'l.JVl~BG'i'l-ii'Bfl11lJ EJflLl'WLL~"iJ~1~1'1.Jn11 v v .

~'UEJeJlJ"iJ1fl b ~1'1JB\I m otl~1'U bb'1~ 1 ~~ei11 b ~1'1JB\l"iJ~Vlm EJB b~ fl'V11B'Wfl~ b U'U~1'1.J~~'1JB'l.J~B fl1) 1 otl\11'\.J"iJ~Vlm EJ v v .c::t. ~ Qo '

elb'1fl'V11B'Ufl6'1'1JB\l\?l'U

oUv ( 119) Vl"'\l"iJ1flfl111 otl\11'U1~'U'l.J"iJ~VlmEJBL~fl'V11B'Dfl~L6'1~"iJi'UvlB\1'1\IU'WViflBBflVJflfl~\I -Uv ( 120) n116'i'l.if eilJ'1~L U'Ufl11lJ"''l.J 1llfl111~'1.Jfl11lJ611~rn'1Jei'l-ii'BlJ'1'1\lb 'W'IX1 E-Mail Ll'WL~mL~11"iJ~ 1 i 'U , v~ \I

15fl11boLJ11'tX6'1oLJeJlJ'1 E-Mail ~h'li'W1'1.J1'111'1J1~ rl1Vl'U\?l H 1 mim1lJ1~~~1~1''1b 'Ufl1))~'IAei~mJ E-Mail v ' v

'1JeJ'1~1'1.Jb~ClflvlB\IL~BDB'ln'Ufl11'1'1~~~1~1'1.J v v v

-Uv (121) ~1lJG'i'I E-Mail ~i1"'n~ru~LU'U"iJ~VllJ1EJ'1JEJ~ (Spam Mail)

-Uv (122) ~1lJG'i'I E-Mail ~i1"'n~ru~LU'W"iJ~VlmEJ'1fl 1611 (Chaim Letter) v

-Uv (123) ~1lJG'i'I E-Mail ~i1"'n~ru~Lll'Wfl11'1~LiJ~~eifl!JVllnEJ Vl~eJ~'Vl~'1leJ'1'4flfl'1~'W -Uv (124) ~1lJG'i'I E-Mail ~i1111"11tJ1~n'l.J'4flfl'1~'UL~m"iJ\?l'U1 ifo (125) 1~w'l.JzjeJ'1leJ'l~G'i'11'U E-Mail 'VlfluU'l.J

' v ' ifo (126) 1~'Vi'1fl116111B'loLJBlJ'1 E-Mail \?11lJf111lJ"il1LU'UeJV1\16'1,J1L6'1lJB

v

eUv ( 127) 0i'11'UvleJ'l'Vi'1fl1)\?1)1"iJ6'1eJ'U LB fl6'111bb 'U'l.J"iJ1fl E-Mail nB'U fl1)b D~ L ~eJ\?1)1"iJ6'1eJ'UL i'l'11~ EJb i 1tJcaLLmlJDei'ln'Ub16'1 LU'Wfl11DeJ'ln'U1'Ufl11LD\?11vl~~LU'U Executable File L-d'U .exe .com LU'Uvl'U

eUv (128) rnoU'11'WvlB'ILllLtJ\?1Vi~eJG'i'l~B E-Mail Vl~B-ifeJfl11lJ~1~1tJ"iJ1fl~G'i'lffi,j~~fl v v v

-Ua ( 129) m otl\11'UvleJ'ILll1 i-if eim1lJ~Lll6'1fl1j'jVf~B1'1.JG'i\I E-Mail ~1,J L VllJ1~61lJ -if BlJ'1 B'UeJ1"iJ'Vl11 ~b~EJ v ' v

zjm~EJ'1'1leJ'I 11\lj'jEJ1'1.J1m1'1J1~ oUv (130) rnoU\11'UvlB\l\?111"iJ6'1eJ'Uvlbn'l.J E-Mail '1JeJ\l\?l'ULB\l'Vlfl1''U LL'1~1"111~~Ln'l.JLLoWlJ-ifBlJ'1bL'1~ E-Mail '1JeJ\I

\I \I , 'U

\?l'U 1 ~ L VI~ eJ"iJ1'U1'UU eJ EJ~6'1~ LL'1 ~fl1)'1'U E-Mail ~1lll?i' B\I fl1)eJ eJ fl"iJ 1 fl)~'l.J'l.J L ~ eJ'1 ~tJ1lJ1 ru1 i L-rl' eJ~)~'l.J'U ' .c::t. wj'. ..::i. '

"iJ\?1VllJ1 EJelb'1 fl'Vl)eJ'U fl6'1

eUv (131) .LJeim11~1''1 rnoU'11'Wfl11LeJ'WEJ1EJ E-Mail ~"iJ~botleJ1\IB\l.fl1EJVl"'\lln~\ILfl~B\lfleJlJoW1L1?1v1'1lB\l\?l'U v

L ~m tJ'U fl11thl'ln'U~~'t.lbLeJ'U eJ1't.l"iJ~Vl:l.J1 v1i;l ~-:it!'tJhJm 1~~ bntJoff eJlJ'1 Vl~eJ E-Mail ~1lJ1m-ff LL~11 ll 'W v . v !V -=-~ .c::t.ff

~"iJ~Vl:iJ1EJelb'1fl'Vl)eJ'tJfl6'1

ifo ( 132) rn oti-:i1't.lvi'ei'11 oU"iJ~Vlmv ab~ n'V11eii1 n61.n1fl1~ (@raJ·avithi.ao. th) 611V11tJ 1 i1tJ-G'i'loLJeJlJ'1 b 't.l1~tJ'U 'U d..9 ::> 'U

.c::t. v .c:iadcvd v d v c:a.~ ..::i..d'

11'1lfl11\?11lJlJ\?lflUJ~)~lJ'U(?l) LlJeJ'J'tJ'Vl 18 5'U11fllJ 2550 b"aeJ\I fl1)j'j~'U1W'l.J'U"iJ\?lVl:iJ1EJelb'1fl'V11eJ'Ufl'1flm\I ... b~eJfl1)~eJ'111b 'U.fl1fl~~ ...

cl1'Ll~ 13 n1';ifl1'UfJ1lnT~1.U~ub~e:i{L'w~ (Internet)

if B ( 133) ~~ bb'11~UtJ l'i'e:i.:ifi1Vl'Ll~ bG1''Ll'Vl1~f111b zjm.J~ e:J1~tJtJfle:J1J~1 b~e:J{b ~e:Jf111b .LJ11 i.:i1'UB'Llb~e:J{b \j~ ~ 'IJ'IJ

l'i'e:i.:1Lzjm.J~e:i~1'Ll1~uu-rn~1F1111JtJ'1e:i~.ntim 1.:i~mu1'111'll1~ ~~?t11HLvhii'Ll L"li'Ll Proxy, Firewall, IPS-

IDS bU'Lll'i''Ll Vf11lrrti.:i1'Llvl1f111bzje:J1J~e:J1~tJUfleJ1l~1b~e:i1~1'Llv11.:i'1ie:i.:iv11.:i~'Ll L"li'Ll Dial-Up, Modem, etc.

tin L 1'LlLL~11~ L Vl~i:.J'1 fl111J~1 L U'Ll Lb'1~l'i'e:i.:iv\'1m1'1Je:ie:i'Ll ru1~~1 n~ eJ1'Ll1 tJ m1 L U'Llm ti~ n~ruBn~1 , , u \I

if B ( 134) bfl~eJ.:!fleJl.1~1 b~e:i{ci1'Llt~flfl'1 bb'1~ bfl~eJ.:!flm.J~1 b~e:i{bb tJtJ~f1~1 ne:J'Llvl1 f111b zjeJlJ~eJB'Llb~eJ{b \j~ ~1'Llb 1u bu 11 L61le:i1 (Web Browser) l'i'e:i.:i~ f111~ ~~.:i 1 tJ1 bbf111JU e:i.:i n'Ll11-r?t bb'1 ~v\'1m1e:i~'1ie:i.:i1 Vl1'1l e:i.:i

' 1~uutJljlli1m1

if B ( 135) 1 'Llm1-ruci.:i-LJ'm;J'1fle:J1J~1 L~e:i1~1'Ll'Vl1.:IB'Llb~e:i1L .u~~ ~l'i' e:i.:i~m1'Vl~?te:iu 11-r?t (Virus Scanning)

1~ ti 1tJ1LLm1lu e:i.:in'Ll 11-r?t ne:i'Llm1foci.:i.LJ'e:i1l'1'Vlf1fl~.:i 'IJ '

ifB ( 136)' ll.lb i1~tJtJB'Llb~e:i1L.U~ (Internet) '11€1.:J h.:i~tJ1tJ1'111'll1~ b ~e:i'Vl1tJ1~ 1ti'll'U1 'Llb "8.:i~1 ru'll~b U'Ll f111

ci1'LltJ flfl'1 Lb'1 ~'Vl1 f1TH .LJ1ci L 1u 161! ~111 L Vll.11 ~?f l.l L 'li'Ll L 1u 161!~~-u~ ~ e:i ~'1i5111J L 1u 161!~~~ L d eJ'Vl1B'LleJ1~ ' 'IJ

m~'Vlu m~ L Vle:i'Ll'Vl~e:i L tl'Lln ti~ e:im 11J~'Llfl.:i~e:i'll1~ l"t1?t'Ll1 ~1~1J'Vl1n~~ ~ ~ Vl~e:i L 1u 161!~~ L tl'Ll.tl ti~e:i~.:ifllJ Vl~e:i'1~bn~~'Vl5'1Je:i.:i~~'Ll '\ll~e:i.LJ'e:i1J'1~m~ne:i 1 Vf Ln~m11Jb~ti'\ll1ti1Vlnu11.:i~mu1'111'll1~

'IJ 'IJ

if B c 13 7) Vf11lL tl~Li:.J ti.LJ'e:i1J'1611~ru~ L tl'Llm11l~rnM ti1nu.:i1'Ll'1Je:i.:111.:i~ti1u1'1 ~e!.:i1111~tJ1~ml"te:i ~1-:i L ll'Ll 'IJ .,

I .c:t, ' d 'Vl1.:I f11)i:.J1'Ll)~tJtJeJ'Ll b~ el) b 'Ll~

if B c 138) 1~~m~1'.:im1~11'Ll'1 Vl'1~ 1 tJ1LLm1l1 i.:i1'Ll~1m~uuam~e:i1L .u~ m15~ L~'Vl 1 tJ1LLml.l~1.:i 1 l'i'e:i.:ib ll'Ll 1tJ1~ti111'1~bn~~'1J~'Vli if B c 139 > 1 'Ll m1 ti .:i1'Ll m~~ 1'U ?t'Ll 'Vl 'Ll 1 a L~ n'Vl 1eJ'u n ~ 111 L ti~ Li:.J ti .LJ e:il.l '1~611 ~ ru LL'1 ~ L ll'Ll fl111J~u '1J e:i .:i 'IJ .,

1 ).:l~tJ1tJ1'1116ll1~

if B ( 140) t 'Llf11) t oU.:11'Llm~~1'Ll?f'Ll'Vl'Ll1B b~f1'Vl1e:Jiif1~ 111L?t'LleJfl111J~~ b i1'Ll '\ll~eJ t i.Ve:im11J~~1 tJ 1 Vl~1tJ ~ '

~~v\'1 t VI Ln~m1rn~e:irn~ti~e:izjm~ ti.:i'll e:i.:i 11-:J~ ti1u1'1116ll1~ Vl~e:im1v11m tim11l~1l~'Ll6nuufl'11m'lle:i.:i ' ' ' ..

'\ll'Ll1 tM1'LlffW 1 if B C 141) 0i.:i1'Ll1l.l'l11L -LJ'1fle:i1l~1 L~e:ifl~ 1 ~~~ m~ru~B'Llb umvh1 Bm U'Llfl111l~~LMtn num11l~'Llfl.:i LL iA.:i

11'lle:i1ru1~m B'LlbU'Llm11l~~LMennum1ne:im1~1ti Vl~e:ifl1~~~~m~ru~B'Ll'111lf1 m1~1l.lv11m1Li:.JmL~~ ~ I I I.I .c::t, d' Q.J I I .c::t, d' d

'\ll)eJ?f .:l~eJ'lle:llJ'1fleJ1J~1 b~ e:J)~.:Jf1'111 i:.J1'LleJ'Llb~ eJ)b 'Ll~ 'IJ

if B ( 142) 'H~.:i~1n t i.:i1'Ll1~uuam~e:i1L \j~ L?f ~~ bb~1 t Vftl~b 1rn u11L61le:i1L ~e:iue:i.:in'Llm1L .LJ11i.:i1'Ll1~titJfl fl'1 ' .,j

eJ'Ll 1 if B ( 143) Vl~.:i~1 n t i.:i1'Ll1~uuam~e:i1 b \j~ b?f~~ bb~1 t Vfv\'1m1e:ie:in~1m~urn ~e:iue:i.:in'Llf111b .LJ'11i.:i1'Ll1~ti

.,j

'-l flfl'1 e:l'Ll 1 if B ( 144) 0 i.:i1'Ll l'i'e:i.:itJ5-U~ ~11Jf1~Vlm CJ11Jl1 CJ m'am~v\'1m11J ~~ bM CJ1 nufle:ii1~1 L~ e:i~e:i ~1-:i bfl~.:ifl-Sl?l

~1'W~ 14 nT~L~-'.l1'Wf1vl.!W1L~v~~1'W'4f1f1~ -l!v (145) bLt.nVJ1-:itJ~lliiflT;i1.U-:i1'U~11tJ

( 1) bf1~e.J\lf1e.Jl.J~1bl?le.i{.ffi1\l'VW1'U1'111°ll1n e.J'Uru11?11 m .U,nu b tl'U~'UVJ-r~ tl'lJe.i-:i 11-:i~ CJ1'U1'1116ll1'1 . ., b~e.i1m'U-:i1'U'lJe.J\I 11\l~CJ1u1m1'1l1'1

(2) 1tJ1bb.ml.l~11'1cin~111~\1"1\l'U'Ubf1~e.i\lf1e.Jl.l~1b1?1e.J{'lJe.i\IL1\1Yrn1u1m16ll1'1 Me.J\I b tl'U 1 tJ1bbn1l.l~ 'U ... ' ...

h\IYW1'U1'111'1l1'1 11'1~e.i~'lJ~VlfimeJ~1\l~flMe.J\11?11l.lfl~'V!mCJ ~\l'U''U ~1l.lrJleU'"1'U~l11'1e.Jfl 1 tJ1Lbml.lvl1\I 1 bb'1~ '1111 tJ~111~\l'U'Ubf1~e.J\lf1e.Jl.1~1 b1?1eJ{~1'U~1 'Vl~mbm 'lJ V1~e.i'l111tJ1~~~'U1eU\11'U1111CJ~111n~V1mCJ

(3) hle.J'Uf1111?11 ~meU\11'U~1fl1)~\11~\lbb'1~bbm 'lJb tJ~CJ'Ubb U'1\I 1 U'Jbbn"Jl.11 'Ubf1~tl\lf1tll.J~1 b1?1e.J{~1'U .·~ 'U

'Uf1f1'1'1Je.i\I 11\l~CJ1u1m1'1l1'1 • ( 4) m1bf1~ e.i'Uti'1CJV1~e.i~" bf1~e.i-:if1e.il.l~1 b1?1e.i1~1'U'Uf1f1'1 m1'16lie.il.l'1~Me.i\1~1 b il'W m11111 CJ b~1V1-W'1~ •

'lJeJ\I 1 )\l~CJ1'U1'111'1l1 () 'V!~tl ~-r'U~1\I b 'V!l.J1'U11\l-rmn bf1~tl\I f)e.Jl.J~1 bl?l e.i1bb'1 ~e.itJ mru~11?1~1'1ru nn tl'U '\I , , QJ"'

1 )\l~CJ1'U1'111'1l1'1 b vl1i!'U

(5) rieJ'Um11 eU\11'U~e.iu'UV\n~n~1v11" 1 Me.i\lnm11?111wmu b~e.iV11b-r'11111CJ1tJ1bbml.ltle.i\ln'U11-r" ( 6) m .U\11'U n'V!-W1~ bb'1~fo ~111'1le.iuvle.im1111 bb'1-rn~1f111l.Ju'1e.i11111 CJ bf1~tl\lf1 e.il.1~1bl?le.i1

'U 'U

(7) ll111 bf1~e.J\lf1e.Jl.l~1 bl?l e.i1~1'Uu f1f1'1~1?1'U b e.J\lf11e.J'U f11e.J\I 1 eU\11'U e.i ~ b~ e.i 1 i-:i1'UtJ1~'111'U b'1~'1~'U V!~e.i ' 'U

b~tlnm1CJ~m11.U"1'Ubn'Un11 1 -ti'1 Ll.J\I • ( )

O ~ I d Q 6" .J Cl.J ~ 1 llCI d II 8 Vl1fl111?1\lf11 Screen Saver '1Je.J\lbf11e.J\lf1e:Jl.J~1bl?le:J1Vll?l'Ube:J\l'J'U[:.J\11'1Je:J'U 'V!l.Jfl1We:Jfl'V!'U1'1e:J

'V!i;r\1'11 n~hJ1m eU\11'Ubn'Un11 30 'UTVJ b ~e:itle:i\ln'U'U f1f1'1~'Um 1 eU\11'U bf1~e:J\lf1e:Jl.J~1 bl?l e:i1 '

(9) ~1l.J'l11 bf)~ e.i" f1e:il.J~1bl?le:i1~1'U~1~b~1V1-W 1~ b ti 'U b ~ 1'1J e:i\ll.J 11 err nu) ~u u bf)~ e:i ~ 1 CJ 'lJ e:i"

L 1\l'l'W1'U1'111'1l1n CJflb 1'U'1~ 1\91fofl111?111'1'1e:J'U'11fl~\11bb'11~'U'U'lJe:J\I L 1\l~CJ1'U1'111'1l1~ rie:J'Ufl111 eU\11'U 'U'U

-Uv (146) m11i1-H''1~1'U1 ~m.U\11'UtJfiu~1?11l.Jbb'U1VJ1\lm1u~V111~111m11-H'G'l~1'U~1~u111 meJn'111 "m'J I '\J ~ ,

0 t.l.:;:il Cl.IQ ~..,

fl1'V!'U\11'V!l.J1Vlf111a.J'J'UH\11'1lffU'lJe:J\l[:.J b '1l\11'U" 'U

oifv (147) n11tleJ\ln'U'11fl 1 tJ1bbfl1l.J'1l111ri1i\lhJYi\ltJ1~'1\lrl (Mal ware) • (1) 0i\11'UMe:J\11?111'1G'le:J'U'V!1b-rG'l'11fl~e:Jvl1\I I b-tl'U Floppy Disk, Flash Drive bbG'l~ Data

Storage ~'U I riv'Utl1l.J11i'l1'U~1l.Jtl'Ubf1~eNf1tll.J~1bl?leJ{ (2) 0 eU\11'Ul?111'1 '1e:iu1 ~~~ bb 'U'Ul.11 nu '1111'V!l.l1 CJ ab~ nwrnil n~'V!~eJ 1~~~1111Tu1'V1'1111l.l1'11 n

B'Ubl?leJfo'.11?11'11CJ1tJ1bbml.ltleJ\ln'U11-r'1neJ'U1 .U-:i1'U

(3) m .U\11'UMeJ\lm1'1G'leJ'U-LJ'e:il.J'1 f"le:il.1~1 b1?1eJ1t111~n'1l111ri1i" hlYi'ltJ1~""fi11l.JeJ ~1'11CJ zj"n[:.J'1~11 ~ '\J '\I 't '\I

-rre:il.J'1f1e:Jl.J~1 bl?l eJ1 'V!~eJ1~'U'Uf1tll.J~1 bl?l eJ1'Vl~eJ'1l111ri1i\l~'U bn111 f111m~ CJ'V!1 CJ ci n~1m CJ cimbm 'lJ bu~ CJ'Ubb u '1\1 '\I , " "

'V!~e:itJ~u~\11'U 1~1?11\lml.lri1i\l~n1V1'U11111 oifo < 148) m1'111eJ\loLJeJl.J'1 bb'1~m1nA'U

'U 'U

(1) rJl.U\11'UMe:J\l-ru~1116lle:iu1'Wm1'111eJ\loLJm;J'1'11mf1~eJ\lf1e:Jl.l~1bl?leJTI1u'U~eJu'UV\n~'U 1 b-tl'tJ CD,

DVD, External Hard Disk LD'UM'U

( ) ~., "' ., .J d ., ,,J ., 0 1!:'1 dd 1 'd '

2 ~ b'1l\11'Ul.J'V!'U1Vlbfl'U1fl~1G'le:J'lJe:J~G'l'111eN (Backup Media) 1 b'U'1'11'UV1Vlb'V!l.J1~'11l 1lb'1CJ-:Jl?le:J

m1~11 V1'1'1Je:J\loLJe:il.JG'l bb'1~vi111'1e.iu m1nA'UoLJe:il.J'1~'111eJ\l 11eJ ~1\1'1~1 bG'll.JeJ 'U 'U 'U

(3) m eU\11'UM tl\IU)~ biJ'U f111l.Jb~ CJ\111oLJe:Jl.J'1~ bfl'U11'U'U Hard Disk hlm1'1~ b D'UoLJe:J1l'1 '11 ~ ru " '\I '\I ~

b~CJ1oLJeJ\ln'Ufl11~1\11'U b~11~'V!1fl Hard Disk b~CJ 1tJ m~m~Vl'Uvle:Jfl11~1bU'Ufl11'1JeJ\I Ld\l'VW1'U1'111'1l1n

clTU~ 15 n1'jLoU~1'1Jbf'l~eNf'lel:l.l~1bg)eJibbtltJ'Vm'Vn oilei (149) bb't.n'Vl1.:itl~~m11-li-:n'Uvi'11tl .

(1) bf'l~el.:j f1 el1J~1 bl?Hl{ bb 'U '\1'Hl vn~h .:j'V'J CJ 1'\J 16'l 11"1!1 G t:l'li 'IJ1VI1m-li.:i1'1J b lJ'IJ~'IJ'Vl1''V'l ~ 'lJ el .:i

11.:i'V'JCJ1'\J16'111"1l1G b ~el 1m'IJ.:i1'1J'llel~11.:i'V'lm'U1m1"1l1G (2) 1 t11bbm1l~1~i;in~~~.:i6'l.:i'Umf1~el.:if1el1J~1 bviel{bb 'U'IJ'V'l n'V'l1'llel.:i 11~'V'JCJ1'\J16'111"1l1G tilel.:i blJ'IJ

'IJ

1t11bLm1Jvlb1.:i'V'JCJ1'U16'111"1l1G 1~~el~'ll~'Vlimel~1.:ii;intilel.:ivi13.Jnf1V11J1CJ ~.:itY'IJ ~11lrn-li.:i1'1J~~6'leln 1 t11bbm3.J 'IJ 6J 'IJ

~1-:i 1 bb6'l~i.111 t1~~~.:i'U'Ubf1~el.:if1el1J~1 bviel{i:l1'1J~1 'Vl~mbm 'll 'Vl~eli.111't.11~~~'LI1-li.:i1'1J 1~CJtl~n~'VlmCJ (3) ffi-li.:i1'1Jtilel.:i~m~n bL6'l ~ti fiu~vi11J~iiel rn11-li.:i1'1Jel ~1.:i6'l~ b ~CJ~ L ~el rn11-li.:i1'1Jel ~1.:itl6'l el~n CJ

'IJ ~ 'IJ

bb6'l~iit11~~'VlTifl1'V'l

(4) hJ~VJbb tl6'MLLm 'lJi:l1'1Jtl1~nel'U~1.:i 1 'lJel.:jf1el1J~1LV!el{LL6'1~1'mfl61i11'V'l'lJel.:jf1el1J~1 LV!el{1 ~ii

61fl1'V'lb~1J

(s) 1 'Limru~tilel.:i rn1Lf1~ el'IJlJ1CJf1el1J~1 Lvi el{ LL 'U'U'V'ln'V'l1 m11~m~ L tl1611V11''U Lf1~el.:if1el1J~1 Lviel{

Lb 'U'U'V'lfl'l'l1 b~elUel.:in'IJel'IJV111CJ~Ln~l\J1fln11n1~'Vl'Un1~LViel'IJ L'li'IJ n11Vlfll\J1fl 1~~'Vl1.:j1'1J 'Vl~el'Vl6'l~iiel LlJ'IJ '

(6) V1~m~CJ.:irn11-tid1V1~el'llel.:iLL~~ L'li'IJ tl6'11CJtl1fln'l nvi~1J~61'VIU11\Jel LCD 1~LlJ'IJ1elCJ~~oLJ1'1J "" 1" d .. ' .. 1" 'Vl1el'Vl1 'Vll\Jel LCD 'lJel.:iLf11mf1el1J'V'l1LVlt:l1LL'U'U'l'ln'l'l1LLV1m61CJ'V11CJ vi

(7) hh1.:i'lJel.:iVi''U'U'IJ'V1u11\JmL6'l~bLu'IJ~1J'4 (

~ 0 ... ... ~ ' "" .,J ... ~ 1·11 .. ., 8) f111b "1lVJ'V111°1111J'1~eJ1~'Vl'IJ11\Jeli11'1'lVlel.:j b"1lVJelCJ1.:j b 'U11Jel'Vl'1~ bbG'l~VJel.:jb "ll~ u 'Ubb 'IJ1'VJ1.:jb~ CJ1 fl'IJ

' ~13.Jb ~viLL 'U'UV11l'IJ1'1J L 'V'l11~1il~v'i11 ~V1u11ilelii1elCJ~~"1l1'1J

' (9) m11-li'Lf1~el.:if1el1J~1 Lviel{LL 'U'U'V'ln'l'l1 L tJ'IJ1~CJ~ n6'11'1J1'1JLn'LI1 ti 1 'LI'1f11'V'l~iimrnPi~el'IJ~~ tilel.:i

tl~Lf1~el.:if1ell.l~1 Lviel{ L ~el L lJ'IJ rn1~ n Lf1~el.:i~ m~CJ~'Vl~.:i nel'IJ b tJ ~ 1-li.:i1'1J 1 'Vl~~nf1~.:i d ... d .,J d ::'I 1" I 1" 0 'I ... .'1 .. ' ... ( 10) f111Lf16'l el'IJCJ1CJbf11el.:i 'll'1J~'Vlbf11el.:ib u~ "1J.:j1'1J el CJ 'Vl'V11f11Wfll\J1fl~1'1Ji11CJ bVl bb u'IJ'l'l1J'V'l 'Vl13.J

'IJ ... ' .,

ll'1mf1~el.:i1~ CJ rn1~.:iV1u11\Jeli11'1'l~'IJ

oilei (150) f1111ltl6'lelvinCJ'Vl1.:i~1'1JrnCJm'l'l

( 1) ffi-li.:i1'1JiiV1ti1~1''Utlvi"1lel'U 1 'Lirn1uel.:in'IJm1'1ruV11CJ L 'li'IJ f111~elmf1~el.:i'lJru~~1~1~ -li.:i1'1J 1~ ~ . ~ u

11.:i Lf1~el.:i~.:i 11l 'LI~'11u11ru~ 'Vl~el 1'LI'U~b1ru~iim11JL~CJ.:i~elm1~'1J'V11CJ (2) ffi-li.:i1'1J 1~ Ln'U'Vl~el 1-li.:i1'1Jf1el1J-W1 Lvi elfo 'U'U'V'l n'V'l11 'IJ'1m'IJV!~iif1111J~el'IJ/m11J~'IJ/~'IJ6'l ~elel.:i

'IJ '

oifo (151) m1f11'\J~1Jf111L.LJ'1fi.:i1~'U'Utlfl'U1lm1

( 1) 0-li .:i1'1J tif el.:i tl1 'Vl'IJ Vlzj m~1-ti .:i 1'1J bb6'l ~ 1'1X'1~1'IJ1'IJf111boLJ11-ti.:i 1'1J 1 ~'U 'Utl ~ U~ f111'lJ eM b f1 ~ el.:i

m13.Jfotl~·IJ8'1J'llel~ffi .U.:i1'1J" "

(3) ffi-tl.:i1'1Jtilel.:i~.:irn11.U.:i1'1J1t11Lbm1l1'm~11\Jeli11'V'l b~CJ~.:inmtl1~1J1ru 30 'IJ1V11~v'i1m1~eln 'IJ

'VIU11\Jel Lriel 1~11m11-tlnw V1~.:ilil1ntYmrieltilel.:i m11.U.:i1'1Jtilel.:i 1~11,Xm,h'IJ

..

ifo ( 152) fl1':i1oU':iiX'1~1'Y1~m4\11t1'\.Jfiu~ivrn.JLL 'Y1'Vl1,rn1':i'U~V!1':i~~fl1':i':iiX'1~1'Y~':i~'U b 1l 'YL8fl'11':i "fl11 " ';cJ , .,,J .,.,. ... ;"l ...

fl1V!'Y~V!'Y1'Vlf)11;.JA'U~~"lle.J'U'1Jtl\ll(p 'll\11'Y"

ifo (153) rn1'111e.i\loLJm.JmL'1~m1n~'U " "

( 1) m oU\11'U~eJ\lvl1 fl1':i61°1'HMoLJm.m 'OJ1fl Lfl~e.J\lfle.Jl.Jfi1 bl'l ei-fa 'U'U'\Al fl'\Al1 ~1 E.J1Gfl11 bb'1~~eJU'UYi fl ~1\1 " "

1 L ~eiuei\I n'Yrn1~ ryi'11E.J'1Jei\l-Um,i'1

(2) moU\11'Y~eJ\l'OJ~Ltl'U~fl1!t1~eJ'11':ieJ\loLJm.m (Backup Media) b1l'U'1tn'Y~~LV!l.J1~'1l.J blJL~E.J\l~eJ " "

fl1':i~11 V!'1'1JeJ\loLJtll,j'1

(3) LL~'U~e.i6111ei\loLJeJl.J'1~1\I 6"l ~Ln'UoLJ'mmH'1~~a\lvi'1rn1'Vl~'1a'Urn1n~'Ya~1\1'1~1L'1l.Ja ~ I ~ ~

( 4) LL~'Y~a6111a\l-Um.m~hn oU\11'YLL~1 ~a\lvi'1m~1l.J1 ~'11l.J11m111tJ1oU\11'Y1~5fl "

(5) m -li\11'U~eJ\IU':i~ Lii'Y fl11l.Jb~E.J\111-Ueil.J'1~ Ln'UH'U'Y Hard Disk 1lJm':i'OJ~ b U'YoLJ eJl.J'161°1 A ru ~ ~ ~ ~

L~E.J1oLJa\ln'Urn1vi'1\11'U L'\Al11~vt1fl Hard Disk L~E.Jb'IJ mlJm~'Vl'U~eirn1~1LU'Yfl11'1JeJ\IL':i\l'!Al~1'U1'111'll1~

~TIJ~ 16 fl1'~\9ln1il~'Ufl1':i'4fl~fl (Intrusion Detection System I Intrusion Prevention System

Policy: IDS/IPS)

ifo (154) IDS/IPS Policy bU'U'Ub~'U1E.Jfl1'jM~~\IW'U'Ul'111'0J'18'Ufl11~fl~n bb'1~1'111'0J'1eJ'Ufl11l.JU'1eJ~n~ '1Je.J\lbfl~8~1E.J b ~eJUeJ\I tl'U'Vl~'\AIEJ1fl'j'j~'LJ'U'1i1'1'Ub 'Vlf"l bb'1~oLJeJl.J'1'U'Ubfl~eJ~1Wl1E.J1 'U b ':i\l'\Al~1'U1'111"l11~ 1 ~i1

" fl11l.J~'Yfl\IU'1 a ~n EJ L lJ'U LL 'U1'Vl1\I rn1'\.J~'U1i L~ E.11 n'U fl1':il'l':i1'1'1a'Urn1~ fl~fl Lfl~a~1 ~ '\Al~e.Jl.J n'U'U'Vl'U1'Vl LL'1~

<V~ .c:J.J II

fl11l.J':i'Ue-!~'lleJ'U'VlbflEJ1'1JeJ\I

iJeJ (155) IDS/IPS Policy ~eJ\lfl'jeJ'\Jfl'1l.J'Vlflb~'1~ 1'YLfl~8~1E.l'1JeJ\lb'j\l'\Al~1'U1'1':i1"l11~ bL'1~Lfl~a~1~-Ue.i:1m , , " ~\IV!l.J~ 11l.J5\I Li;1'U'Vl1\l~-Um.i'1m'OJ L~'U'Vl1\I zj'l 1:ifo,~ 'U Lfl~a~1 ~~'U Ll'la{ L ill'l'Vl mi;1'U'Vl1\I " ~ , iJeJ ( 156) 1~'U 'U~\IV!l.J~~'11 l.J11m .LJ15'11~'11fl~'Ub\91a1L i1 \9lvt~a~'11n11 ru~'OJ ~ ~ a\I ~1'U fl111'1':i1 'OJ'1a'U ':i~'U'U '11fl 105/IPS

iJeJ ( 157) ':i~'U'U~\IV!l.J~ 1 'U DMZ (Demilitarized Zone) 'OJ~~a\lb~~'Ufl111'111'1'1e.J'U':i'IJ Lb 'U'Ufl111 ~'U~fl1':i "

OeJ'Yfl11M~~\lbL'1~LtJ~ 1 ~'U~fl1'j ifo (158) 1~'11'1 LL'1~bfl~8~1E.J~\IV!l.J~~i1m1'1\1~1'U IDS/IPS 'OJ~~a\lilfl1':iU'YVifle-J'1fl1'jl'1)1'0J'18'U ileJ (159) ':i~'U'U IDS/IPS 'OJ~~e.i\li1fl1':il'l':i1'1'1e.J'ULL'1~ u·pdate Patch/Signature LU'YU':i~li\'1

iJeJ (160) ~a'li1rn1l'111'1'1ei'ULvtl'lrn':iru .Ue.il.J'1'111'0J'j '\Alf1Mm1l.Jfl111.U"1'U n'1m':il.J LL'1~u'UYin'IJ~l.J1ru , " ·1

Ill ( ) 0 1" ,r • ,J1~ ,, cf "" I "lleJ 161 105/IPS '1~'Vl1\11'Yfl1E.I \9lfl!]fl1'Ufl:l.JYl'Y~1'Y'1Je.J\I Firewall V1 'llb'Yfl1'H'll1tl\lbfl':ie:J'IJ1E.1'1Je:J-:J':i~'U'U

'111'1'YL 'Vlf"lml.l'IJ flM

iJeJ (162) bfl~e:J\ILblJ~1~~i1rn1M~~\I Host-Based IDS 'OJ~~e:i\liJfl1':il'l':i1'1'1e:J'UoLJe:J:l.J'1U':i~li\'11''U "

.Uei ( 163) 'Wt)~m1iirn11.U-:i1'U n'1m1ii vr~m vr~rn1ru~-:ivrii~ ~~m1iiL~v-:i~e:irn1~n1n rn11'1ii~1~'U'U "°' d I QJ .di II ~ ,dtl 0 ~ 1 'tJ 0 d ti .c:j

'Wt)Vln11il'Vl'U1G'l-!IG'IV V11e:Jfl11'WV1mi!L'U11~'U'U 'Vl-!l'Vl 1~G'l'Uf111i!G'l1L1'1LL6't~ ii 1~G'l'Uf111i!G'l1L1'1 lil~Vle:J-!lil

m111v-:i1'U1 iX~1vri!1nciii-:i1'UL 'Vlf11 'U fa~?111G'l'UL 'Vl\31'V111'U~'UVi~m1'1ViJ'U '

.Uei (164) 'Wt)~m1ii n'1m1ii~tl1"1-:i'1v vr~m~uurn1v11-:i1'U~~~tln~ ~~nA'U'W'U '1~~e:i-:i~rn111v-:i1'U1iX ~1V1U1nciii-:i1'UL 'Vlf11'LI fa ~"111G'l'UL'Vl\31'V111'U il1V b 'U 1 -8'11m~m1'1'W'U

' -ilei (165) rn1vi11'1G'le:iurn1umn~-:ivrii~'1~~e:i-:iLnuu'UVin-Ue:ii16'111hJi!e:ivn11 90 i''LI

' ' ~ .Uei (166) W'U'U IDS/IPS ~1tlLL'U'Ufl11\1leJ'UG'l'Uel-!l~mVl\1lfl11tU~Ln~~'U 1v1LLfi 11V-!11'Ui:.J6'tfl11\1l11'1'W'U'UeJ-!I

~ ' bVl\1lfl11tU~1-!I 61 6't'U61le:JvlvlLL1{~~-!1~1V~V111'1'W'U

' I '

oifo ( 167) \31'U~f1e:Jil~1 Lvie:i1 ~~'V1B1 'Ufl11V~fl11L zje:iii~mf1~eJ~1V'UeJ-!I Lf1~eJ-!lf1eJil~1 Ll1le:J1~~'ViJf1~ m1ii L~V-!I ~ ' ·1

~e:im1'1Jmm~'IJ'IJ fav1lJ~e:i-:i~rn1LL~-!ILLnm.U-:i1'Uci1-:ivri!1 ' ' ~

.Uei ( 168) ~~tin\1111'1"1e:J'Ul1'Wmmiim~v11m15'U 1~~L \J'Urn16't~LiJ~'U 1v'IJ1V'Ue:i-:i 11-:i'W v1u1m1'1l15 rn1 ~ ~

'WV1V1iJL oLJ15-!!1~'1J'IJ favii"lle:J'IJ fl111 '1il~1~'1J'IJ Vl~eJ~'Wt)~n11i!L~V-!l~e:Jfl11vl1-!11'U'UeJ-!11~'1J'UG'l11G'l'UL 'Vl\31 Iii~ ~m~.r'Urn11.U-:i1'ULf1~e:i~1v~'UVi vr1nrnwwv11~-:inci11LiJ'Urn1m~v11m1ii~~~G'le:i~ri~e:i-:in'Un!Jvrii1v11 v11 Vfl11n1~'V11f111il~~ L~ V'l fl'Uf1e:Jil~1 LV!e:Jf Vl~eJ L \J'Urn1m~v11~~-!li:.J6't b-lXLn~m1ii L~ VVl1V~ eJoLJeJil6't Lb6't~ ,, ~

'Vl~'WV1m1~'1J'IJ'Ue:i-:i11-:i'W v1'1J1m1"1115 lil~~ei-:i~ n~1 L 'U'Uri~vi1i1-rr'Uvi e:J'U'lleM n!Jvrii1 v

i;i1'U~ 17 m1~~~.:ILLft::n1V1'U~Fi1"Uei.:i1::uu (System Installation and Configuration)

.Uei (169) rn1tlfotJ1-:i1~'1J'Utll)lliinT~ (Operating System Update)

(1) \1l':i1'1G'leJ'Ubf1~el-!ILLlJ~1v LL6't~e:Jtlmru':i~'IJ'U '

(2) ~~~-:i1~'1J'UtllJu~rn1vi1-:imiim1ii~e:i-:im1m11.u-:i1'U (3) n1Vl'U~zje:JLL6'1~1~"1~1'U ~~LL6'11~'1J'IJ LL6't~zje:JmoU-!11'U

~ ~ ~

(4) n1Vi'U~A1~~~-:i zjmri~e:i-:i (Computer Name) I IP Address

(S) tl~'Utl1-:i ; n1vr'U~l°l11~~'1Jri11iitl6'te:i~nv'lle:i-:i1~'1Jutll)u~rn1 (mru~1~'1J'Utll)lliirn1~~ Service Patch Update)

(6) ~~~-:i 1 tliLLmii Antivirus I tl~'Utl1-:i Virus Definition LL6't~n1vr'U~l°l1m1vi11'1"1e:J'IJ1~'1J'Ufl11 '

6'1LLn'ULL6't~tl~'Utli-!! 1 tlibbniil '

.Uei (170) m1'1J~vr11uru~m.U-:i1'U/~'Vltm1L.LJ'1(i-:iLL6't~m11.U-:i1'U1~'1J'IJ (User Account Management) ., ~

(1) n1vr'U~zjmL6'1~1~"1~1'U ~~LL6'11~'1J'IJ (System Administrator) ~~

0 .d '!IV 0V I ( ) (2) fl1Vl'U~'1le:Ji:.J ~"ll-!11'U (User Name) bb6'1~1VIG'lt:-J1'U Password

~

(3) u'Lliiinuru~m .U-:i1mL6't~~'V16m1L-U11.U-1~'1J'IJ ., ~

.Uei (171) m1tl~utl1-:i1~'U'Uri11-rn~1ri11iitl6'te:i~.tlv I Anti-Virus (System Security & Antivirus '

Update)

(1) ~~mii L~1w1-:i 1~uum1'V11-:i1'U'Ue:i-:irie:iii~1Lvie:i{ mwLJ'11.U1~'1J'IJ

(2) Performance 'Ue:J-!11~'\J'U vr~e:ivi11'1'1e:J'IJ'11m~u'U-rn~1ri11iitlmi~.tlv~~~~-:i (3) '1Jfotl1-:i I n1vr'U~l°l11~'1J'Uf111i1tl6'te:i~.tlv 1 iXLvrm~61i1n'Utlruvr1 ' .,

, . ..

-Ue:i (172) ~~~\l I tlfotl1-.:i1~'U'U~~fl11~1'UoLJe:J:W'1 (Database Manaoement Operation) " di \I ~

( 1) ~~~\l)~'U'U~~fl1)~1'UoLJ'€l:W'1 \911:Wf111:Wl1i'e:J\lfl1)'1.Je:J\l)~'U'U\l1'Um) \j'Vj cnu1m1•1.nm i "" 'II

(2) n1V1'U~fi11~uuV1~e:i 1 tl1LLm:w~1'U-U'e:i:w'11 iXv'i1-.:i1'U~1:wnu1~uutln\Nim11~e:i~1-.:it:ln11i'e:i-.:i LL'1~ ~ \J ~ \J

ihh~~YJ6m'Vj mm~uu~1'W-U'e:i:w'1i!'Un1V1'U~ "" 'II

(3) 61~1-.:i bb'1~n1V1'U~11CJzje:ieru1V1111~uu~1'UoLJ'e:i:w'1 (Database Admin) zje:irn-U-.:i1'U~'Ubb'1~~YJB \I di \I \I

( 4) tl1'utl1-.:i / n1V1'U~fi11~uu1 iXbV1:w1~61:w ~'U61l!CJ V1~e:i{Je:i-.:in'Wm1bn~'l:lniV11e:i~b61:we:i , ·~ 'II

-if e:i ( 173) ~~~\l~1'UoLJe:J:W'1 b tl1bbn1:W1~'U'U\l1'U~1\l '1 I fl1Vl'U~fl1W'U'U'1.le:J\l b tl1bbn1:Wbb'1~rl1Vl'U~rnoUbb'1~ dJI \I I \I

~Y1Bm1b .U11 -Uu1m1V1~e:i b .LJ1fi-.:i~1'U.Ue:i:w'1 "" 'II

( 1) ~~~-.:i 1 tl1Lbm:w1~uu-.:i1'Um:Wf111:wl11e:i-.:im1V1~e:im1~l'l.l'U1 (2) n1V1'U~fi1 Vl~e:i 1 tl1bbm:w Vl~e:iu1m11 iXv'i1-.:i1'U~1:wnu1~uutll)u~m1 bll'U1tlm:w1 tl1Lbm:w

Vl~e:J W'U'U\l 1'U,f 'U e:i ~ 1\l~ n 111 e:J\l bb'1~iJtl1~~VIG.fl1'\"j (3) ~~~\l~1'UoLJ'€l:W'1 bb'1 ~ bzje:J:W~ e:JW'U'U\l1'U bb'1~vl1fl11Yl~61'€l'Ufl11b iX'U1fl11m:W1~'U'U\l1'U,r'U

"' 'II

fl1Vl'U~

(5) n1V1'U~bmwsnm1'111e:i-.:i I '11b'U1 I YJ~61e:iun~'U (Restore Test) 'II

(6) u'U'Yi n.Ue:i n1V1'U ~ fi1 ~ ~~-.:i bb'1~u rn~zje:i rn i-.:i1mL~'1~1~i;lu'1.le:i-.:i1~uuYJ n fl# -.:i~il m 161~1-.:i I ·~ 'II ,

~1'U~ 18 m1~~nnu-b'e:i3J~'111'111°le:il.J-W1b~e:i{ (Log) 11 ., a 11 .,. ' 1!:"1 ..J a ., d ., .,

11e:i ( 17 4) "il~ bn'U'1.le:J~'1"il11"il1Yl1\lfle:J:W'Vj'J b\91e:J1 (Log) 1 b 'U61mnu'1.le:J~'1Yl611:w11mn'l!l'1 f111:Wf11'Um'U

t:ln!11e:i-.:i bb-n"il1\l )~'U~1'Uflfl'1~b-U'1fi-.:i~e:ii;l-.:imh11~ bb'1~oLJ'€ll.!'1~1 m 'Ufl1)~~btl'U 111e:i-.:in1~'U~.ff 'Ufl11:W~'U1 'U \I '\ , \J

... "" fl1)b'1.J1t:l\l

-iie:i c11s) iX1:wLLm'1.l-U'e:i~'1"iJ11"iJ1Y11-.:if1e:i:w-W1L\91e:i{~Lfiu1'n'l!l'1H -Ue:i (176) n1V1'U~1iXilm1u'UVinm1v'i1-.:i1'U'1.Je:J\l1~'U'UU'WVinm1tll)u~-.:i1'U'1.le:l\leJl-U-.:i1'U (Application Logs)

LL'1~u'WVim1CJ'1~LaCJ~'1.Je:i-.:i1~uu{Je:i-.:in'Um1umn b-d'U u'WVinmwv1 - e:ie:im~uu u'UVinm1'\"jcncn:wboLJ'16'1 , " ' 'U

W'U'U Lll'Wlii''W L~e:itlw 1CJ'll'W1 'Ufl111-U\9111"il61e:J'Ubb'1~11i'e:i-.:iLfluu'UVin He:i~1-.:iiJe:iCJ 90 1'W iru~-.:ibL~m11 -U-.:i1'U

i'U~~'1-.:i 1~CJ'\.Jljlliim:wn~V1:w1CJ11~1CJm1m~vi1m1:w~~bMCJ1n'U!"le:i:w~1L\91e:i{ -Ue:i c118) ~e:i-.:iii15m1{Je:i-.:in'Wm1bbm'1.JLtl~CJmb'\.J'1-.:iu'UVin~1-.:i ~ bb'1~'1'1n~~YlBm1LoLJ'1fi-.:iu'UVimm~1i!'U1~

., tl ~ 'l~fl 1~~-:!fll • ( 1) b ~B 1 ~'H~'U'IR!11fl'Ub 'YlPl'lJB-:111-:i'WCJ1'\J1'1'j1"1J1~ fl1lJ11Cl 1~'U~n1'~1~B~1~~m ~B~ (2) b ~B 1 ~b tl'UlJ1V1'Hi1'U lb tl1'Yl1~'1Jfiu~Lb6'l~fl11l.Jfo~\il"IJB'U'1JB~~\il LLm~U'U 1 'Un11U fiu~~1'UB~1~ bfl~~fl~\il

dJI ~ '\J'\J ~

bb6'l~vi1~vr-Unn~f111lJ611l°i'qi'llei~m1~m11m1lJ~'Uf1~'1J6'lei\il.ilCJ (3) L ~ei 1 ~0 -u~1'U1~~u~ L .LJ1 h LL6'l~?11m·rntJ5u~mlJ bb 'U1'Yl1~~n1vt'U\il 1\ilmfl~~fl~\il Lb6'l~vi1~vrirnn~m1lJ 6'111°1 qj'llB~n11~n~1f111lJ~'Uf1~U6'lB\ilJl CJ'1JB~1~'\J'Ufl1'.iG'l'U b 'Ylial .

u 'L.11t1~u~ ~bu~ 1 m1-rn~1fl111lJtl~ei\il.ti'ern1u.UeilJ~

dS 'IJ 11 o ~,t_ Q..I ti ll

'llel 1 n1V!'U\ilfl'Yl6bb6'l~fl11lJG'l1f1 ru'1JB~'1JBlJ6'l bb6'l~~1'U'llellJ6'l IU '\J dJI 1\1

(1) ~\ilvi1uru~~Tu-LJ'al.l6'l m11il1 bL 'Wnn'1l.l'Yl-r'W CJ1n1'1JB~1~uuvr~am1vi1~1'U 1\ilCJ1 ~n1vt'U\il n'1l.l IU dJI \J q q

m oU~1'Ubb6'l ~~'Yl5'1Ja~ n'1lJ m -u~1'U " . "

(2) n1vt'U\il bntwn1'Um1a'Uru1vi1 ~b .LJ1t'i~m11 .rr~1'Uf!11G'l'U b 'Ylial ~b~ CJ1oLJa~nu m1ei'Uru1vi m1n1vt'U\il I\ IU lit QI

' ,, Q. ...:::.. <di 0 Q..I ~

G'l'Ylli V!'.iBf111lJ'eJ'U'eJ1'U1"il \il~'U

(2.1) n1vt'U\il~'Yl~'lla~m .rr~1'UbL~6'l~n'1l.l~b~m.LJa~ " . ,, ,,

- G'l11~'1J'ellJ6'l "

- D'eJ'UoLJBlJ6'l "

- LLm'll

- a~~~ - hH1~'Yl~

(2.2) fl1V!'U\il Lnru6'1 n11'.i~~'U~'Yl~ f111lJ'eJ'UeJ1'U1"il 1 ~b ll'U 1 UV11lJ n11'\J~V!1'.i~\iln1'.i f11'.ib oLJ1 n~'ll a~ 0-tl~1'U (User Access Management) ~1~n1vt'U\ilH

~ ,, d ,, ,, 1" 1 """" ,, ~I (2. 3) t:.J b "IJ~1'U'YlV1'eJ~ n11L '1J1 "IJ~1'U1~'\J'UG'l1'.ifl'UL 'YlPl'll'eJ~ 1~'WCJ1'\J16'l11"1l1Cl "il ~via~'1JBB'Uru1vi b u'U " . ., 6'l1CJ~n~rueYn~1LL6'l~ 1~-rum1-W"il11ru1ei'Un 11vi"il1n~1vri.J1n'1l.l~1'UL 'Ylf11 'U fa~?t11?tm'Ylia1

-~ . (3) .ff'UV1B'UUDmlL~Bn11~\ilLn'U.LJ'B\j6'l

(3.1) ~\ilLL'l.J~tJ1~Lfl'Yl'lla~-LJ'ei\j6'l mmLll'U

- .LJ alJ6'l fl11?f'U b 'Yl 131~1'U m 1u ~vr11 L-d'U .LJ al.l6'l 'U fou 1 CJ .LJ alJ6'l CJ 'Yl Li ia11 G'I vi { bb6'l ~ fi 1-ru 1a~ \J '\J '\I '

,, ,, • I ... CV "" ~I ,, '1J'ell..16'l'Ufl'11f1".i '1JBl..16'l..:J'Uu':i~l..11n.!f11':ib..:J'Ubb6'l~'Uru"ll b u'U\?l'U

\I q '\J QI

- -U'alJ6'lG'l1'.iG'l'UL 'Ylf41~1'Um11~CJ n1'.i~w.J'U1 bL6'l~m11 ~'U~n1':iL 'Ylfl 1 'Ufa~~ b~CJ1oLJeM b <d'U "

G'l'1~rn-tiu~m1 ?1'1~t:.Ji;i..:i1'Ui~CJ -LJ'eil.Ji;i~1'Ui~CJ bU'U~'U " "

(3.2) ~\ilbb'l.J..:i1~~um1iiG'l11°i'ru'1Ja~-U'al.l6'l eiamll'U 3 w~u fia ., " ,, d... ., 0 ., d

- '1Jvl.l6'l'Yll..11~\il'U fl11lJG'l1f1 rum n'YlG'l\il " ., . - -LJ'm,Ji;i~i1':i~~um1l.l611fi'qitl1'Umn~

I.I ..Jail Q.J 0 CV t.I

- 'llm,j6'l'Yll.J':i~\il'Uf111lJG'l1flqj'UBCJ

...

(3.3) "5'\91LLu.:i~1~'1.J-ff'Wri11~'1'1.J"lla.:ioLJ'a~'1 - oli'mJfil~'U~~~ V1~1vri11~11 V11mtl\91Lt:-1 v~.:iV1~\91V11m Vi ti.:i'U1.:i6'!1'U1U~ria 1 i~\il\91 m1~

'II • .,. ' ., .,, L'1tJVl1tleltJ1\111tlbL1\!Vl~\91

- oli'mrn~m.11n V1~1vm1~11 V11mtl\91Lt:-1ti~.:iV1~\91V11a L Viti.:i'U1.:i6'!1'U1U~ria1 ~Lil\9lm1~ 'II .,. ' .,

L'1CJV11C.leJC.11\111CJ LL 1\1 ...

- -b'm.1fil~u V1me.1ri11~11 V11mtl\91Lt:-1e.1~.:iV1~\91V1~mVie.1.:i'U1.:i6'!1'U1U~ria1iii\il\9lri11~L~e.1V11e.1 'II

- oli'mrn..t11tl V1~1e.1m1~11 .Va~'1~'11~11mtl\91Lt:-1tJV11mt:-1mL'Vj~~1hJ1~ 'II v

" (3.4) "5'\91LLu.:i1~~'1.J-li'Wm1L-V15.:i

' (3. 6) m1n1V1'U\9l'<S1"U1'U-da.:iV11.:iVi'11~11m .LJ15.:i

-h'B 2 .Va~'1"1l11'111'111'1'WL V1PivintJ1~ Ltrn1'W'11'WoLJa~'1~a.:i1~-r'Um1"5'm~~'U m1ll a.:in'WvJil~VJBL .LJ11-U'V11a " , cf.I " "

0 oQ t oCll d .J 0 ~I I Q.J Q I QJ

mL 'U'Ufl11 11~Vl\111C.1'1~LeJCJ\9lel'U 'l Vllil1L u'Ul'lammm11n~1m1~u'1el\9lflCJ

oli'ei 3 m1tJn~LMe.11n'UoLJ'a~'1~L lJ'Wm1~'1'1.J 1 ~unu~mm~L u ti'U11~1e.1m1-rn~1ri11~'1'1.JV11.:i11'l!m1 yj. PJ.

2544 LL'1~LL'W1tJn~m1-rn~1ri11~~'Wri.:itJ'1a\9lile.1'111'1'ULVJP1 L~a.:i LL'U1tJi)~t"Um1m'Ufl~fl1-SLoLJ15.:iLL'1~ 1

., ., fl11 'll\11'WWUIJ'11A§1'ULV1131 "Ufl 12

oli'ei 4 vj' \91 LL'11~'1.J'U"ll a.:i Pi'W~ ria~-W1 bl'l a1L tJ'Wvj'il~VJBLL'1~ rl1'U11U 1'Wm1Yi1U 11ru1 ri ru'1~u~"LJa.:i rn-U.:i 1mL'1 ~ "" " " , 'll

1 tJ1LLm~~1~-r'Ua'4fY11'11 ~m~vhm11\91 'l n'UoLJ'a~mT'W1~1'11~~VlULb'1~~\911 ~iiLbVl~'1\IU'WVim-U1aan (Log

File) m11.U.:i1'UG11V1-r'l.J'11'WoLJa~'1\911~fl11~'<S1b U'W b ~atJ1~ bCJ'll'W1 'Wf1111?1111il'1eJ'Ufl11~'1n~a.:i"LJa.:im11.U.:i1'U ... v v ., '11'U"llel~'1 ... v

oli'ei s 1 'U mrui:i1'U-U'a~'1~rlm11 "1l'~1~ n'W1~V111.:iV1il1 cM1'W Vl1mL'1 m tJ~ CJ'W Vl1a"LJa 1-1f-Ua~6'llil1 nV1il1 tJ\11'1.J ... v v

) o ') t 0 I "" "'"" .d .'1 "' " .d "' "' " .,J "" ( 1 fl1Vl'W\9l'W bCJ'U1 tJ "ll'Wl'leJ'W u n'l.J\91 bb'1~~1\911i:i1'Wb 'VjeJua.:inmrn~mL6'1~'1a'U'WVlfl"lla~'1Vllil~~ f111"ll'W d.J ""' " "

~1CJVl1a~.:i 1 tJEY.:iBn'1m'U~V1i:i.:i

(2) n1V1'1.J\91V1iJ1~m1~-r'U~\9l'llel'U"llel\lvJ~ LM C.11oLJeN Lb'1~~'U\9lel'UU fiu~1 'Wf1111-U'-Ua~6'l ~1~tl'W Vl~el v d.J v

LL6'lmtJ~CJ'WoLJa~'1 boU'W 15m1~.:i m1-r'U LU'W~'W (3) n1V1'W\91V1iJ1~m1~-r'U~\9l"Ua'U 1 'WmTua.:in'l.J-U'a~6'1

v

( 4) n1Vl'U\9l~'W l'l tim.Jnu~G11V1-rum1 '1?1m.J111A1 L U'U~~ .:!oLJtll;J6'1Lb6'1~1mL U'W~-ru-U'e.il;J6'l L ~e.J L U'W f111

lla.:i n'W m1tJ5 b?lu

(5) n1Vl'W \91 m1~-r'U ~\91"1leJ'U61'1Vl-r'U mru~-LJ'a~6'1~ LL'1 fl b tJ~ CJ'U tl'W Lil \91 f111'1 UJVl1 CJV11a Lil \91 L Vl\91 f111ru " " v , ' ,,

4C:!f .c!ril QJ IJ' Q.I

fl11~b'1CJV11C.lel'W 'l fl'U"llel~'1'W'W

(6) n1V1'1.J\9l~V1Bmwn15.:i-Ua~'1 v

(7) n1Vl'W\9lm\911i:i1'WV11\lb VlA-Uriffi m 'Wfl11L oU1Q\loLJel~'1Vl1a611aviJ~ LL 11 ... v

------------------------------------------------- -

(8) n1vt'U~m~·rn11'WLl31~'11vt~ull-eMn·1.m1rnn~ -LJ'a~'1 61la~~Ln1 vt~a~'U 1 ~iim111'11Fi'qi L~'U

~qjbL'1ffi .ut 'Ufl11b .rr11V!6'1 b u'U~'U

' d ,S It/ ~Tl.J'VI 2 n1':it11':iel.:l"llel~~

-if a 6 ~'111ru11°1 ~ L~ a m~uu6'1116'1m 'Vl\31~'111°1 ru LL'1 ~~ ~'V111~uu'111a\l~ L vt111~6'1111 ~mtl 'Ll6'1il1'V'l'V'l~a111 "I! \l1'U M U .

1~m~tJ\lm~ufl1111'11L U'Llmfl 1 'lli1atJ

-ife:i 7 n1vt'U~vti11~LL'1~fl1111fo~~"llau'Va\lL~1vti11ffi'Um1'111a\loLJe:J11'1 u

-ife:i 8 lJfl11~~vl1'Uqj~1~UU6'1116'1'UL 'Vll31~iJm111'11Fi'qi~\lV111~'Ve:J\l L 1\l'V'lCJ1U1'111"1l1ii 'V'l~e:J11~\lfl1Vl'U~1~UU 6'1116'1'UL'Vl\31~'1~~~'\ll11~uu6111a\l LL'1~~~'\ll11~UULLe.J'Ub~~tJ1l'V'l~a11mruumu'U a~1\liJatJU'1~ 1 flf\l

' oiJe:i 9 n1Vl'U~ b ~lJfl11'111e:J\loLJe:J11'1'Ve:J\l1~UU6'1116'1'Ub 'Vl\31bb~'1~1~UU bb'1~fl1Vl'U~A1111~b 'U fl11'111e:J\loLJe:J11'1

u u

vt1m~uut~~iim1 L '\J~tJ'UbL 'll'1\ltlatJn1vt'U~ 1 ~iim111~1 'Llfl116'111a'l-LJ'a11mJ1 fl~'U L~tJ1 ~ii15fl11'111a\l u

" ,, ..... 'Ve:J11'1 ~\l'U

u

( 1) n1vt'U~'ll1~ Lil'Vl'Va'l-LJ'a11'1~~€J\l'Vl1 m1'111a\l Lnu H LL'1~m111fil 'Llm1'111a\l u

(2) n1vt'U~1'\J LL uu m1'111a\l-LJ'a11'11 ~L vtm~6'111nu-LJ'a11'1~"il ~'V11 m1'111a'l-LJ'a11'1 u u u u

(3) u'UVifl-V'a11'1~L~tJ1-LJ'a\lnun"ilm111m1'111a\l.LJa11'11~LLri e.J~1Lil'Um11'U/nm zja.LJa11'1'111a\l u u u u

'11L~"il/1.l.l'11L~"il LU'U~'U

(4) ~11"il6'1e:JU~1fle!'UWflQL1oU'U~1\l 1 'Ve:J\l1~UUfl11'111e:J\loLJe:J~'1 (5) ~~ Lnu.LJa11'1~61°11a\lLT'Ll 1 'Ll~a Lnu-LJ'a11'1 l~tJiim1~11~zjau'U~mfiu.LJa11'1LT'Ll1 ~6'11m1'1 LL6'1~\lii\l

u u u

1~uu61la~~Ln{ 1'Ll~ L 1m~6111a\l-LJ'a11'1 LL'1~e.Jfo~~"llau 1 'Llm16111a\l-LJ'a11'1 Ha~1\loU~L"il'U u u u

(6) ~~ Lnu-Va11'1~'111a\l H'Ll a fl6'1'11'U~ 1~tJ ~'Vl1\l1~Vll1\l6'1'11'U~~~ ~ Lnu-LJ'a11'1'111a\l ~m'IA1\l n'U u u

b ~ tJ\l'V'le:J b ~a 1111 ~61\le.J'1m~'VlU~e:JoLJe:J~'1~~~Lnu11'Ua fl6'1'11'U~LT'U b 'U mru~Ln~.A'tJ~U~ nu L 1\l'V'ltJ1U1'111"1l

(7) ~1 L il'Llm1t1 a\ln'U'Vl1\l mtJil1'V'la ~1\l L ~tJ\l'V'la~a6'1m'Ll~61°11a\lffi -U~ ~ Lnu-Va11'1'Ua fl'1m'Ll~ u

( 8) 'Vl~6'1auu'UVi floLJe:J1l'1'111a\la ~1\l6'1l.J1 L6'111e:J b ~e:J~11"il61e!Ul1 ~\lfl\l6'11lJ11'1 L -LJ'1ii\l-LJ'a11'11~~111'\J fl~ u u

( 9) ~ ~'V11.rr'U~ a'LI'lll)u~mvt~u m1n~'U-LJ'a11'1~ Li1 tJvt1 tJ"iJ1 fl-V'a11'1ffi~'111a\l Lnu 11 u u ~

( 1 o) ~11'16'1au LL'1 ~'Vl ~6'1au'\J1~i'1'Vl6il 1'V'l LL'1~'\J1~i'1'Vl6e.J'1'V a\l-LJ''U ~ a'U'\Jl)u1i1 'LI m1 tj'~'Ll-V'a~'1 a ~1\l6'1l.l1

L6'111a a~1\li1atJu'1~ 1 flf\l vt~a~111m111Lvtm~'111L~tJF11-U'lii'lm111L~tJ\l~1\l 1 ~"il~Ln~~'U ( 11) n1vt'U~ 1 ~iim11 "IJ\l1'Ufl11L -V'11vt61-V'a~'1 nu-LJ'a~mi'uffi~cl11a\lLnuH

oil e:i 1 o ;: a\l~ ~'Vl 1 LLe.J'U L~ ~ tJ11fl1111Yl~a11fl1 ruu fl Lo'Ll1'LIfl1ru ~1l.l6111111'1~1 L il'Ll fl11~1tJ15fl11'Vl 1 \l '

fa~fl'Vl1ailfl~ L~a1~'11mw1-U\l1'U6'1116'1'UL'Vll311~m11'\Jfl~a~1\l~m~a~ L~tJ ~ 0 v d QJ oCl 11.d d lJ ~

( 1) :w fl1'rn1vt'Ll ~Vl'Ll1'Vl LLfl~fl11:w"Su e.Jl'l'lleJtJ'lleJ\lc.J'Vl Ln tJ1'VeJ\l'Vl\lvt:w111 u

c:t Q ..J 0 CV ..Jq Q.J I ~ 0 d (2) 11 fl11U1~ bll'Ll fl1111 b6'1 tJ\l6'11'\111U1~UU'Vlllfl11:W6'11flqj b Vl'11'U'U bb'1~ fl1Vl'U~111~1fl11b 'V'le:J'1~fl1111

b~tJ\lbvt6'11LT'Ll L-ll'U 1 ~~u b U'U1~tJ~b1'11'U1°'Ll 1 ~1 VI~ bb~'Ll~'U 1 Vl1 fl11"1lll'Ull'll1~Vl1\lvl1b ml.l611m1m.LJ11111-ti ' '

1,, ofl ,, ':i~UU\l1'U ~ b u'U~'U

(3) ii fl11fl1Vl'U~-rr'Ll~ e:J'U'\J!ju~b 'U fl11tJ~'U1~UU6'1116'1'U b 'Vl\31

(4) lJfl11fl1Vl'U~-rr'U~e:J'U'\J D~b 'Ufl1161°11e:J\loLJe:J11'1 bb'1~'Vl~6'1e:JUfl~'UoLJe:Jll'1~'111a\l 11 ~ '\J \I '\J

(5) lJfl11fl1Vl'U~-da\l'Vl1\lb'Ufl11~~~anu«l~u~n11il1tJ'Ue:Jfl b~'U m~u~fl11bfl~e:J'li1tJ ~1~\1lbL1~ u u

61la~~Ln1 LU'Ll~'U Ldmn~Lvt~'11Lll'LI~"il~r:a\l~~~a '

•

...

(6) nTrn~1~m111~1~'Vlii'n 'V!~e:i 1 '1Xfl1111~bbnb~1V!-U1~~~b~CJ1-LJ'e:i~nu~'U~e:i'Um1tlfiu~ 'V!~e:i ~~~ 'U 'U d.J

~e:i~vi'1 bdmnvi b 'Vl!'l b ~~~1'\J b lJ'U ~'U "!ieJ 11 nm1'Vl'U'V11'U b ~€ltJ-rutJ1~bbr-J'Ub~~CJl.Jfl11l.JYl~e:Jl.Jmruom5'U~~n~111 '!X?t11111citJ-ru1 m~e:i ~1~

' ' bvtl.J1~?t11bb~~?tBvifl~B~num11-U~1'Um11Jl11n"il B~1~-UBCJu~~ 1 fl~~

' ' "liei 12 ~B~n m1ri1'V!'UV1V!-U1V1 bb~ ~fl1111-ru ~ vi"ll€l'U"U€l~'Uflm m~~ vi bb~ -ru ~vi"ll€lu1~uu ?t11?t'U L VJ I'll LL~~ m 1

' 'U

~vivi'1 bbr-J'Ub~ ~CJl.Jfl11l.JYl~€ll.JO n b5'U b 'U mru~1~?t1m1ci~1 b 'W'U m1~1 CJi6V11~~ b~ nV11B'Wn~ '

"liei 13 ~€l~nm1V1vi?t€l'U?tJ11YlYl~€l111-u~1'U"U€l~1~uu?t11?t'Ub 'Vll'll 1~uu'111€l~ bb~ ~1~uu Lbr-.i'U b~~CJ11m111

Yl~€ll.J~m5'U €l~1~-U€lCJu~~ 1 fl~~ vt~€l~111fl1111b'V!m~61l.J 1viCJri'1i1~~~fl11m~CJ~~1~ 1 ~"il~Lnvi~'U b~B 1 'IX

1~uun61Jl1YlYl~€l111-u~1'U€l~ b61l.J€l 'U

' "liei 14 nm1'Vl'U'V11'U1~'U'U611161'Ub 'Vll'll 1~'U'UG'111€l~ bb~~1~'U'U bbr-J'Ub~~CJl.Jfl11l.JYl~€ll.JOnb5'U VJ b Vlci~Yl€l~€l '

---------------------------------------~------

-r~t:ltl'S::~.:il"i' . .

( ) .,J 1 ""' • I "" .J "" ~ ., ~ 1 b 'VfEl Vll.l fl11~11\161e.l'IJ m1:: uW bl.l'Ufl11l.l b61tl\l'1Je.l\l1:::'\J'IJ611'rn'Ub 'Yll31Vl1e.l61'11'U fl11rum'Ufl11l.ll.l'Ufl\l

tlG1 ei~.n t1~1lJ.YfotJ -s:::61.:iri"vi~ei 1lJm\J fl1~fiV11~ (2) b ~eim1tlei.:in'U bbG'l:::G'l V11:::~'\J m1iJ b~t1.:i~m\J\J::: bn~~'U 1~n'IJ1:::'\J'IJ 611161m 'Yl 131

(3) b ~m llmb tJ1'Yl1.:i 1 'Lifn1tlfiu&iVl1mnV1fl11iJ b~t1.:i~ b ll'LI atJ~11t1 ~m:::'IJ'IJ611161'U b '1'1131

bbi.11t1~u~

~1'1..!~ 1 fl1'S~'S1\J~el\Jbb~:::tl1::bil'IJF1111lb~£1.:t ~ 11\I61 ei'IJ bbG'l :::tl 1::: biJ'U m 1iJ b~ t1.:i ~ 1u611161u b 'Yl 131Vl~e.i 61tn'Urn1ru ~ 1 'U fl11iJ~'U fl.:i tJ G1 ei ~ .n t1 ~1lJ ~.:itl 1:::61.:iri"

Vl~el 1lJm\J Fl1~fiV11~ ~el1\J bfiVl~'U n'IJ1:::'\J'\Jb 'Ylfl b ~fa ~611161'\.Jb 'Yll31 b~tl~~11\161el'IJ.f11t11'IJ'1lel-:ib1\l'VW1'\J1'111'1l OJ

1~ (Internal Auditor) Vl~el 1~t1~~11\161el'IJ~611:::~1'Ufl11l.l~'Ufl\IUG'le.J~.ii't1\11n.f11m.rnn (External Auditor) OJ •

e.i~1.:i~eit1lJG'l::: 1 fl~\l b~ei1~'b.:ivrn1'\J1m1'1l151~'Yl11'\Jrl\l1:::~'\Jm1iJb~t1.:ibbG1:::1:::~'\Jm1iJ~'Ufl\ltlG'lei~.nt1 G'l1161m 'Yll311~t1iibb tJ1'Yl1.:i 1 tJm1~11\161ei'IJ bbG1:::tlwbii'Ufl11iJb~t1.:i~~ei.:ifi1t1.:i'1.:i ~.:id ti Q.IOV OCV ,d

'tie! 1 \J~G11~'\Jfl11l.JG'l1flqJ'1Jel\lfl11l.lb61tl\l ,, t.I Qd 0 4 d d

'1Jel 2 A'UVl115fl11~1b'U'Ufl11b~elG'l~fl11l.lb61tl\l ti 4 t.I d II d .i::::i...c:il O .ctr.. d .J

'1Je.J 3 l31n~1'1Jei~'1Jm61t1'1Jei.:i1nm1~1b'U'Ufl11b~e.JG1V1fl11l.lb61t1.:i

ollei 4 611tl~G1-U'm61'Umb 'U:::bbG'l:::bb 'U1'Yl1.:i bbm '1Jb ~eiG'l~ri11iJb~t1.:i~~11\161ei'IJ 1~ • ollel 5 ii fl11~ 11\161el'\JbbG'l:::'t.h::: bii'Ufl11l.l b~tl\l bbG'l::: 1 ~~ V1"1'1111tl\l1'U~~ell.JoLJtl b61'Uelbb 'U:::

ollei 6 iim~1m11tJm1m1\Jtl1:::bii'U1:::'\J'IJ611161'Ub'Yll31 ei~1.:i~eit1 ~.:id ( 1) n1Vl'UV11 ~~~11\161ei'IJ611mwb-U'1'1.:i-U'eiiJG1~~1b ll'U~ei.:i~11\161ei'IJ 1~bb'IJ'IJ~1'U 1~ei~1.:tb~t.11

OJ OJ

(2) 1 'Umru~~1b u'U~ei.:ib-U'1'1.:i-Um.iG11 'Ubb'IJ'IJ~'U 1 1 ~61~1.:iG11b'U1G11,,,fo-U'ei\JG'l,r'U b ~ei1 ~~~11\161ei'IJ1.u' .:i1tJ 11iJ~.:i~ei.:i"l'11mt1Vl~eiG'l'IJ 1~t1~'U'Vi~ 1'111\161eirn611\J ,,,~ei~ ei.:i~Vl bn'IJ 111V1 t1iim1tl ei.:intJei~1.:i~

(3) n1Vl'UV11 ~iirn11:::'\J bbG'l :::~ V16111'Yl-r~ t11 m~~1 b ll'LI1 m 'LI rn1m1\161ei'IJ1:::'\J'IJ'IJ~Vl11~~ rn-s m1iJ • ~'Ufl.:itlG1 eiV1.ii' t1

( 4) n1Vl'UV11~iirn1L~11:::1'.:im1L-U'1'1.:i1:::'\J'IJ1~t1~~11\161eJ'IJ -s1iJ~.:i U'U'Vin-U'eiiJG'l~ eimb61V1\lfl1-Sb-U'1'1.:i OJ . OJ

~ d dlCV ·.J1.1dl dov 'U'U 61l\l11l.1'1\11'UbbG'l::: b1G'l 1'Yl b '1J1'1\l1:::'\J'IJ\l1'U'Yl611fl'lJ 1

(5) 1 tJmru~iiLfl~ei.:i~eiG11Vlfo m1~11\Jtl1:::LiitJ1:::'1J'IJ6111G'l'UL '1'1131 n1Vl'U~ 1 ~Lbt1nrn1&i~~.:ibfl~ei.:i~ei~ 1 m 'U rn1~11\161ei'IJ eiei n\11n1:::'1J'IJ1 ~'IJ~rn1\J ~ .:iVl~ei1:::'\J'IJ~1m'LIrn-s~~'U1 bbG'l:::iirn1~ ~ Ln'Utl e.i.:i n'U

bfl~ei.:i~'El,r'U\J1nn1'n-U'1~.:i1~ t1 hi1~-r'IJ'El'4'lJ1~

•

~bu~ 2 Fl113.JL~a.:i~e:i1lilL uue1u1P111a~e:i1::uuL'VlF11u1~aflTrnm 'Vlfl

'OJ1flfl11~l'l\Pl13.Jm1'0J'1elufl11m~a.:i~1.:i 1 113.Jn.:ib vtVlm1ruv'l1'Um13.J~'Ufl.:i'tl~el\1lna1'U1::uubvifl1 'Ufa~ G'l11G'l'ULVll"l '11m1mLamll'Una~1.:i 11v'l 4 tJ1::L1w1 ~.:id

ol d <V d""' ., ., d"" 'i ""'"" ( ) o ., V d"' u1::bfl'Vl'Vl 1 iltJVlbfll'l'OJ1flb'OJ1'Vf'U1Vl'Vf1elUflmfl1'Vel-!l b Hl"W1'U1~11'1J1f;l Human Error b'll'U b'OJ1'Vf'U1Vl'Vf1el , 'Ul°lmfl1'Vel-!l L 1-!l'WtJ1'U1~11'1l1n 'V1\1lfl113.J1fl113.Jb-U'1 h L 'Ubfl~el-!lijeleltl mruflel3.J~1 b1Plel1 ~-!l~1'U Hardware , " , bb~:: Software ~.:lel1'0Jvl1L ~1::'U'Ub Vl l°l L 'Ufa ~G'l11'1'Ub Vll"l b~tJ'Vf1 tJ 1 i.:i1'UhJ1v'l Lnl'lfl11'1J::r flr'U 'Vf~el'Vf ~\11 v11.:i1'U LL~::~.:i~rn 1ml.JG'l13.J11f;l1i.:i1'U1::uu L vil"l 1'U1~~G'l11'1m vil"11v'lel~1.:i L~3.J'tl1::avi5.n1'W1v'ln1vt'U\11 LL 'U1

O ~ ~ ti d ,.111 .J .J ~ .¥ QI '\" ')" A 11.1 IV 3 Vl1-!lfl11\111b'U'Ufl11b'Uel-!l\Pl'Ub 'Wel~l'lu'lJ'Vf1fl113.JbG'ltJ-!l'Vl'OJ::bfll'l'V'Ufl'U1::'U'Ub Vll°l b 'U b~tJG'l11'1'UbV1131 1 \11-!l'U

(t) ~l'lvt~fl'11P11elu13.Jvt~eli.J1::'1J1'13.J~'Ut5G'l1Vl~rn~1Vli.J1~'Vel.:i 11.:i'\"la1u1~11'1l1n t ~nm13.J1m13.J " "

b-U'1h~1'U Hardware Lb~~ Software Lifei.:i\'l'U b~eJ~l'lfl113.Jb~tJ.:iv'l1'U Human Error L~LJeltJ~'ll'l v111~ b~1'VfLJ 1~nm13.J1fl113.J b-U'1 b 'OJ fl11 bi bb~ ~'U~'Vf11~ \11 fl11 bfl~ ei.:iij eieitl mruvi1.:iv'l1'UG'l11G'l'Ub Vll"l ~.:ivi1.:iv'J1'U

" ' Hardware Lb~:: Software 1v'lni.J1~avi5.n1'W~.:J~'U v111~m13.Jb~a.:i~Lnl'l'OJ1fl Human Error ~l'li.Jeia~.:i

(2) ~l'lv11vttl'.:i~mL~.:iL1a'Uma1'U11.:i'Wa1u1~11'1l1n L~el.:i m11iLL~::m1i.J1::vte!l'l'W~.:i.:i1'U1 ~nULl"l~el.:i l°lel3.J~1 b1Plel1LL~::el'tl mru b ~el b U'Ubb 'U1Vl1-:J'tlf1u~1v'lel~1.:Jf;)fl~el-!l

' d.J "

tl':i::bfl'Vl~ 2 na~ Lnl'l'OJ1fl Software ~'111.:im1m~ tJ'Vf1 tJL ~bbrl bfl~el-!lflel3.J~1 bVI ei1Vl~el1~'U'Ubfl~el~1 tJ

fleJ3.J~1bVJel1tl1::flelUv'l1a b~'1flellJ~1LVJeJ1 (Computer Virus), vt'Uel'U~'UbVJel1Luvi (Internet Worm), ~1

1 Vl1~'U (Trojan Horse), bb~~~1111~G'lvt~elfl~1-!l (Hoax) 'W1fl Software bvt'11dei1'0J1'Ufld'Ufl11vl1.:J1'U LL~:: nei 1 ~Ln\111°1113.JL~ avt1a 1~LLn1::uuLvifl1 'Ufa ~G'l11G'lm vi111 n.:i~'Uv111 ~1::uu Lfl~el~1aflei3.J~1 Lvielfl i.:i1'U 1l.11v'l

1v'ln1vt'Ul'lLL'U1vi1.:ii.J~lliiL~mvi~alJ~u'1m'Um1runa'OJ1fl Software ~.:id ( 1) ~l'l~.:i Firewall ~ Ll°l~el.:Jflel3.J~1 Lviel1 LLl.1~1 a v11vti.J1~1 'U m1n1vt'U\1lavitm1L-U'11i.:i1mfl~el.:i

fleJ3.J~1bVJe:J1LLl-l~1a bb~~ue:i.:in'Ufl11'Ufl1fl'OJ1flil1tJ'Ue:lfl , ' (2) ~l'l~.:J61leli'l~LL 11 Anti-Virus ~fl~u11~'1~L-U'1m1 'Uwurnfl~el~1a LL~~G'l13.J11f;1VJ11'0J'1e:iu1v'l11n

11~G'l'1l'i11'l b\11 L-LJ'13.J1vl1fld13.J b~ tJ'Vf1 tJ tl'U1::'U'U bfl~e:l~1 tJl°lellJ~1 bVlel1

u1::Lfl'Vl~ 3 na'OJ1fl 1 Yl1 vt~ vt~ei 1~uu1 Ylvh ~m ll'Una11mL1.:i~v11m1m~avt1 a1~LLn1~u'Ubvifl1'U1~~ '111G'l'ULvil"l 1v'ln1vt'UmL'U1vi1.:itJ~u1iL~mvi~alJ~u'1m'Um1ru ~.:id

( 1) ~l'l~.:ie:ii.Jmrurl11e:i.:i1 Ylvh (UPS) b ~ell°l1Ufl3.Jfl11~1tJflWbbG'l1 YlVl11 ~tl'U1~U'U bfl~el-!l bbl.1~1tJ b 'U , , fl1Wbfil'lfl1~bbG'l1 i'lYJ1oV1'l-LJ'e:i.:i 1::'U'U bfl~e:l~1tJl°le:llJ~1 bVlel1'0J::G'l13.J11f;l L ~'U~fl111~ 'U1~tJ:: b 1m~G'l13.J1'rn ~l'lbnubb~::rl11el.:i-U'e:i3.J~ 11el~1.:ii.J~ell'lna " .

(2) ~\11~-:Jeltlmrum1'0J~'Ufl1'U fl1W~bfil'lb 'V!Vlfl1'~rum~bb'11 i'JYJ1oV'1'l-LJ'el.:J'Vl~elnfl1'U1 i'l Lfil'l~'Uil1 a1 'U , ' ~el .:JU Bu~ fl11 bf)~ eJ~1 ti fl e:l3.J~1bVIe:i1 ~'\J m ru~-:i fl ci 11 'OJ~~ -:i ~ t1! t1! 1 ru bb ~ -:i b~ eJ'U~ VltJ'l tJ ~ fl~1m1lJ'\J ~el l'ln CJ

' ' b We:l'VI 11'U bb~ ~~'U b-U'1m1~fo b 'Vf Vlu fl b~'Ue:l ~ 1-:JVJ'U vl1-:iVi 6'11-:in m1m1 'OJ'1e:JU fl113.J'W1e:J3.J'V e:l-!l e:l'U mrumh-:i G'll.11 ' , , bG'llJe:l

(3) ~\11~-:Jel'tlmru~UL 'W~-:i'1l'i11'ln1'1l ~~e:i.:itlfiu~ fl1'Hl°l~e:i~1tiflel3.J~1 Lvie:i1L ~el 11l m 'Ufl1Wb vtvium~'U , d.J , ,

(t i'l1 VI~) Ll'lan fl11Vl11 'OJG'leJUfl113.J'W1e:JlJ'Vel.:Jeltl mru bb~~Vll'l~el\I 1 i.:i1'U L\11 tJ'1tl1 bG'llJel ,

U"a:: bfl'Vl~ 4 nmnmlwhlJ (ervinn tJ) f111lJL~tJ.:1~8fl11lJ b~tl'V!1tl'11 ntl1vhlJ ~l'l L U'UntJ~1tJLL ";i.:l~vl1fn 1lJ ' L~tiV11ti 1 ~LLn1~uu b 'Vlfl 1'W1'1~?11"a?1'Ub 'Vli3! 1~n1'V!'Ul'lbL 'U1'Vl1.:itJl)u~L ~m~~tilJ-ruG1mm1ru ~.:id

( 1) L~1';i~1.:in tJ eJ'ULOl'l'11ntl1vhlJ Ll'l ti&il'l mlJ'11n'\flj tJ1 mru81 n1i3!'1Jel.:Jn"JlJ B~'WtilJ1'Vl tl1~" 81'1b1m ' '

(2) '181'1L'VltJ Backup ·ifo~"~.:i'V!lJl'l 1tJLnu11l'W~tJ"81'lnti (3) ~1L'Ll'Um1~1'11~uu1 'V'1~11 'U~8.:itJl)WinT'Hfl~8"1l1tifl8lJoW1b~8{ Ll'ltilll'lLtJ1mn81~LMm.LJ'8.:i b~8

ifo.:in'U8tJmruL~timti Lb"~'l18.:in'Unti'11n1'V'l~1 '

( 4) L~1V1u1~'1l1 tinmfl~8'UfJ1mfl~8.:ifl8lJ'W1 b~81mJ~1ti bL"~8tJmruLfl~8"1l1ti 111 'W~?l.:i ' ~

(5) n1rutl1" l'l" .:i b~ ti tJ ~ 8tiLbil11~'Ii1.:i 1'V'I~1~11'1G18tJ 1 ::u u1'V'I~11'U~8.:1tJl)u&in11bfl~8~1 ti flBlJoW1 b~81 11 G'!1lJ11'11-ii'.:i1'U 1~tJ n&i'V!~8 hJ LL":: b~~tllJfl11lJ'Vj~8lJ~8.:!Ul)u&i n11 bfl~8~1 tJ fl8lJoW1L~81

?11'V!-rtJ &) l'l~.:I bfl~8.:!fl8lJoW1 b~8{ bbl.J~1 tJ bL" ~8U n1oJbfl~8~1tJ '

( 6) v11m1&1 l'l~.:i bfl~8.:i fl8lJoW1L~8{bbl.l~1 ti bb"~ ~tJ m rubfl~8~1 ti Vj~8lJ~.:J'Vll'l?f 8tJ m11-ii'.:i1mm.:i bfl~8.:i fl 8lJoW1b~81 bbl.1"111 tlbb~" ~ Lfl~8.:Jl1?!1lJ11'11.Uu~m11~ mlJtJ n&i'V!~81l.l ~ 11'1?18tJ1~uu Network 11

G'!1lJ11'1b zj8lJ~8bb"~ 1~tJ~n11tltJbfl~8.:Jfl8lJoW1L~81'1n~1tJ1~'V!~81l.l ~

(7) bd8m1 '1?!8tJLLil111bfl~8.:ifl8lJoW1b~81 bbl.1~1tibb"~1~uu bfl~8~1tJG'!1lJ11'11 ~u ~m1.LJ 8lJ'11~ ~

al 1J 1J "1" I .,j.,j 1J d 1J 1""' 1" al"' b1tJtJ18tlbbm bb'1.:J 'V!'V!'U1tJ.:11'U'VlbntJ1"1J8.:J'V111tJ b'VjeJL"1J1lJ1 "UtJ1n1";i l'lmlJun~

•

1~titlca::~Mrl • ·b ~e:Jn1VIUV!lJ1~"afl1"51 U fl1"aflTUfllJ m~~Ue:J\ltlUfl11-rm!}1fl11lJ~Ufl\ltl'1e:JV!JlV1 Ufl11 b .LJ'11 oU'l1UVl~e:J b oLJ1n\l~U~ • 1 i'l1u1::tJtJa11am 'Vlf'll LV1V~'111ru1~1llm1l!6111°1ru"1Je:i\le:i'\.Jmru 1::tJrn 'VlA 1 u fava11am 'Vlf'll .LJ'e:ilJ'1 zj'liJ~'1

v ' ~

U'll°l'U 1-tlti'tJrn oU\11Ubb'1~11lln\l'Uflfl'1 bb'1::V1i.11 tJ\11Ufl1tJUe:Jf1~iJ~1mM v1.LJ'e:i'1t1'1.J fl111 oU'l1U1~'U'U b 'Vlfl 1 u L'1V ~ ,

'111'1UL'Vlf'l1"1Je:J\l L 1\l'VW1'\J1'111'111~

LL U1tl~ ml II d J/ cJ1 lJ I d~ ~ .J ~ .Q 4'

'lle:J 1 e:J1fl11 '1fl1U'Vl bb'1::Vm'Vl '1J\11U1::'U'U'111'1UL'Vlf'll VllJ1Vfl11lJ11 'Vl61!\lbtlU'Vl~\l"lJ€l\11::'\J'Ufl€llJVnL~€l1 ... I ... d JI .J .. ... ... d .. ' • I ' JI .J. I"' .....

1::'U'ULfl1€l"lJ1 V Vl1€l1::'U'IJ'111'1Ub 'Vlf'l1€lU 1 'WU'Vl b~1 VlJ"lJ€l~'1'1VI bf1'U fl€llJ'W1 b\?1 €11 bb'1 ::~ u mru 'WU'Vl u!J'Ul'l\11U

"1J€l\l'U 1°1'11 f11'Vl1\I fl€llJ~1 b1?1€l{ 11lJ~\I bA~€l\lfl€llJ~1 bl'l e:i{~1U'U flA'1 bb'1:: e:i'\.J mru'\.J1~f1eJ'U~~ Vl~\IU 1::'111~:: 'Vl1 , . , \11U

<ile:i 2 ~e:i\ltJl)mirn1LA~e:i-tl1vfle:ilJ~1L1?1e:i{ ~e:i'liJ~n'l!l'ru:: ~\Id ( 1) n1VIUVJ b UUb "lJ\?1~1\1~1lJL~Vl"lJ1Vl vl~m "lJ\?1Vl1\1~1lJ b\l'W1:: 1vi V~'111ill1~1lJfl11lJ6111"1 t1J bb~1 bb~ mru

(2) ~eJ\lbUU~U~~1il~\leJVL U'U~L1ru~iJrn1~1UboU1 - e:ie:in "lJ€l\l'UAA'1Lllu'11u1UlJ1f1 ~ .

(3) '1~~eJ\l LiliJu1 VVl~eJirfl I~ f1'1!l'ru~u\l'UeJ nn\I rn1iJ1::tJtJ6111"lrue:i~fl1v1 'Ll'1fl1'U~~\I f1~11 ·~ v ~

( 4) '1~~eJ\IUVJ~ eJ f1 Vl~eJ 1~ nru LL '1U1::1?1V1i!1~1\IV1~€l~eJ\I b'1llmil eJ hJiJ L-.il1V1i!1~'\.J1::'11e:i~ , iu \I 'll

(5) Vl1f1'11LUU~€l\11 oULfl~€l\l L 'Vl1'111Vl~mfl~eJ\lci1me:ina111 ~~Vl~\ILLVf1 eJeJf1lJ1'11f1'U~nru~\lf1~11 (6) 1ile:i'Uru11?11 ~ci1v1'\.JV1~e:iu'UVinm'WLA~e:i'Ll1 V111utJ~L1ru~\ln~11 LUUeJ'U"lJ1VJ , v ~

(7) ~vi~'U~611V1-r'U m1~\lll€l'U~~1?1.ilrueVi 1viv LLVf1'11f1tJ~nru~iJ'Vl-r'W v1ma11am 'Vlf'll~vi~'l11 L ~e:i UeJ\I tlUfl11L -U1n\11::'U'U'11f1ml!1~fo e:iuru11?1

~ , v

<ile:i 3 fl1101VIUVJ'U~nru~~eJ\liJrn1-rn'l!l-1fl11lJ~Ufl\IU'1eJV!JlV ( 1) iJrn1'11LL 'Uf1Lb'1~ n1Vl'UVJ~'U~"lJeJ\11::tJL 'VlA 1'Ll L'1V'111'1'UL 'Vlf'l1~1\I 1 €1~1\I b Vlm::am ~e:i~vi'\.J1~'1\lrl

1 Ufl11 L~11::f \I fld'U fill m1-rn'l!l-1 fl11ll~U fl\IU'1eJ V!Jl V '11 ner~1iJ1~-r'U eJ'U tu11'1 11ll~\IU€l\I tl'U A11ll L~ VVl1V , 'll , u

~u 1 ~m'1Lnvi~'Ll1~ (2) n1V1'UV1Lb'1~LL u\ILrnntJ~L1'U~um.u\11'U1::tJrn 'VlA 1'Ll1'1 va116'fm 'Vlf'l11 ~-lrviL'1u 11lJ~\l~viv11LL~u~\I

bb?f Vl\1~1 bb VIU\l"lJeJ\l~'Um oU\11'U bb'1::'\.J1::rn1311 ~-r'U'Vl11'U~1 nu 1viv fl11n1Vl'UVJ~'U~~\I f1~11 eJ1'1 bb U\I e:ie:i n 1~ b U'U

~'U~'Vl1\11'U~11'\.J (General Working Area) ~U~vl1\11'U"lJeJ\l~~LL'11~'U'U (System Administrator

Area) ~'U~~vi~'l~'\.Jmru1~tJ'UL 'VlA 1 u L'1V'111'1'WL'Vll31 (IT Equipment Area) ~'U~~viLntJoLJ'e:i~'1AeJll~1Ll'le:i1 (Data Storage Area) LL'1::~'LlffioU\11'ULfl~e:i-tl1vHa1v (Wireless LAN Coverage Area) LU'U~U

II "' .J 'lleJ 4 fl11A1'U~llfl11b "lJ1eJeJf1 eJ1A11'1'11'U'Vl

( 1) n1Vl'UVJ~'Vl~0 inu iJ~'Vl~~1uL -U1 - e:ie:in LLG'l::od1\I L 1'11~i1~'Vl~1 'Um1~1'UL .LJ'1e:ie:in 1 ULLl'1'1:: "~'LI~ 1oU'l1U1::'\J'U" eJ~1\l-IJVJL'1'U

(2) rn1L-U'1n\leJ1fl11"1J€l\1131UVfle:Jll~1bl'le:JTI 1\l'WtJ1'U1'111'111~ "1JeJ\l'Uflfl'1fl1V'UeJf1 Vl~eJ~ll~~vi~e:i b"5'1V1 ~ , ~

'1::~e:i'l1~iJm1LL'1num~1.U1~tJ~11?1'U"1JeJ\l'UAA'1,r'U 6') L"liu u1?11'\.J1~'1J1'1Jt.11ue:i'Urn11?1-LJuzj LUU~'U LL~1v\'1 , , I ,v~

fl11'1\luuVinu 1'111 'Ll'1lJVJU'LIVin LL'1 ::-rtJ LL tJtJvJe:i{lJ rn1L -U1e:ie:i n'W~e.Jll ti'uu 1?11~~vi ~e:i (Visitor) . ~

(3) 1~i1fl11U'UVif11'WLL'1::b1'11fl11LoU1 - f)f)f) ~'U~6111°lru"1JeJ\ler~lJ1~Vl~eJ v ~

( 4) ~m~~~e:i~e:i\l~~rum 1 ~b i1'LIL~'U-ti~~L'le:i~wtJ:::b 1m~e:i~mtJ 1 'LI'Vli.11 tJ\11'U ~ ~

(s) u~~viltl~-ru nTr-h~1\l~e:i\l~~u ~11 ~b ~'Ub~'U-u~ ~'1 e:i~1::: tJ::: b 1'11rn1v\'1\11'U ~

(6) ~~Lnuu'UVinm1L-ll1 - e:ie:in ~1'\Jl-ruv1''LI~'V!~e:iu~L1ru~i1ri11lJ6'11rl'~ L"li'LI Data Center Lll'U~'U d 11"1 1 ., d "" o ~I b'V'le:J "IJ b 'Uf111m1'1?1e:J'lJ 'U.fl1tJ'\Jl'1\lblJe:JlJA11lJ'11b u'U

(7) ~ bbL'l ~~lJ1~ ~~e:i 1'LI~'U~'V!~e:iu~L1 ru~i1m1lJ~1rl'ru'1'Un1:::vl'\I b6'1~'1i'U.fl11n'1Lb'1:::'11n1 tJ b ~e:i ~ ~ .,

\1e:i\ln'U rn1~ ~'\Jl1 ~'llti\lvi-r'V'l ~~'LI'\Jl~e:i\1e:i\I n'LI rn1 L-D'1fi'lvi1\I rntJm'V'l 1~ tJ 1lJ1~-rue:i'4 ~1~ (8) iln'11nm~e:i'Uru1~ m1L-D'1fi\l~'U~'V!~e:iu~b 1ru~ilm1lJG11~n 1'1Je:J\IUAA'1.fl1tJ'Utin bbL'l:::~e:i\lil b 'Vl~e-JL'l

" u g~ , q

~b ~tJ\l'V'lti 1 'Lifl11b .LJ1fi'lu~b 1ru~\ln~11 (9) ?1¥1\lm1lJ~1:::'V!tl'n 1 ~~~m~~~e:i'11 n.fl1tJ'Uti m .LJ1 hn{] Lnrueri'V!~e:i-LJ'e:i f11'Vl'U~~1\I 1 ~~eMtllju~

1:::'Vl11\l~ti tJb 'U~'U~'V!~e:iu~b 1 ru~ilm1lJ~1rl' ru ~ ., .

( 10) ilf111fld'lJAlJfl11 b oU1fi\l~'U~~i1oUtilJ'1~1~ ru~ ~ bn'lJ'Vl~e:J°LlWlJdL'le-1'1 ti~ , cu QJ ClJ

(11) 1lJe:i'4~1~1~0lJiln'1L-D'11tl1'LI~'LI~'Vl~e:iu~nru~ilm1lJG'!1~~b1''LILL~1~-rum1e:i'4~1~ (12) ilm1~?1'1tl~1~'U b-d'LI rn11ium1~ rn11i1~?1~1'U Lll'LI~'U L~tifl1UAlJfl11b-LJ'1 - e:ie:in 1'LI~'U~

~ ~ . .di! Q dai1 0 Q.I

'\Jl'Je:J'lJ'Jb 1n.!VllJA11lJG'l1fl~

( 13) ~~ 1 ~ii fl11~ bbL'l bbL'l :::b~11:::1\I fl11°LlljU~\11'U'1JtJ\1'4flA'1.fl1tJ'Ue:Jf11'LI'1Jru:::~'\Jlju~\11'U1 'LI~'U~'\Jl~e:J Q d.c:i1 0 Q.I

'lJ)b1UJVllJfl11lJG'l1fl ~

( 14) ~~ 1 ~ilrn1viuvi1'U 'Vl~titJrn~n~viBrn1b-b'1fi\l~'U~'V!~e:iu~nru~ilm1lJ'11~~ e:i~1\lutitJlJ'1::: 1 ., fl-r\I

.Uei s 'J:::uubb'1:::~tlmru?1tl'u?1'4'Ufl11vl1\11'U (Supporting Utilities)

(1) il1~'lJ'lJ?IU'lJ6'l'U'Ufl1)vl1\11'U'1JtJ\IW'lJ'lJ b Vlfl 1'LI LL'l ~?111G'l'U b V1131'1Je:J\l L )\l'\"l tJ1'lJ1'111"1J1~ ~ b ~tJ\l'V'leJ~ tJ • m1lJ(;)e:i\lrn11 i'l1'U L~tJi11:::uu ~\l~ei 1 tJd

- 'J:::uu'111ei\lm:::bb?IL ~Vl1 (UPS)

- bA~ti\ln1L'Ll~m:::LL?11~Vl16'111ti\I (Generator)

- 'J:::uu1:::u1tJe:i1rn121

- 'J:::uutJ-rumrn121 LLL'l:::f11UfJlJfl11lJ~'U (2) 1 ~ii rn1~11'1?1tiu'Vl~tivi~?1e:iu1:::uu?1tl'u?1'Um 'Vl~1,!'U e:i ~1\lue:i tJllL'l::: 1 fl~\I b ~e:i 1 ~~'LI1'11~11 •

'J:::'lJ'lJvl1\11'U~1lJ°Ll n~ bLL'l:::L'l ~fl11lJ b~ tJ\1'11f1 fl11~lJ b '\Jl'111 'U fl11vl1\11'U'1JtJ\l'J:::'lJ'lJ

(3) ~ ~ ~\11:::uu bL 4'1 b~ ti'LI b ~ e:i Lb4\I b~ ti'LI n1ru~1:::uu?1tl'u?1'4'LI n11v11\11'U.fl1 tJ1 'U~ti\ltllju~ n11

LA~e:J~1 tJ fl e:JlJ~1 b~ ti {v\'1\l 1'Uf:l ~tJ f1 ~'\JI~ e:J'\Jl tJ ~ fl11vl1\11'U • .Uei 6 fl11L~'U?l1tJ1~ ?11tJ~ti6'111 bL'1:::6'11mriLDL'l~'U 1 (Cabling Security)

(1) 'V!~ n L~tJ\ln11L~'U6'11ti'1'~~1ruLfl~ei~1ti"1leJ\l L 1\l'V'ltJ1'U1'111'111~ 1 'LI~ n~ru:::~~ei\1~1'UL .U11 tJ1 'LI

u~ b 1ru~ilufl A'1.fl1tJ'UeJ m .LJ1fi'l 1~ • (2) 1 ~ilrn1¥eitJv1e:i?11tJ'1'~~1ru~1\I 1 b~tiDeJ\ltl'Ufl11~n~u'1'~~1ru 'V!~e:irn1~~?11tJ'1'~~1rub ~e:iv\'1

1 ~bn~m1lJb~tJ'\Jl1tJ

(3) 1 ~b~'U?11tJ'1'ruru1ru~ei?111bb'1:::?11tJ1 ~vhLbtJne:itin'11nn'LI L ~e:i\1e:i\ln'Ufl11bbV11nLL61.f\I 1Uf11'U'1Jti-:i .,., ' IV CfV QJ

?1~~1ru61.f-:1n'UbLL'l:::n'U

( 4) v\'1\11tlzjtl~1'\Jl-ru ?11 tJ "'ru ru1 ru bbL'l :::'lJ'U e:itl f1) rub~ e:i\1 €)\I tl'U fl1) ~ ~ ~ ei '1' ru ru1 rur:l ~ b~'U QJ v , QJ QJ

(5) ~~v11~-:1?11tJ'1'~~1ru~e:i6'111~1-:i 11 ~ri1u'11'U~n~ei-:i

..

(6) ~8-:i~i16'11CJ6"i;yi;y1ru~86'111~1-:i 1 ti~ 16i6'f~fl 1 ~6'filVl b ~8u8-:in'Um1L-U'1~-:i61m-:i'4f"lf"l'1mCJ'U8fl (7) 'W'111ru11-U-:i1'U6'f 1CJ1~L'IJ8 fa 8~ ~fl LL Vl'U6'f 1tJ61 i;y i;y1ru~86'f11 LL 'U'Ub~:u L "li'U 6'11 tJ6" i;yi;y1 ru LL 'IJ 'IJ

' Coaxial Cable 6'11vt-r'IJ1t'IJ'IJ6'1116'f'Ub Vll31Virl1Fi'i;y

(8) ~ 1 L U'U m1rl111'11t'IJ'IJ 6'11tJ61 i;y i;y1ru~86'111~-:ivt:u~ L ~8 m1'1vt1m1~ ~ ~ -:i~tJ m cl ~fl~'IJ6" i;y i;y1ru

1~mn~u1t6'1-:il°l~ v

-lleJ 7 rn1u11-:i-rmn~tJmru (Equipment Maintenance)

( 1) 1 ~i1m1n1vt'U~m1u11-:i-rmn8tJmrul'nm8'1J1ttJt n'11~Lb 'Ut'l111~mri:.1~191 ' ' v

(2) tJn~1911:ur11Lb 'Ut'U11 'Um1u11-:i-rm~11911:u~eri:.1~\9lbb 'Ut'l11 d.J ' v

(3) ~~bfl'UU'UVifln'1m1:um1u11-:i-rm~n8tJ mrurl1vt-r'IJ m11 ~'IJ~fl11Vl flf"l~-:i b ~81oUl'Ufl111911T'il6'f8'1J ' , ' V!~8U1t Lii'U b 'U.fl1 tJvt~-:i

) ., ~ ., "" ."'\ V I • I ,.,J .,j 1111 • I "> • I"' o I o I '

(4 '1~bfl'U'IJ'UVlfluf;UV!1bb'1t61J8'1JflV'l18-:i61J8-:i8umruVJV'l'IJ b V'l8 '1J b'Uf\11u1tb:U'Ubb'1tu1'1J u1-:i8 umru " .. , , ~-:ifl~11

(5) fn'IJ f"l:U bb'1 t6'18 ~618-:i ~ bb'1 m1tJnu~-:i1'U61J8-:i m ~'IJ~fl11.fl1 tJ'U8 fl~:U1vl1fl11tJ11-:i-rfl'l!t18U mcl ' v d.J v ' '

mtJ1'U11-:iYltJ1'1J1'111'1l1~

(6) ~~ 1 ~i1m18'UWi~VJBm1L .U1~-:i8tJmcl~i1-U'8m1rl1Fi'ru 1~tJer-ru~'1-:i 1 ~'IJ~m1'11fl.fl1tJ'Ue:ifl (~:u1vi'1 , , \I QI '\I

fl11'1J11-:i-rm.~ne:itJ mru) b ~m'fo-:i n'Uf\11b.U1~-:i.U8:U'11~ tJ 1~1vW'U8'Uf111191 't 'I \I CID~

olla 8 rn1L11Vl-rV'l~~'U61J8-:i 11-:iV'ltJ1'1J1'111'1J1~ ernnmlfl 11-:iV'ltJ1'1J1'111'1J1~ (Removal of Property)

( 1) 1~nm161J8e:i'Uru1\9ln8'Utl1e:itJmclvt~e:iVl-rV'l~~'U~'U8e:ifl1tJ1-U-:i1'U'U8fl11-:iV'lm'IJ1'111'1J1~ , ., ' (2) n1vt'U~erfo~~'1Je:i'IJ1 'Uf\11bf01~8'UcJ1tJvt~8tl1e:itJmru8e:i n'11fl 11-:iV'ltJ1'1J1'111'1J1~ v ,

(3) n1vt'U~1ttJtL 1'1161J8-:im1L11e:itJmrue:i8fl 1tJ1-U-:i1'U'Ue:in11-:iV'ltJ1'1J1m1'1J1~ '

(4) b~8i1n11'l118tJ n1cl6i-:ifi'U 1 ~\9111'16'fe:J'UrJ16'f e:J~f"l~8-:in'IJ1ttJt b1'11~8'Utu1\9l bb\;'lt\9111'16'18'\J f\11 ' ' ., -U11~L~tJvt1tJ61J8-:i8tJmcl~1tJ

' ' (5) u'UVifl-Umrnm1L11e:itJmru61J8-:i 11-:iV'ltJ1'1J1'111'1l1~e:i8n 1tJ1-li-:i1'U'U8n11-:iV'ltJ1'1J1'111'1Ji~L~me:i111

v '

b ll'Uvt~ flrti1'UUB-:i n'U f\116'1 f;UV!1 tJ 11:u~-:iu'UVinoLJ8:U'1b ~:u b~:U Li18'U18Umru6i-:ifi'U . dA " " '\I ,

olla 9 m1tle:i-:in'U~tJmruffi-U-:i1'U8~'U8flh-:iV'ltJ1'1J1'111'1l1~ (Security of Equipment off-premises)

(1) n1vt'U ~:u11911 m1f"l11:utJ'1 e:i ~ntJ L ~e:itl e:i-:i n'Wf"l11:u L~ tJ-:i'11 fl n11'l11e:itJ fl1ruvt~e:iVl-rYl ~~'U6lle:i-:i '

h-:iV'ltJ1'1J1'111'1J1~e:ie:in 1 tJ1-U-:i1'U L"li'U m161J'U6i-:i m1bn~e:i~Lvt\9ln'IJ8umcl ' ' '

(2) 1~~-:i~tJmruvt~8Vl-rV'l~~'U61Je:i-:i 11-:iV'ltJ1'1J1'111'1J1m 11~tJ~T1~-:i1 'U~6'11011rut ( 3) b ~ 1V!tl1~ijfn1:u-r'IJ ~ ~'1J e:J'IJ ~ bb'1 ~tJ m ruvt~e:iVl-rV'l ~ ~'Ub6'f lj e:J'U b tJ 'U Vl-rV'l ~ ~'U61J e:i-:i \9l'U b e:i-:i

~eJ 10 m1n1~~8tJn1ruvt~8fl11'l11e:itJfl1run~'IJ:u11-U-:i1'UBflf"l~-:i (Secure Disposal or Re-use of ' '

Equipment)

( 1) 1~vi'1'11tJ-U8:u'1rl1Fi'ru1 'Ue:itJmrun8'U~'1tn1~~8tJmcl~-:ifl~11 \I " , ,

(2) i1m!911fl11vt~8 L Vlf"lil f"l b 'U n11'1'1Jvt~8 L ~ tJ'UoLJ8:U'1VJ'IJ'IJ'UoLJ 8:U'1~i1 f0111mh A' rub 'U8tJ mcl~1vt-r'IJ '\I \I " ,

~~bifo-Ve:i:u'1 n8'U~'1t8'U f;U1\9l b ~er~'UL11e:itJ mru~'Ub tJ1-U-:i1'U~8 L ~e:itl8-:i n'Ub:UL ~nm1b .LJ1fi-:i.Ue:i:u'16'11Fltu~'U \I , " \I , \I "

1~

.., ti ' ')~q 'a::~.:JI°)

b ~Br\' 1'Vl'W Vll.J 1 l'l 'H11'ab'\..!fl1''JU e:i.:i tl'W fl1'Stl m fl bb'1 ~ fl1'j L "ill.J ~ 'Vl~B b 'VII'\ fl1 'Sru'1 ~ biJ Vl fl11l.Jtl '1 B l?ln tJ 'mt! tJ q q q

61T'J61m 'VIP11 iXi1m1l.J~'WA.:itJ'1 e:il?ln ti

bbu1t1~u~

-lfv 1 'a::tJtJtle:i.:in'W~llmfl 'U q q

(1) ~1bil'Wfl1'Sm1"il61Btl Log File 'Vl~B'S1tJ.:J1'W"lJB.:J'S~tltJUB.:Jtl'Wfl1'atlmfl ~.:i~vi1fl1'Sl'l'S1"il61Blli1 ,, q q

vi'.:i~e:i1tJ\1

- i1m'S l"i!l.J~mfliJe:i m ~ ti.:i 11?1 bb'1~ b ll'W m1 L "ill.J~tl'S~ bfl'VI Ll?ll.J1fl~61 l?l • q

., '1 ..,,,J.,. ~"".I .d 1""'1' - '1fl~ru~"UB.:Jfl1'S ~"ill.Jl'l'Vlbfll?l"ll'Wl.J'Subbtltl'Vl611l.J11'1fl11?lbl?l1 l?l'Vl'SB lJ 'U

- 1~vi'tJfl11l.J'S\.!bb 1.:il.J1fliJe:im ~ti.:i11?1 q

- 'Vll.J1tlb'1"ll1B~"llB.:Jbfl~B~1tJ~bll'Wm"ill.J~ 'U

v 1 ' ' "l.lel 2 Wtltl ~'S1B'1'1

(1) ~1bil'Wfl1'Sl'l11"il1~tlt!UB.:Jtl'Wfl11llfl'Sfl e:i~1.:iiJe:im~B'W'1~ 1 fl~.:J q q

(2) ~1bil'Wfl1'Sm1"il61BtJU'WYifl"UB.:J Log File bb'1~11tJ.:J1'W"1JB.:J1 ~{1e:i'1~ ~,:i~{;]e:i.:il'\11"il61BtJi1vi'.:i~e:i hJd - Packet ~1 ~{1B'1'11~V11fl1'S Block

' - '1fl~ru~"UB.:J Packet Vinfl Block

'U

(3) fl'HU I'\ n "ii Vltl fl1'S h lJ ~ 'S~lltl'VI~ B b 'VII'\ fl11ru'1 ~ biJl?lfl11l.Jtl '1 B l?l n ti 'S ~ tJ t1611161'W b 'VI ?lb 'IX bb~.:J q

~rl1'W1tim1 b~e:i~l?l~'W 1"il~1 b il'Wm1bbm "UiJruvi1 'U v

-lfv 3 1~tltlUB.:Jtl'WntJ~flfl1l.J'V11.:JB\.!bl'\B{bijl'J 'Vl~B~'1bb1{ U1~flBtl~1tJ 11~61 'Vl'WB'WB\.!bl'JB{btJl'l L'Vl'S~'W 11l.Jfi.:im .. hmb1{

( 1) ~1 b il'Wfl1'Sl'l'S1"il'1Btl Loo File bb'1~'S1tJ.:J1'W"lJB.:JBtJmru~bMti1-Ue:i.:intJ'S~tltJUB.:Jtl'WJltJflflfl1l.J'Vl1.:J ::> q q

A G~ .c:!dSJ £!IQJJ( B'Wbl'lB'Sb 'WI'\ 61.:J'Vll'\B..:Jl'l'S1"il'1Btll.Jl?l.:J'W

- ~'1bb1{tJ'S:: bfl'VI 1V1nfl'Vlrn ll'W~1'\.J1'Wl.J1fl 'U

- ~'1bbd{nfl~.:il.J1"i11mA~e:i~1ti11?1 bb'1::nfl~.:i1 t1~.:iffi1?1 'U 'U

- i1m'S~.:J~'1bbd{"i11mfl~e:i~1tifl1ti 1'W11.:i'Vlti1tJ1'1'S1"1li~ 1 tJ ~.:imti'We:invi~e:i hJ (2) ~ fl~1'Vl1iifom "lJ bfl~B.:JflBl.Ji'11 bl'JB{~~Vl~'1bb1{ Ll?l tJ bu'Vl1~~~ bb 1{th~ bfl'Vl~l'l 11"il'Vlll11 fl"J~'OJ1tl

e:iti1'Wbfl~B~1tJ6lJB.:JL1.:J'Vltl1tl1'111"1li~ 'U

(3) 'Vl1fll'l'S1"il61Btl'Vltl'J 1bfl~B.:JflBl.Ji'J1 bl'JB{fl1 tlb 'Wbfl~B~1 tl~Vl~~ bb 1{ 'Vl~B~.:J~'1bb1{e:ie:i fl 1 tJ-LJ'1.:J'W B fl

{;)e:i.:i1~~tl fl1'S b zjBl.J~ B"UB.:J bfl~B.:J~~Vl~'1bb1{fi'tJ Wtltl bfl~B~1 tJ bb~1vi1 fl1'S bbm "lJ bfl~B.:J,r'W~'WVi

•

•

1"1'1tl-a::~-:ifi' • (1) b~B61~1.:im1l.l~fn1l.Jb-LJ'11"il 1'Wm11-U'·H~UU611161'Ub'Vl\31bbfl:mmuflBl.l'W1b\9lBTI~bbricTI.U.:i1'U6lJB.:i

v v

11.:iYW1'U1fl11"1l1~

(2) b ~B 1~f11'S1 oU.:i1'U'H::'U'U611161'U b 'VlPl bbfl:::1:::'U'Uf1Bl.l'W1 b~B{ bfi~ fl11l.J~'U fl.:itlf! B~Jl CJ

(3) b ~au a.:i n'U bbfl :::fl ~m 1 m:::vh m1l.l~ ~~ Lfi~~'W"il1nm11.U1:::uu611161'U b 'Vl Pl Lrn:::1:::uu flBl.l'W1b\>la11 ~CJ hJ m~f\~

u'U1tl!ju~

-VB 1 ~~1~iim1'Vlu'Vl1'W u-rutl1.:i'U1CJu1mbfl:::bb'U1tlnu111~blJ'W\J"il"ilU'Uaclb61l.la acJ1.:i-U'aCJtJf!::: i fl~.:i , d.J " "

-VB 2 ~~tlnau1l.Jbb'U1LJnu~\911l.Jbb 'U1'W 1CJu1CJacl1.:i61~1b61l.Ja 1~CJm1~~tlnau1l.l 1~CJ1 -tl1lim·a61~m ~e;ivn Lb 'U1tlnllill'l1l.lbb'W1'W 1CJu1CJ b-U1nuvt~n~\911au1l.J~1.:i 1 \911l.Jbbt:.J'Um1tlnau1l.16lla.:i 11.:ivm1u1m1"1l1~

-VB 3 ~ ~'1l.ll.l'W1 b ~mt:.J mL vrfo 1CJu1 mm::: Lb 'U1LJnu~1 'U m1-rm~nm1l.l~'Ufl.:i'lJfla~il CJ ~1'U611161'U b 'VlPl bbfl:::

61~1.:im1l.ll'l 1:::vn:r n fi.:i A11l.J6{1~t1J6lla.:im1LJ nu~1~nu~fl"'1 m 1~ CJ n 11~ ~ G1'l.ll.l'U1ii bbt:.J'W nT~~1 b iJ'U.:i1'U tJ"':::

1lJ-U'aCJ n11 1 fl~.:i 1~ CJ"il:::~~~1l.J nu m-a'1l.ll.l'U1~ LM CJ1-LJ'a.:inu~1'U b 'Vlfl 1 'U fav611161m 'VlPi bbfl:::ii m1b :Ut1J

l'V1CJ1m"il1nm CJ'Uan~ii'lJ1:::61u m1ru~1'Um1-rmnfl11l.l~'Ufl.:i'lJf! a~il CJ~1'U611161'Ub 'Vl Pimci1 CJVI a~ m1l.lf

.UeJ 4 ~~'lJwmPi'lJ1:::"1l1'1l.l~'U51 ~m1l.lf b~CJ1nubb'U1LJnllil 1 'W~n~ru:::bn~~fl11l.lf vt~a-Um:::1.:i1'W~'lJbb uu

~611l.11w L-LJ'11"il bbfl:::tl11 LJLJnu111~~1 CJ 1~CJii m1LJ-ru b LJ~ CJ'Ubn~~m1l.lf atj b61l.Ja

-liB s w~l.lm1ii~1'U~1l.lbbfl:::fl.:i~n1fl'lJ~llil~1CJm1n1nu ~~ml.l LJ1:::bi3'Ut:.Jfl bbfl:::6{111"ilf111l.ll9i'a.:im16lla.:i

cTI.U.:i1'U v II 1""" ,, ., .J ., 'i'LJ ~ 'LJ .. .,. .,j 1" v ,, ,J.,. ,, "1

6ll'il 6 'Vfl.lm16111.:im1l.lm:::vt'UrnnCJ1nub 1bbn1l.lbl.l 1:::61.:if.l~ bVrn 'Vfb"il1'Vf'U1'Vll.lfl11l.11fl11m6ll1 "ilbbfl::: v

611m1'1ua.:i n'Ul'l'U rn.:i 1~ bbfl::: 1 ~-ru'Vl11u~'U\9l a'ULJnu~ Ldm~u b 'Vf~ 1LJ1Lbml.l1lJLJ1:::61.:i 1"1~11191 a.:i~1biJ'Um1 acl1.:ih

oUB 7 61~1.:im1l.l~fl11l.lb-LJ'1h1 ~bbricTI .U.:i1'U1 ~\911:::'Vf'W'nfi.:ib 'Vf\9lm1ru~1'Um1l.l~'Ufl.:i'lJfla~Ji'CJ~bfi~~'U bbfl::: v v •

61m'Um1ru~1'Wm1l.l~'U fl.:i'lJf!a~il CJ~1lJYi.:i'lJ1:::61.:iri''Vf~a 1lJa1"ilf11~f\ ~ b ~a 1 ~0 .U.:i1'U'lJflU~ \911l.l'U 1CJu1 CJ

bbfl:::bb 'U"J'lJ~oo 'U m1-Sn~1 m1l.l~'Ufl.:itlf!a~il CJ6lla.:i 11.:ivm1u1f! 11"1115

-liB 8 rrt i.:i1'U\9i'ei.:im:::vt'W'rnbfl:::'lJ5llil\911l.ln~'Vfl.11CJ1~ 1 ~1~tl1:::mP11 m 'UDWb 'V1Plb 'V1CJ11l.l~.:in~1::: bDCJ'U6lleN

11.:ivrn1u1f!11"1l1~ Lrn:::-Ua\9lnfl.:i1:::vt11.:i'lJ1::: b 'V1Piacl1.:i bfl~.:ifl-r~ ~.:id'Vf1neJl .U.:i1'U1lJLJnu~ml.Jn~'Vfm CJ

~.:in~11 ~a11f111l.l~mrmu'Ufl11l.J~~~1'Uuflflflzj.:im.u.:i1'U"il:::l9i'a.:i-r'U~~"1la'U~afl11l.J~~~bn~~'Uba.:i , v

1~CttJ'j::a.:il'1 . .

L ~f.ln1vi'U1?1V1-U1~m1~~u~ 1?1'1Jf.l'IJ'1Jf.l.:ieru~vi111~~u61.:i era1'U'.rn m1 ~,vi-u1 L~1V1-U1~ ~"'f.l\?1'1'Uer~1~~u 'IJ 'IJ 'IJ 'IJ

~f.l'UVl~1 t:J L Vt\?1 LL"'~'IJ ~ \?1'1Jf.l'IJ~1'U611161'UL 'Vll31 'IJ

u intll]u~ ifo 1 1::~uu 1au1a er~u~\?1'1Jf.l'IJ t~LLri

'IJ

- ~B1'U1t:Jf111 (CEO)

- eru~Vl11L 'Vlf1 L 'Ufa ~611161'UL 'Vll311~~'U61.:i ( CIO) 'IJ 'IJ

- era1'U'dt:Jf111c'.J1m 'Vlf1Uf1 LL"'~1mm1~ 'Vl~m vit:Jrn vhw~uera1'U11'.lf111c'.J1t:J 'IJ 'IJ

(1) ~'IJ~l?1'1lf.l'IJL 'Uf111fl1Vl'Ul?1'U Lt:J'IJ1t:J 1 Vf.LJ'm61'UmL'U~ 1°11tJ~m~n (J)"'f.ll?1'1'U~l?1t?11~ n1nu1?1LL"' f11'Uf1~ 'IJ '

(J))'J'161f.l'UL ~1V1-LI'1ffi 'U1~~'1JtJ 5llil

(2) ~'U~\?1'1Jf.l'U~f.lfl11m~t:J.:i fl11~L~t:J'V111'.J Vl~'e)eJ'Ut?l111'.J~Ln\?1~'Ufl1ruW'U'IJf1'e)~~1L~f.l{'V!~'e).v'e)~"' • 'IJ

611161'UL'Vll31Ln1?1m1~L~CJV11CJ 'Vl~f.leJ''Um1CJ11?1 "' LLriB.:il°lmvi~f.ler'Vl~.:im1?1eJ''UL~f.l.:im'11flm1~ufl'V'l~f.l.:i "'~L(;lCJ I 'II 'II

Vl~f.lc'.J1tl'U m1tlijllil(J)1~LL 'U'd'U Lt:J'U1CJ LL"~ LL 'U1tliju~L 'U fl11~fl~i f111~~'Uf1.:itl"1f.ll?1.A' CJ~1'U611161'UL 'Vl 131

oUeJ 2 'j::~'U'U~'Vf1'j er~'U~\?1'1Jf.l'IJ b~LLri ~1V1'!J1'11'U.:i1'UL'Vlf1 fo fa~611161'UL 'Vll31 Vl~f.l LVlCJ'U L vl1~1'Vl'!J1'11'U.:J1'U 'IJ

. (1) ~u~\?1'1Jf.l'U n1nu ~LrnflT~tJ5u~.:i1'U'lJf.J.:i~tJ5u~ (?l(;l'e)\?1'1'U~fl~1 'Vl'U'Vl1'U 11.:1LL(;J'U~1?1t?l1~m1

'U~Vl11f111~L~ t:J.:J LL(;l ~1~'1J'U~fl~1f111~U"1f.ll?1.A' CJ ~1'U.LJ'f.l~(;l LL(;l ~ L 'Vlf1 L 'U L"1 ~611161'U L 'Vll31 ... 'IJ

(2) fo~l?1'1lf.l'UL 'Ufl11f11'Uf1~ 1?1LL"1 ~fl~1f111~tl"1f.ll?1.A'CJ 1~'U'U611161'UL'V1131LL"1~1~'U'U~1'U.LJ'f.l~"1 q '\I ... '\I

oUeJ 3 'j::~utJnu~ er~'U~\?1'1Jf.l'U b~LLri er~1~fo~f.l'UVlmt:JL~tJfiu~'V!'!J1~'11flera1'U11'.Jf111 L"li'U tl'fl1'1J1fl11 d..I '\I '\I ~ '\I

f1f.l~~1Lt?lf.l{ L~1'Wtl'rn1'ULf1~f.l.:Jf1f.l~~1 Lt?lf.l{ Yltl'fl.:i1'UL'Vlf1 L 'U fa~611161'UL'Vll31 ( 1) uiju~t?l1~'U 1t:Ju1 t:J LL"~ LL 'U1tJijllil1'Um1~fl~11"111~~'U f1.:itl"' f.11?1.A' t:J~1'U611161'UL 'Vll31

(2) tJ 1~611'U m1tliju~ .:i 1'U ('11~ LLi;J'UU f.l.:J tl'ULL"1 ~ LLm 'lJU '1J'Vl11~'U'Um1~~'U f1.:itl"1f.l1?1.A' t:J'llf.l.:i~1'U .LJ f.l ~"1 LL"1~611161'UL 'Vl\31'11 fl61'11'U f111nJf111~ 1lJ LL U'Uf.l'ULL(;l ~.n CJ~llil

(3) ~'IJ~\?1'1Jf.l'Ufn'Uf1~ \?1LL"1 ~fl~1fl11~U"1f.ll?1.A'CJ LL"1~tJ11.:i~fl~1 1~'U'ULf1~'e:J.:if1f.l~~1L(J)f.l~ 1~'\J'U ' 'IJ '

Lf1~f.l'll1CJ Vtf.J.:itlij'IJ&l f111 Lf1~f.l'll1 CJ f1f.l~i11 L(J) f.l{

(4) v\'1m1'111B.:i.LJ'f.l~"'LL"1~L~tlfl~'UoVf.l~"1 (Backµp and Recovery) m~1f.l'U1~t:J~L1"'1~fl1Vl'U\?1 (S) U f.J.:i n'U fl11fl fl L '11~1 ~'IJ'U LL"1 ~ LLm 'lJU ruV11 f111fl fl L '11 ~ L .LJ'1w'U'U ~1'U.LJ'f.l~"' '11 fl'U f1 f1"1 f11 CJ'U f.l fl

'\I u '\I ""' '\I q

(Hacker) L\?1CJL~1~~'1Jf.l'l~t1J1t?l

(6) fo~1?1'1!Bu 1 'Um1~fl~11"111~tl"'B1?1.A't:J 1~uu~'UL(J)f.l{dl\91 (7) tJ5llil.:i1'U~'U 1 m~~1~fo~f.l'UV1~1 t:J L 'U m1~fl~1m1~~'Uf1.:itl"1f.l1?1.A' CJ~1'U611161'UL 'Vl?i

.. •

1VlcitJ-a::fl.:iFi' • b~eJ 1 m ':i'1\"l81'U11;l':i1"1l1~ i1LL 'l.J1'V11-:16'11Vl-r'Ufl1':ifl1'Ufl3Jfl1':i~~'l.J1 fl1':i~~Vl1 bb1;l:rn1':i&i~~-:l':i~'U'U-:!1'1.Jb ~eJ • L\9l1 v3..1Yi~e:i3J m':ii.1161m':i1.U.:11'1.J ':i13J~-:iu~V11':i~ ~ m':imrul1 m':iL tJ~ vmL tl1;1-:i':i:::uu-:i1mL1;1 ~ 'Vl'U'V11'1.J m,.

'IJ

vi1-:i1'1.J61le:i-:i,.~uu-:i 1'1.J 1'1Xl1fl113..1Yi~e:i3..11-U-:11'1.J e:i tj L613..I e:i 1~ v LL '1.J1tl~u&id 1il ~n~(;lu-:ifi'u 1-U nu ~-ru ~~"ll e:iu 611 ':i

611':i61m 'Vll31bb(;l~~~LMv1-LJ'e:i-:i61Je:i-:i 1 ':i-:1Yiv1u11;l':i1"1l1~ 'IJ

Lb'W1'1.J~~

eif a 1 ~-ru~ ~"lleJ'U611':i61'1.JL 'Vll31~e:i-:if11u fl3Jfl1':i~~'W1Vl~B~ ~V11':i~uu-:i1'1.J L ~e:i 1 '\X,.~uu~1Jll1fl113..1lf 'l.J fl-:! 'IJ •

tlmi~.nmv;v-:iYie:i ~-:id (1) ':i:::'4-LJ'e:in1V1'1.J~Jl1'1.Jfl113Jlf'Wfl'1tl~e:i~.tlv (Security Requirements) •1m-:i':i:::uu-:i1'1.J~'1:::~~V11Vl~B

~~'l.J1e:i~1-:iL ll'W1;11 v'1 fl~ruB'fl~':i -LJ'e:i n1V1'1.J~~-:ifl~11m':ifl':iBUfl~3..ltl':i~ L~'W611fi'ry~1-:i 1 1'113..ILL 'W1tl~u&i1 'W

fl1':imufl3J m':iL .LJ1~.,:i bb(;l~m,. 1-U.,:i1'1.J611':i61'1.J L 'V1131 • (2) ~~'U1V1~e:i~ ~V11':i~uu-:i1'1.J 1 '!XG'le:i~fl~e:i-:im3..1-LJ'e:i mV1'1.J~Jl1'1.J fl113..1lf 'l.Jfl-:itl1;1e:i~.nv1 'l.J.LJ'e:i~ LL~1 (3) ~~'l.J1V1~e:i~ ~V11,.~uu-:i1m ~e:i 1 '!Xl1wu1'1 m'11V1-ru ~~ LL1;1V1~e:i~~~'W1,.~uu L ~ e:ivi1m':iu'WVi fl

'IJ 'IJ 'IJ

bu~ V'Ubb u1;1-:i bbm 61] Vl~e:icie:i~cie:i'l.J~'VlG61Je:i-:i0-U-:i1'1.J 1Jl

( 4) n1V1'1.J~ 1 '!Xl1 m':i~ ~vi1 LL~'l.J m':i'V1~61e:iu,.~uu 111 L61'1.Je:i LL~'l.J~-:i fl~11 L ~ff~'11':iru1 e:i'Wm\1~ v~l1eJ'1'1.J 1'1 • 'IJ

~1L il'Llm':i'V1~61e:iummL~'U., u'WVifl~(;lfl1':i'V1~61e:iu Lbi;l~':i1v-:i1'1.J~(;lfl1':i'V1~61e:iu 1 'IX~l1m'W1'11Jlfo'Vl':i1rn ~e:i 1 'IX

ri1LL 'W~i.111 'U m':itffutl~ -:1V1~€mm "1l ~1-:i 1 \9l13Jm13..1'11 L ll'W LL~'W fl1':i'V1~61e:iu~~ ~vi1e:i ~1-:ii1e:ivtlw fl e:iuJ11 v - bb~'Wfl1':i'V1~61B'U UAT (User Acceptance Test)

- bb~'Ufl1':i'V1~61eJ'U System Integration Test

- bb~'Wfl1':i'V1~61eJ'UoLJB fl1V1'1.J~J11'1.Jfl113..llf 'Wfl-:!'\.J1;1eJ~.ti' v (Security Test)

(5) ~~~'W1':i~uu~e:i-:ii11L61'WmL~'Wfl1':i'V1~61eJ'U UAT 1~ve:i~1.,:iiJe:iv1'1XLL61~-:iLlJ'WV1'111ileJ ~1-:i I ~'1~vi1 fl1':i'V1~61eJ'U bbi;l ~oLJeJ3J(;l ~1eJ~1-:1~'1~ 1 m 'lJ fl1':i'V1~61eJ'U nu'Vli11'1 eJ b Vl~1,r'l.J ~-:JoLJeJ3J(;l~f11~11wuu'1~vi1-:i 1'1.J

'IJ 'IJ

e:i~1-:i ci fl~e:i.,:i LL(;l~~f11~11,.~uu1il~ LL61~.,:i-LJ'e:i~ ~Yim~ 1 'W m':i'V11-:i1'1.J 'IJ ...

( 6) 1lJe:i'l.Jru1\9l m':ii11-LJ'e:i3..11;1611fi'ru61Je:i-:1V1tl1 v-:i1'U L "li'W .LJ'e:i3..11;1'1u -LJ'e:i3..l1;16'11'1.Ju flfl(;l .LJ'e:i3..11;11i.fl1v1 'WL vi1tl''l.J , QI '\J QI " " , '\J

1 tJ1 m 'Wfl1':i'V1~61e:iu nu,.~urn1'UL ~m'.1 e:i-:i n'l.J m':i~11 V11;161le:i-:i-LJ'e:i3..1(;1 L 1'W L~ v LLl'l1Jl-ru m':ie:i'Wmi'11fl~u-:ifi'uu ru"1!1 " , " QI

':i~~'U61-:J neJ'l.J bbi;l~Vl1flb U'l.J 1tJ1Jl1 'IX~ ~oLJeJ3..1(;1'11'1.J~ b U'l.Jfl113..1'1'U Vl~eJoLJeJ3..1(;16'11'1.J'Uflfl(;l~'11 tJ 1 'IXL Vl~Bbu\"l1~ 'IJ 'IJ 'IJ '

611'1.J~b v;v.,,Yie:i~e:im,.1111 tl1 -ut 'Ufl1':i'V1~61e:iu eif a 2 mvV1'1-:i'11n~':i~uu-:i1'1.J~~'l.J1 L61~'1 LL~1 Lbi;l~Yl~B3J&i~~.,, 1 "1X~1LU'Ufl1':ifl1'Ufl3Jfl1':i&i~~-:i':i~'U'U1;1-:J1 tlET-:i • Lfl~e:i.,:i LLlJ~1v1 '!Xu~fl1':i':i~uu-:i1'1.J ~-:id (LL 'l.J1tli)llii611V1-rum':i&i~~-:i':i~uu)

( 1) n1V1'1.J~ Lb~'Wfl1':i~ ~~-:i~1V1-ru,.:::uu ':i13J~-:i bb ~-:i 1'IX~~bMm-LJ'e:i-:i1Jlfo'V1':i1une:i'W~1-:iV1iJ11'W':i:::v:::L1m 'IJ

~'l.J1'Uby;8-:l\"le:J b"ll'W bb~'l.Jfl1':i&i~~'1eJT~~bb11 6ileJvJ~bb11 bb(;l~~'l.J I (2) n1V1'U~ 1 '!XbuYi1~~~ bb1;l':i:::'UuV1~eJ~~1Jl-ru3..1e:iuV1mv~l1m13..1"ll'1'1.J1ru L vi1i!'l.J ~'1~L ll'W~~1 L U'Wfl1':i

'IJ'IJ 'IJ u 'IJ • ., &i~~-:i

(3) l 'Un 'HU~ b tl 'LI m 1~l?l~.:i1~'\J'Ub ~ eJ 'V1 l?l bb 'Vl'U1~'\J 'lM1'U b~il 1~v]1 m1'111 eJ.:JoLJ eJ1l"1 ~ '11 b tl'U b-d'U \I

\i1'U-LJ'mm 61leJvl~ bn{ 1"11!01eJ'Uyj nm 1-U''U 'Vl~eJ~'U "' ~ bMv1-LJ'eJ-:1 n'\J1~'\J'\J.:J1'Ui!'U V11nm1~1?l~.:iv1111l'11L ~'1 '1~ d.I \I '\I I

1J1'111l11f;)f;)eJ V'Vli;r.:J f)i;r'\J 1tJ1oU1~'\J'\J-:11'Ub~1J1J1

( 4) l 'U mru~i1m1ii'11 L tl'Ur;l eJ.:J bb U"1.:JoLJeJ1J"1l'U1~'\J'\J.:J1'UL~1J1 tl6'1-LJ'eJiJ"1'\J'U1~'\J'\J.:J1'U~'1~vl1f111~\?l~.:J \I \I \I

1 ~n1V1'Ul?l LL~'Um1d1 v LB'U'Vl~mb tl"1-:1-UBii'1'11nw'U'U-:11'UL~ii 1tl6'lw'U'U-:11'U1 'Vlll ci1v1B'UoLJBiJ'1(;11iJ Lb~ 'U., \I \I "

I ., ~ ., d I ., d"' I 1 ~. I ::: "' ., ., "" ~ I

Lb'1~111lf1'\J~ b 'll.:J1'Ub 'l"leJ(;l11'1'1eJ'\J11"l.leJ1l'1'V11lf111mV eJ'U b u'U'U:IJfl11:1Jf;)f)(;leJ.:Jbb'1~1°11'\Jm'U'Vl1eJ bil " " "

(5) n1'Vl'U\?l~'U~'Vl~eJ'\J~b 1 ru~'1~vl1f111~\?l~.:J1~'\J'\J~lJl°1111J~'UA.:JU'1 eJl?ln V'V11.:J f11 Wl1'1"l L ~ V.:J'l"leJ

(6) A1'U1 ru bb'1~(;111'1'1eJ'Utl~mrum1iir;leJ-:1 m11 im~ bL'11 vJY11 bb'1~ bA~eJ.:J'111eJ.:J 1vlvh1 ~b ~ V.:J'l"leJ n'\J .,

1°111:1.J(;l eJ.:J f)11"1JeJ-:11~'\J'\J

(7) tJ fiu~ (;11iifii1B'Vl~m eJ n'111~ LM v1-LJ'eJ-:1 n'\J m1~ (1) ~.:i61leJvJ l'hn 1'U'U1~'\J'\J b oU'U fii1Bm1~ l?l~.:i b i'U d.J " "

L6/i{vJ bdeJ{ fiiJeJ f111~ \?l~.:J1~'\J'\J'\J~'Vl1'S~l?l f111\i1'UoLJeJ:IJ"1 b tl'U r;l'U ' '\I d.I \I

(8) ~ 1Lii'Un11~(1)~.:i1tl1Lbn1 ii LL m "l.1-d B .:i 1'VI1"I.IB.:i61l B vl l'1Lb11~1-:i 1 1'U1 ~ '\J '\J (L -d 'U 61l B vl l'1Lb11

-1~'\J'Utl f1u~m1 1~'\J'\J'\J~V111~l?lm1\i1'U-LJ'Bii'1) ~"l.leJeJ'Ul!~ m1~\?l~-:1b ~eJt1-r'\Jt11.:i'Vl~eJ Lbm "ll 1 ~1~'U'Ui1 m1:1J d..J d.I \I , ,

'11l'\J 1 ru bb'1 ~~'U A-:! tJ "1 eJ \?l n V " '

(9) m1'1'1eJ'\J bL'1~Ul?l'l"leJ{\;1~1.:J 1 '\J'U1~'\J'U~11JiJm1ii':il1Ltl'Ul 'Uf111l oU-:!1'U

(1 O) n1V1'Ul?l 1 ~i1m1~.:iiK'Y'Y1ru'U1Wf11"l.leJ-:!1~'\J'\J~1.:i 1 "l.leJ.:JV1tl1v-:11'U 1 ~~nr;leJ-:1LL"1~m.:imiin'11 :IJ1{;11\i1'U'11 f1'1 eJ ~ L'11leJ

dJI " vv v

( 11) f111l oU.:J1'U 1 U1LLmiivVi~~tl''U m oU-:!1'U'1~r;leJ.:J"l.leJeJ'UlJ~rleJ'Uf)11~1?ll'i'.:Jbb'1~ l oU-:!1'U 1 U1bLf11:1J~.:J f)~11 " " .

11ii~-:1'11 nl?l~~1J1-r'UeJ'Uru1(;1lmoU.:J1'U1 tl1 Lbf111J vVi~ ~,r'Ubb'1~'1~r;lm~l?l~.:J 1 tl1 bbf111l~11l"1~ biJl?l~"l.l~Vlt"l.leJ.:J \I , " \I

er~~\;11 tl1LLmiiiT'Ll " ' ,, '

( 12) '11V1-r'\J61leJvJl'1LL1fl 'U1~'\J'UVi'1~vr1 m1~l?ll'l.:itl1~ L.n'VlvJ~ bb 1{V1~B bb 'll1LL11m1'1'1B'\J nB'LlVi'1 ~vr1 m1

~l?l~.:i11'11ii11f;'l 1i-:11'U1J1J11m~B'U1"l.leJ~11'\J1.:i Lb'1~'1~r;leJ.:i 111 L tl'U m1"1 ~ LiJl?l~"l.l~'Vlt"l.leJ.:J ~ ~~(;161JeJvJl'1 Ln1'1'Ll "

( 13) (;111'1'1B'\J bL"1~~\?l~-:11~'\J'\JDB-:1n'U11-r'1'11V1-r'\J1~'\J'U~v11m1~\?l~-:1 ( 14) ~11'1'1B'\JLb'1~'1'UU'Y~lr~1 i.:i1'U1 'UW'\J'U~1ii1J1i1m11 i.:i1'U zj-:111iii1.:iu'Y"lir~1 i.:i1'U~1.:i 1 ~i1mn'\J

' v

61leJvll'1 Ln1mJ1-r'U L V1~1tl''U

( 15) n1'Vl'U\?l 1~lJf)11~\?lbfl'\J61leJ{'111°ll?lbb"1~1'1'U11~'11'Vl-r'\J61leJvl~bb 1{"1.1eJ.:J1~'\J'\J.:J1'U 11l 'U'1m'U~~i1A11:1J tl'1 eJl?ln v bb'1~'11nl?l f)11b.LJ'15-:i L\?lV~~ LM V1oLJeJ.:J b vhi!'U

'\J

( 16) n1V1'U l?l15L~vnL1 eJ {off 'U "I.I B.:J61lB1'111°1(1)LL"~1'1 'U11~'11V1-r'\J61lBvl l'1bL11"1.IB .:i 1~'\J'\J .:i 1'U briBi1 m1

L tl~ V'UbL tl"1.:i61leJ1'111°ll?l'Vl~eJ 1'1'U11~ '1~r;leJ.:i b tl~ V'ULL tl'1.:i L 1B{off'U1 ~~nr;l eJ.:J(;l1ii15m1~n1V1'Ul?l 11

( 17) '11nl?lm1L zjeJ1l~eJ'V11.:JbA~eJ-111m ~eJeJ'Uru1(;1 l ~Lu'l"l1~f1~:1.lm i-:11'U~LMv1-LJ'eJ-:1 L vhi!'U ~-:!'1~'11lJ11f;) , CV q \I

L zjeJ:IJ~eJ bL'1~~ eJ f1B'UL .LJ16'11~'\J'\J~'V11f111~\?l~.:J,!'U1J1 " .,

ifo 3 l 'Uf111"l.lm tl~ V'Ubb U"1.:J1~'\J'\J-:11'Ufl1V'Vli;r.:J'11f1~1J1i1 f)11~1?ll'i'.:J bb'1~ 1oU1~'\J'\J.:J1'U1 Ubb~1 n1'Vl'U\?l 1 ~iJ f)11 QJQ. d QJ 3 Q. QJQ. 0 QJ ..J tJ

"l.leJeJ\~:IJ(;l f111L tl'1 V'U bb U"1.:J1~'\J'\J.:J1'U (11.:J'U (bb 'U1U£]'\J\;1'1J'Vl'UJ f)11bU'1 V'ULbU"1-:11~'\J'\J.:J1'U\;111Jl°1111J(;leJ.:Jf)11

"l.leJ.:imi-:11'U)

( 1) n1V1'Ul?l 1 ~iJm1v11u"UVin-LJ'Bm1:1Jb ~eJ"l.leJeJ'LlWi btl~ V'UbbU"1-:!1~'\J'\J-:!1'U b-d'U "I.Im ~1l11V-:!1'U l 'Ll1~'\J'\J • b ~:IJ~.:Jnoff'Uf111vl1-:11'U b tl'Ur;l'U bl?lV~1'U~U.:J~'\JUru'll1 l 'U'11V.:J1'Ub ~eJ~'111ru1eJ'LlWi

'\J ., •

... • I"" • Id • I • Id • I I I (2) 'l"llil11ru1u11J1ruf111b u'1V'Ubb u'1.:J ~'1f1W'V1'\J"l.leJ.:Jf111b u'1V'Ubb u'1.:J 1°1111lb 1-:im'Ll 1°1111lb 'Vll.l1~'1:1J

bL'1~f111i~1v1 'Ll m1~1 L u'U m1

(3) a'4W11'rnJ~~ewua vnm~'U6"f:wri11 (4) '1~nJ1:::"11:wntJ~~a~6llm ~a11tJ11:wm1:wl'i'a~rn1~1'U1:::tJtJ~1'U 1~EJf!::: bBEJ~ bLf!:::6"f1uri11:wl'i'a~rn1

' v ' ,, Vl~'\lt:W~

(5) L~:wl'i''U~~'U11:::tJtJ~1'U1J11:wm1:wl'i'a~rn1~1~fo SI 0 1 """ 0 1 I "' .., .,J"" Q I .,I Q I "lleJ 4 fl1'\lt'U~ '\lt:Wfl11'Vl'\J'Vl'd'Ufl11'Vl1~1'U6lleN1:::'\J'\J~1'U 'U1:::'\lt'd1~'\lt1e.J.f11 EJ'\ltf!~"il1 O'Vl:Wfl11 b uf! EJ'U Lb uf!~

al.i:::i,Q..,l.Q. Q.JJ/( ·0.1.ci.cv.c:i. Q.I CV .Jq 1:::tJtJu!]tJl'lfl116lleJ~1:::'\JtJ~1'U~~'U LL'Y?vfl'\J1'1'11'Vt1'\J01'rntJ'Vl1'Y01'rn1~1').J'IJeN'J:::tJtJ~1').J.fl1EJ'Vt'fWil10'Vl:W

01wJSv'UmJf!~'J:::tJtJ\Ji)tJ1ifl1'J'IJ'eN'J:::tJtJ~1y) ( 1) uiJu9i1J11:w bb tJ1uiJu9i'11'Vt~tJrn1L u~ EJ'Ubb uf!~1:::'\J'\J b ~e.i'IJe.ie.i'4l!91 bu~ EJ'Ubb uf!~1:::tJtJul]u9i 011

'IJeJ~W'\J'\J~1'U

(2) n1'\lt'U~ bb~'U ~1 b U'U fl11b u~ EJ'Ubb Uf!~1:::'\JtJUljtJ1i fl11'1Je.l~1:::'\J'\J~1'Uzj~1?:Wfi~ bb~'Ufl11'Vl~6"f e.J'\J

(3) u1:::a1tJ~1'Ubb~~1 ~m.u~1mLf!:::~~ b~EJ1-Ue.i~ 1~~'\J'V111tJL~EJ1 ntJ bb~'U~1 b utJrn1L tJ~EJ'Ubb uM, v v

L ~e.i 1 ~tJflflf! L 'Vt~1tYtJ L oLJ'111:w 011V1 ~6"f e.itJ1:::tJtJ~1'U L ~ e.i~111:::tJtJ Lbf! :::-U e.i:wf!'11m1t11-U ~1'Y 1~ e.i ~1~ t1 ol'i' e.i~ LLf!::: ' v v v

6"f:W\j1tU'\lt~e.J t~ ( 4) Lu~ EJ'U Lb \Jf!~1:::tJtJm:w bb~'U~1 b iJ'U rn1 bu~ EJ'Ubb uf!~, (5) 'V1~6"f e.J'\J'j:::'IJ'IJ11:wntJrrt .U~1'U\Jl 1:W bb~'U 011'V1~6"f e.J'\J~ n1'\lt'U ~ 11 "il'Um:::~~l1'Y 1"il111:::'\J'\J~1'U6"f1:1.J11 ti

o 1" o SI a' .,j ~I 'Vl1~1'U ~e.JEJ1~tlO\Jle.J~bbf!:::6"f:W'\J1nJIJ11:W'Vll°l?1"il:::b u'U v v

( 6) ~1 b iJ'U rn19i~~~tJtJ1:::tJtJ"il~~ 1~EJuljllii m:w Lb tJ1ul]lliia1'Vt~tJrn19i ~~~1:::tJtJfil~ n1'\lttJ~ 11

., ti ~ 1\il~ 1::~..:ifll

1) b~e:iAl'l6'!1'.i'W'IJrn1'U~l?l1.:in'Um111~eNrn1 mrnb ~e:i 1 ~'WUfN1'Ub .LJ'11'1 L 'Uvti11~bb'1~m111-r'U~l'l'IJB'U

2) b ~e:i 1 ~'W'IJn.:i1mb'1~~~v11'1ryry1~1-:il?l'rnvt'Ll n bb'1 ~tllJu~ \il111vti11~A1111-r'U ~l'l'IJB'U~1'Um111~'Ufll\I

tl'1 e:Jl'lfi tl6'!1'.i6'f'UL VI Pl"Ue:J\l\il'Ube:J\I

3) b ~e:i 1 ~tJrn~ nvt~e:i b tJ~ CJ'U bb tJ'1.:i~VI6n'U b ~1vt'11~ vt~e:i b ~1vt'11~'11 nvti11 CJ\11'U.fl1 CJ'U e:i n~ '1 ntJ rn~ nvt~e:i '\J

ltJ~ CJ'Ubb tl'1.:inT~~1.:i.:i1'U b ~e:i-rm~n 11~.:ifll1111~'UA.:itJ'1e:il'l.tl CJ6'!116'f'U b VIPi

U'l..!1U~U~

oifv 1 .Uvn1V1'1.J~n1'.i\il'.i11il~vubbfl::eJ1..:i~..:iu~.;'VI

1) VI'Ulil l'l'Vl~ b utJ'U~-ei.:ihJiJe:itJn11~e:itJ'1~ 20 "1Je:i.:i1.:iL~'U~1.:i 1 ~L ll'LI 1 tJm111~L utJu6'!1-U'n'U1tJn., '

2) tJ1~1~111 tl'1~ LatJl'l/tJ1~ L.flVI ~e:i.:i L ll'U'U~,;'vi~ ~1 L il'Unlil fl1'.i\?l'.i\I n'\JtJ'.i~ L.flVl"1Je:i.:i.:i1'U~e:i1~1.:i 3) 1~e:i~L 'U'.i~vt11\lfl1'.i~lil1'.ifiJ1A~L ~Lll'U~~\l\11'U Vi~m ll'U~~\l\11'U vt~mll'U~m~v11~1'l'Vl1\I

\I \I \I \I

4) ~\IV!~f1Ji1'U fl1'.iVl\916'ff)'\J\?l'U"1JeJ\l'\J~,;'VI ~~n~eJ\l\?111Jf1~vtmtJ L~tldn'\Jbe:Jf16'!1'.i~Al'1Gi1L'U1'11f1 ~1'U'.i1'1Jfl1'.i 1~tJ'1 f)1J Lb D'1\I Lf)f16'f1'.i

5) tJ1~~rn1v11.:i1'U vt~e:i tm.:i1'UV11.:i'U~,;'vi L 'U6'!1CJ.:i1'U~l?l1.:in'Urn111~1.:il?l111~n1vt'Ul'l 6) L ~LLG'll'l\lt.J'1\11'U~LAm lJ'U~tJ'.i~~f1~61Jf)\l'\J~,;'VI V!~f:JV!1f11~m ~bLG'll'l\lt.J'1\11'U"1JeJ\l'\Jl°ll°l'1 m~

' L lJ'U~-r'\J~ l'l'IJf:J'\J"1JeJ\l\11'U~1\I 11'1tl'\J1°1'11 mtT'U ~f:J\lvl1\11'Ulil'ULG'f ~lili'U\11'U~1\I

'\J '

7) VI~ ntJ'.i~n'Ufl'.l11JL~tJV!1tl\?111J'.i~LDtl'\J6'!1Uf1'U1tlf1., 11~1 tl~?f\91 '

8) ~e:i.:i1~LlJ'U'U~,;'V1"1J1tJ°1i1'1 V!~f)~e:J°1l1\I fl1'.i~1\l/~eJ oif e:i 2 -if v n1V1'1.J~n1'.ilil'.i11il~v'U6llv..:i'4fllfl1n'.iVi~vVi11.:11'U~lil::L-li1111tl~~..:i1ut\.!11.:ivm1u1ft'.i1"lf1 ~

1) 1~~'\J1 ~rn1fin'l'11e:i~1.:iiJe:itJ tJ~ryry1\?l~ 1 'U6'!161J1~\?11.:in'U.:i1'U~~1.:i LL'1~tJ1~~rn1fin'l'11 2) 1 'U-r'U1e:i.:ivt~e:itJ1~rnPii1tJul?l'.i 61Jv\IVilN1'U/'UAA'1

' 3) tJ1~~rn1v11.:i1'U Lb'1~tJ1~6'!'\Jrn1rurn1vi1.:i1'U

4) .LJ'm.J'1vt~n~1'ULLG'fl'l\1~1\?l'U"1leJ\IVi11.:i1'U/'Ul°ll°l'1 L°1i'UumtJ'.i~'IJ1'1J'Uvt~e:iLe:in6'!111~'\J~1'\Jl°lA'1 \J ~ , , '1

" "" .f1 d. I ., ' ., • I " 5) \?leN1Jt.i'1\11'UL u'UVlu1~1ilf1'l'1 \?l'.i\lf1'\JuWb.flVl\11'Ulil1\I

oUv 3 n1'.i~1.(l.(11'1.J~1'1..!n1'.ioW~'l..!1'.i::'U'U~1'.i~'Wb'VIA

l) lJ Lbt.J'U'l1'U b 'U fl1'.i~1 b 'Ll'tNTU bb'1~'l11 b?l'Ue:J~ ell°! ru~ n'.i'.il.J fl1'.i

2) iin1'.ibb~\l~\ll°lru~m111rn1LtJl'l61leJ\l/l?l'.i1'1-r'U/l°lru~n1111rn1TOR 3) ii11 tl\11'Ut.J'1 fl1'.ifif1'l'11'.i~'\J'\J L~1JLL'1~1°1111J~ eJ\lfl1'.i0-ff .:i1'U

4) iirn'ji.11 LG'f'U f)t.J'1 fl1'.i1 Ll°l'.i1~~'.i~'\J'\J LL'1 ~fl1'.if)f) n Lb '\J'\J

5) 1 'Urn1~~'U11~'\J'\J ~e:i.:i~~v111 ~6'!1l.l11m zje:i111CJ.:i.LJ'e:i11" 1~e:i~1.:i6'!11'\J1ru '\J '\J

1 v II o V II ~I c::J o 6) '.i~vt11\lfl1'.i'W~'U1'.i~'\J'\J \?l e:J\1111'U1 LG'l'U e:Jfl11l.l fl11vt'U1 L u'U'.i~tl~\?111JVI m11 fl1V!'Ul'l

7) dfo~~'U11~'\J'ULG'f~lili'U ~e:i.:iii1~'\J'\Jrn1vil'l6'fe:i'\Jvt~e:i'Vl\91'1e:i.:i1.ff.:i1u1i11nm-ff '\J

..

8) Lda.ff 'Ul'l e:i'U'VlviG'le:iu1~uu bG'l~'1i'Une:i'U'1~~ vi ~.:i1~uu~'U 1-U.:i1'U'1~.:i!?l e:i.:iilrn11 b1°111~~rn1 vl1.:!1'U'1Jtl.:!1~'U'U

9) VtGi'.:irn1~vi~.:i1~uu~'W'\'AJ'U1~'U1-U'.:i1u'1~.:i !?le:i.:iilrn111t1.:i1'Utl1~Lil'U~·mrn11-U.:i1'U 1 o) mrui'UG'lvirn1~1.:i~ e:i.:i b tl~ t1'U~'Vl6rn1 b .LJ'1n.:i1~uu'V!~eJ ~'U'Vl-r'l"l ~~'Ul'l1l-I~ ml-ln1Vt'Uvi ,

II II II 41 tJ' "tm 4 m1'11.:i.:11'U~1u1::urnfl'rn"ll1mLfil::~ mru

1) ilrn1Lb~.:i~.:iflru~m1lJrn1Lllvi611eJ.:J/l'l11'1fo/flru~m1lJrn1TOR 2) i'.111 tl.:!1'U fl11~ n~11 bfl11~~bL6'l~tleJ n bb 'U'U'l"l~e:JlJtJ1 LG'l'U e:i bLC.J'U.:!1'U 1vie:i~ LLf11lJfl11eJ an bb 'U'U

.di I I QJ

1~uuLme:i'1J1t1l'le:iflru~m1lJrn1l'l11'11u

3) t11 LG'l'Ue:ic..i6'l rn11 Lfl11 ~~bb'1~ LLC.J'U6'111e:i.:i mru~e:i1'1ilC.J'1 m~'Vlu nu1~uu Lfl~eJ~1 t1u'1~u'U~ ~1L tJ'U.:J1'U~m ~e:i.:iL ~e:i 1l-11 iXrn1~1b tJ'U.:J1'U"UeJ.:JmlJ'V!tlV1'll~~n ,

4) Vt1m~Vt-J1.:irn1~1LiJ'Urn1~vi~.:i'V!~e:itJ-rutJ1.:i1~uu~.:iC.J6'lm~'Vl'Ufl11lJb~t1'V!1t1~eJ , 11.:i'l"lt11u1m1'll1n u~~'Vl'V!~eJ~-ru~1.:i~ eMfo ~vi'lleJu L ll'UL~'Utl1~ n'UmlJfl11lJ L~ t1Vt1 t1~.:iVtlJvi Vt~e:il'l1lJ

\I ., v

'1Je:Jl'l n'1.:i'Vl1.:iflru~ m1lJ rn1l'l 11'11u

5) oLJe:JlJ6'l'V!~eJ'Vl-r'l"lEJ~'U~1'Ufl11'W'\'AJ'U1'V!~eJtlfotl 1'11~'U'U bfl~tl~1 ti ~tin m'V!'UVl L U'Ufl11lJGl'U \I , \I

iX1lJtl1e:i e:i n'UeJ n 11.:i'l"l t11u1m1'll:SnVt~faiX1lJ6'111e:i.:i.LJ'm;J'1 La nG'l11~'U 1vi

-ile 5 f11i~~1'3fl11a.!Vti::Vl'IJ n~tli'TUf111a.iii'ufl.:itlfileJ vili'u LLfl'Uflfil1m'"lleJ'3 L ·H'V'l EJ1U1fili1"l11~ \I ,

1) tl1~fl1131Lb ~'l'U LEJ'U1EJ fl11lJ~'Ufl.:Jtl6'leJV1Jl El

2) 11u11a.iuruVt1 L~m nu rn11 oUbfl~e:i.:iilmJtlmruLL'1~1~uu~ L ll'UodeJ.:i 1 Vt1~.:iC.J6'l m~'Vlu ~ e:i1~uu " , fl11a.i~'Ufl.:itl6'le:iviJi't1'1Je:i.:i 11.:i'1"lt11u1m1'111n

3) tl1~'ll1"'a.i'W''Utfl iXLfivifl11lJl'l1~'V!u n~ b~ t11 nufl11a.i~'U fl.:itl'1aviJi't1~e:i1-a.:i'l"l t11u16'l11'll1 n • \I

4) ~vie:iu13.J 1 iXfl113.J~rn11 i.:iTw1~urn 'Vlfl 1ufo~G'IT~G'l'Ub'Vl13l~tin~e:i.:i LLG'l~ 1iXLfiV1fl11lJl'l1~'V!'U' n \I \I

~tl1~'U'Ufl113.J~'Ufl'ltl6'le:JV1Jltl 5) ~Vlvl13.11l'l1fl11bb6'l~'U'Vl6'l.:! L 'Vl~mru~vl1~Vl'U Ltl'U1tlfl11a.l~'Ufl.:!tl6'leJV1Jl tl'lJeJ.:j L i.:!'l"ltn'U16'l11'll

\I

:Sn 1vi t1m 11~-ru rn1-ru1e:i.:iG'luuG'l'U'U'11 n~u~Vt1111.:i'l"l t11u1'111'll1n , \I

6) tli~ biJ'UC.JG'l fl11~e:itJ5~l'l13.J'U Lv'U1tl 1°1113.J~'Ufl.:!tlG'leJVlJl t1~tJ1~ fl113lb oU

-ife 6 min1'Vl'IJ~~1'Vl~U~flfil1m'~1Ltl.fl1EJL'U h-3'V'la1U1fili1"l11~ 1) iX13.Jt111 tlibbnilJ (Software) ffil.Jb~t11.LJ'e:i.:inurn11-U'.:i1'Ul'l13.JlJ1m\i1'U~ma.in1'V!'UV13.111 m 'U ..

11.:i'l"ltnu16'l11'll1n

2) 'V!1nilm1lJtlWG'l~fl'V!~e:im13.J"6'1Lll'U!?i'e:i.:i1-U.:i1'U 1 tl1Lbf11lJ (Software) ~hJe:i~1 'U11t1rn1 \I

3.J1l'l1\i1'U~11.:i'1"l t11u16'l11'll:Snn1V1'Uvi 1 iX'1Je:ie:i'Uru1l'l L ll'Umt1'1 n~ruer n~1LL6'l~'1Je:i~'U'Vl~ Lu t1'U'11n~i'.J'V!ii'1~ ct.I , Cl.J '\.I

-ru ~vi'lle:iu-ru'Vl11u neJ'U'Vlf1fl~.:i tle:i.:i n'U rn1'1~ Liivi~'1J~'V15bb6'l ~fl113.J L~t1'V!1t1'1Je:i.:i11.:i'l"l mu16'l 11'll1~5'U Lfi V1'11 n , fl116'l~ LiiV1~'1J~'Vl~fl11 b oU61leJ{~ bb 1{e:i ~1.:J Ll.Jti nl?i' el.:!

\I

3) ~viv11~ile:irn11 -U.:i1mL'1~rn1'Li11.:i-rn~1Lde:i.:i~'U1 iXnu'4flmm~11tl'Vl11u1 'Wrn1tJ5u~.:i1'U .J.J ., v 1" ... ' 'Vlbf1tl1'1Je:J.:!f1'Ufl11 'll1~'U'Ufltl3.J'l"l1bl'ltl1

4) fl11tJ1 e:itl mrurl11e:i.:i.LJ' eJ3.J6'l'Vl ntl 1 ~ b.fl 'Vl b oLJ13.J1 bi rl'Ubfl~e:J.:J fl tl3.J~1 bl'l e:i{'V!~tl e:itl m ru"U e:i.:i , '\.I 'I •

11.:ivit11u16'l11'll1~ ~ e:i.:iil rn1m1'1G'le:iu m13.Jtl6'le:iviJi' t1'1Je:i.:il'11 e:itl mru ne:i'U 1 -U.:i1'U'Vlnfl~.:i , , 5) Lfl~e:i.:ifle:il-1~1Ll'le:i{'Vlmfl~e:i.:i~1m'U11.:ivit11u1m1'll1~m1ilrn1L.LJ'11'M'G'I ~.:i1 u~1'U1~uu~ , .

LU'U Workgroup LLG'l~ Active Directory rn1bzjeJ3.J~eJ1~tJ'U'1JeJ.:!h.:ivit11u16'l11'll1n

------------------------------------------ --

6) Vl1 n b\01 ~e:i.:i A eJ:lJ'W1 b~ e:i1i1u t1JVl1~hJG11:lJ1'j{) bbm '1J 1~ beJ-:1 <Jle:i.:i bb ~.:! bbt.J'U n~ b M CJ'JoLJ e:i.:i tl'U fl1'j

oJ1'j .:i-rn~1 bb'1 ~u-r'Uu 'j,:j'j~'l.J'U Ae:i:1JV11 b\?le:i1b v11'1'U ' '

7) 'U 1"1'11 m <Jl e:i.:i-r'U ~(11"1!eJ'U (11 bb'1 bA~eJ.:IA eJ:lJVi'J b\?l e:i1.ffi oU.:11'U'1JeJ.:I \?l'U beJ.:IVl1nbn(111"111:!.J b~CJVl1 CJVl~eJ ' 'U v QJ .::It. ..::::..

G'1 tu'V11 CJ\?) e:i.:i 'j'l.J t.J (11"1! eJ'U \?11:!.J:l.J \?) 'U "'

8) tJAm mm .U.:11'U hlA1';ib .LJ'1b1'll 1611~~ ne:i 1 ~bn(11 eJ'U~'j1 ci Vl~e:i hhM ci1.LJ'e:i.:i ntJm'jtJ f1u~.:i1'UV1~e:i ' 'U d.J

(1111'U'1Vl'1(11.LJ'e:i:lJ'1eJ''Une:i1 ~bn(11m1:1Jb~ciV11ci~m~'Uu'1Je:i.:im:lJ 'U

.LJ'v 7 ~~bLfl':i::uum':i;'n~1fl11l.l~'IJfl.:ltlflv~Ji'aV1°ieJbfl°iv"li1a 'U 'U

1) b HV'-l CJ1'U1'1';i1"111~<Jl e:i~ rl1Vl'U(11b\"1';i.:!61~1.:!'U'Vl'U1'VIVIU1~1"111:!.J-r'U ~(11"1!eJ'U'1JeJ.:!'UA'11m '

~unmi.:i1\J~1'Um';i-rn~11"111:1J~'UA.:iu'1e:i(11.nci 2) <Jle:i.:ii1m';in1V1'U(11~'Vlol3!1G'1 \?11~1'U fl1'j~1 b 'Llu:11'Ubb'1~unmi.:11'U'j~'l.J'U Ae:i:1J-W1 b\?l e:i11 ~

G'1eJ (11AiK e:i.:i tl'U 1"111:!.J~'U A~U'1 eJ(11n CJ'1JeJ.:! b ';i .:!'V'W1'U1'1';i1"111~ 3) <Jlei.:ii1 fl1'j11.:i bbt.i'U fl1'j~1 b 'Ll'U.:!1'U~1'UA11:l.l~'UA.:IU'1 e:J(11.t1 ciei ~1-:i b U'U';i~'l.J'U 1(11 ci fl1'jm'J':i!G'1eJ'U

bb'1~A1tJA:1J':il1nAru~n'j'j:1Jn1';ifo~1m1:1J~'UA.:iu'1e:i(11.nci ' v .:::iii 0 v d d I 11 .. I .::It. Q.IQ tJ

4) \?l eN:lJ';i~'U'U fl1'j:l.JeJ'UVl:lJ1 EN1'U \?11:!.J'IJeJ'U b '1J\?leJ1'U1':i!Vl'U1'Vl'VI b Vl:l.J1~G'1:l.J\?l eJ~ u!)'U\?1~1'U(111'UA11:l.J

~'UA~U'1eJ(11nCJ s) <Jl e:i~i1'j~'l.J'U fl1'jU'j~biJ'Ut.i'1 fl1'j~1 b 'Ll'U~1'U~1'U m1:1J~'U A~u'1e:i(11.n ci bb'1 ~i1'j~'l.J'U bbm '1lUt1JVl1

~1'UA11:lJ~'UA.:!U'1eJ(11.f1CJ

It. · G'11'U~ 7 fl11fl1'\Jfl:l.J , fl11 b -LJ'1'1.:i L . 8 , , . ~ ~ ' 'U .1"""""'1 ~ .1..~ \I \I...

Documents

Transcript of It. · G'11'U~ 7 fl11fl1'\Jfl:l.J , fl11 b -LJ'1'1.:i L . 8 , , . ~ ~ ' 'U .1"""""'1 ~ .1..~ \I \I...