T/STMA008—2022 T/STMA 四川省技术市场协会团体标准 T/STMA008—2022 党政信息网络空间安全运维管理体系标准 Partyandgovernmentinformationcyberspacesecurityoperationandmaintenance managementsystemstandard 2022-01-06发布 2022-02-01实施 四川省技术市场协会发布 全国团体标准信息平台 T/STMA008—2022 I目次 前言..........................................................................................................................................Ⅱ 1范围..........................................................................................................................................1 2规范性引用文件.....................................................................................................................1 3术语和定义..............................................................................................................................1 4缩略语......................................................................................................................................2 5党政信息网络空间安全运维管理体系.................................................................................2 5.1安全运维模型......................................................................................................................2 5.2安全运维活动分类..............................................................................................................2 5.3安全运维活动要素..............................................................................................................3 5.4安全运维管理原则..............................................................................................................3 6安全运维策略..........................................................................................................................3 6.1安全运维策略制定..............................................................................................................3 6.2安全运维策略评审..............................................................................................................4 7安全运维组织的管理.............................................................................................................4 7.1安全运维的角色和责任......................................................................................................4 7.2任用前审查...........................................................................................................................5 7.3工作履行职责......................................................................................................................5 7.4任用终止和变更..................................................................................................................6 8安全运维规程..........................................................................................................................6 8.1资产管理...............................................................................................................................6 8.2日志管理...............................................................................................................................6 8.3访问控制...............................................................................................................................7 8.4密码管理...............................................................................................................................8 8.5漏洞管理...............................................................................................................................8 8.6备份.......................................................................................................................................8 8.7安全事件管理及响应..........................................................................................................9 9安全运维支撑系统...............................................................................................................10 9.1党政信息网络空间安全服务台........................................................................................10 9.2资产管理系统....................................................................................................................11 9.3漏洞管理系统.......................................