{"id":37831,"date":"2019-10-31T22:20:00","date_gmt":"2019-10-31T19:20:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/kak-kazaki-gicsp-sertifikat-poluchali\/"},"modified":"2019-10-31T22:20:00","modified_gmt":"2019-10-31T19:20:00","slug":"kak-kazaki-gicsp-sertifikat-poluchali","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/kak-kazaki-gicsp-sertifikat-poluchali","title":{"rendered":"Cum au ob\u021binut cazacii certificatul GICSP","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Salut tuturor! Pe portalul nostru preferat au fost multe articole despre certificarea \u00een domeniul securit\u0103\u021bii informa\u021biilor, a\u0219a c\u0103 nu m\u0103 pretind la originalitate \u0219i unicitate a con\u021binutului, dar a\u0219 dori totu\u0219i s\u0103 \u00eemi \u00eemp\u0103rt\u0103\u0219esc experien\u021ba ob\u021binerii certific\u0103rii GIAC (Global Information Assurance Company) \u00een domeniul securit\u0103\u021bii cibernetice industriale. De la apari\u021bia unor cuvinte at\u00e2t de \u00eenfrico\u0219\u0103toare precum Stuxnet<\/a><\/noindex>, Duqu<\/a><\/noindex>, Shamoon, Triton, s-a format treptat pia\u021ba de servicii pentru speciali\u0219ti care par a fi IT, dar pot \u0219i s\u0103 reconfigureze PLC-urile f\u0103r\u0103 a opri fabrica. <\/p>\n

<\/a><\/noindex><\/p>\n

Astfel, a ap\u0103rut conceptul IT&OT (Tehnologia Informa\u021biei & Tehnologia Opera\u021biunilor). <\/p>\n

<\/p>\n

Imediat a ap\u0103rut necesitatea de a certifica speciali\u0219ti \u00een domeniul asigur\u0103rii securit\u0103\u021bii sistemelor de automatizare industrial\u0103, domeniu care, de fapt, a devenit extrem de important, de la vanele automate de ap\u0103 din apartamente p\u00e2n\u0103 la sistemele de control al avioanelor (s\u0103 ne amintim de minunatul articol despre investiga\u021bia problemelor Boeing<\/a><\/noindex>). \u0218i chiar, a\u0219a cum s-a dovedit, a echipamentelor medicale complexe. <\/p>\n

<\/p>\n

O mic\u0103 liric\u0103 despre cum am ajuns s\u0103 am nevoie de certificare (poate fi s\u0103rit\u0103): Dup\u0103 ce am absolvit la sf\u00e2r\u0219itul anilor 2000 la facultatea de protec\u021bia informa\u021biei, am p\u0103\u0219it cu fruntea sus \u00een r\u00e2ndurile celor care se ocup\u0103 de KIP, lucr\u00e2nd ca tehnician pe sisteme de alarm\u0103 de joas\u0103 tensiune. A\u0219a mi s-a spus c\u0103 este securitate informa\u021bional\u0103 pe acel loc de munc\u0103 la acea vreme :) A\u0219a a \u00eenceput cariera mea de specialist \u00een automatizarea sistemelor, av\u00e2nd un diplom\u0103 de licen\u021b\u0103 \u00een securitatea informa\u021biei. Dup\u0103 \u0219ase ani, ajung\u00e2nd \u0219ef de departament pentru sistemele SCADA, am plecat s\u0103 lucrez ca consultant pentru securitatea sistemelor industriale \u00eentr-o companie str\u0103in\u0103 furnizoare de software \u0219i echipamente. Aici a ap\u0103rut necesitatea de a fi un specialist \u00een securitatea informa\u021biei certificat. <\/p>\n

<\/p>\n

GIAC<\/a><\/noindex> este o dezvoltare SANS<\/a><\/noindex> o organiza\u021bie care se ocup\u0103 cu desf\u0103\u0219urarea de traininguri \u0219i certificarea speciali\u0219tilor \u00een securitatea informa\u021biei. Reputa\u021bia certificatului de la GIAC este foarte ridicat\u0103 \u00een r\u00e2ndul speciali\u0219tilor \u0219i clien\u021bilor pe pie\u021bele EMEA, SUA, Asia-Pacific. La noi, \u00een spa\u021biul post-sovietic \u0219i \u00een \u021b\u0103rile CSI, un astfel de certificat este solicitat doar de companiile str\u0103ine care au afaceri \u00een \u021b\u0103rile noastre, agen\u021biile interna\u021bionale \u0219i de consultan\u021b\u0103. Personal, nu am \u00eent\u00e2lnit niciodat\u0103 o solicitare pentru o astfel de certificare din partea companiilor autohtone. To\u021bi solicit\u0103, \u00een principal, CISSP. Aceasta este opinia mea subiectiv\u0103 \u0219i ar fi interesant s\u0103 aflu experien\u021bele altora \u00een comentarii.<\/p>\n

<\/p>\n

La SANS sunt suficiente direc\u021bii diferite (din punctul meu de vedere, \u00een ultima vreme, echipa a extins prea mult num\u0103rul acestora), dar exist\u0103 \u0219i cursuri foarte interesante din perspectiva practic\u0103. Mi-a pl\u0103cut \u00een mod special NetWars<\/a><\/noindex>. Dar povestea va fi despre cursul ICS410: ICS\/SCADA Security Essentials <\/a><\/noindex> \u0219i certificatul intitulat: Global Industrial Cyber Security Professional (GICSP)<\/a><\/noindex>.<\/p>\n

<\/p>\n

Dintre toate tipurile de certific\u0103ri SANS \u00een Securitatea Cibernetic\u0103 Industrial\u0103, acesta este cel mai universal. Deoarece cel de-al doilea este mai mult legat de sistemele Power Grid, care primesc o aten\u021bie deosebit\u0103 \u00een Occident \u0219i sunt clasificate ca un tip separat de sisteme. Iar al treilea (\u00een momentul \u00een care am \u00eenceput procesul de certificare) se referea la R\u0103spunsul la Incidente.
\nCursul nu este ieftin, dar ofer\u0103 cuno\u0219tin\u021be destul de ample at\u00e2t \u00een IT c\u00e2t \u0219i \u00een OT. Va fi deosebit de util pentru acei colegi care au decis s\u0103 \u00ee\u0219i schimbe domeniul, de exemplu, din securitatea IT \u00een domeniul bancar \u00een Securitatea Cibernetic\u0103 Industrial\u0103. Av\u00e2nd \u00een vedere c\u0103 aveam deja un background \u00een domeniul SCADA, M\u0103sur\u0103 \u0219i Tehnologie Opera\u021bional\u0103, pentru mine nu a fost nimic fundamental nou sau vital \u00een acest curs.<\/p>\n

<\/p>\n

Cursul este compus din 50% teorie \u0219i 50% practic\u0103. Dintre aspectele practice, cel mai interesant a fost concursul \u2013 NetWars. Pe parcursul a dou\u0103 zile, dup\u0103 cursul principal, to\u021bi studen\u021bii din toate clasele s-au \u00eemp\u0103r\u021bit \u00een echipe \u0219i au \u00eendeplinit sarcini pentru ob\u021binerea drepturilor de acces, extragerea informa\u021biilor necesare, ob\u021binerea accesului la re\u021bea, o mul\u021bime de sarcini legate de desf\u0103\u0219urarea de hash-uri, lucrul cu Wireshark \u0219i diverse alte activit\u0103\u021bi. <\/p>\n

<\/p>\n

Materialul cursului este un rezumat sub form\u0103 de c\u0103r\u021bi, pe care le primi\u021bi pentru utilizare nelimitat\u0103. Apropo, le pute\u021bi folosi \u0219i la examen, deoarece formatul este Open Book, dar nu v\u0103 vor ajuta prea mult, deoarece examenul dureaz\u0103 3 ore, cu 115 \u00eentreb\u0103ri, \u0219i se sus\u021bine \u00een limba englez\u0103. \u00cen cele 3 ore, pute\u021bi lua o pauz\u0103 de 15 minute. Dar re\u021bine\u021bi c\u0103, dac\u0103 lua\u021bi o pauz\u0103 de 15 minute \u0219i reveni\u021bi la teste dup\u0103 5 minute, pierde\u021bi pur \u0219i simplu ultimele 10 minute, deoarece nu ve\u021bi putea opri mai mult timpul \u00een programul de testare. Pute\u021bi omite p\u00e2n\u0103 la 15 \u00eentreb\u0103ri, care apoi vor ap\u0103rea la sf\u00e2r\u0219it. <\/p>\n

<\/p>\n

Personal, nu recomand s\u0103 l\u0103sa\u021bi multe \u00eentreb\u0103ri pe mai t\u00e2rziu, deoarece cele 3 ore sunt cu adev\u0103rat pu\u021bine, iar c\u00e2nd la final apar \u00eentreb\u0103ri nerezolvate, exist\u0103 o mare probabilitate s\u0103 nu reu\u0219i\u021bi. Am l\u0103sat \u201epe mai t\u00e2rziu\u201d doar trei \u00eentreb\u0103ri care erau cu adev\u0103rat dificile pentru mine, deoarece se referau la cuno\u0219tin\u021bele despre standardul NIST 800.82 \u0219i NERC. Psihologic, aceste \u00eentreb\u0103ri \u201epe mai t\u00e2rziu\u201d afecteaz\u0103 nervii la final \u2014 c\u00e2nd mintea ta este obosit\u0103, vrei la toalet\u0103, iar cronometru de pe ecran pare c\u0103 accelereaz\u0103 \u00een progresie geometric\u0103. <\/p>\n

<\/p>\n

\u00cen general, pentru a trece testarea, trebuie s\u0103 ob\u021bine\u021bi 71% r\u0103spunsuri corecte. \u00cenainte de a sus\u021bine examenul, ve\u021bi avea ocazia s\u0103 v\u0103 exersa\u021bi cu teste reale - deoarece pre\u021bul include 2 teste de preg\u0103tire cu 115 \u00eentreb\u0103ri \u0219i condi\u021bii similare cu cele ale examenului real.<\/p>\n

<\/p>\n

Recomand s\u0103 sus\u021bine\u021bi examenul la o lun\u0103 dup\u0103 finalizarea instruirii, dedic\u00e2nd aceast\u0103 lun\u0103 studiului sistematic pe \u00eentreb\u0103rile la care nu v\u0103 sim\u021bi\u021bi \u00eencrez\u0103tor. Ar fi bine dac\u0103 a\u021bi lua materialele tip\u0103rite ob\u021binute \u00een cadrul cursului, care arat\u0103 ca un rezumat pentru fiecare dintre subiecte - \u0219i s\u0103 c\u0103uta\u021bi \u00een mod specific informa\u021bii despre temele con\u021binute \u00een aceste c\u0103r\u021bi. \u00cemp\u0103r\u021bi\u021bi luna \u00een dou\u0103 p\u0103r\u021bi, efectu\u00e2nd teste de prob\u0103 \u0219i ob\u021bin\u00e2nd o imagine aproximativ\u0103 asupra \u00eentreb\u0103rilor la care sunte\u021bi puternici \u0219i unde este nevoie s\u0103 v\u0103 \u00eembun\u0103t\u0103\u021bi\u021bi. <\/p>\n

<\/p>\n

A\u0219 dori s\u0103 subliniez urm\u0103toarele direc\u021bii principale din care const\u0103 examenul propriu-zis (nu cursul de instruire, deoarece acesta acoper\u0103 teme mult mai vaste):<\/p>\n

<\/p>\n

    \n
  1. Securitatea fizic\u0103: a\u0219a cum se \u00eent\u00e2mpl\u0103 \u0219i \u00een alte examene de certificare, aceast\u0103 \u00eentrebare prime\u0219te o aten\u021bie considerabil\u0103 \u00een GICSP. Apar \u00eentreb\u0103ri despre tipurile de lac\u0103te fizice de pe u\u0219i, sunt descrise situa\u021bii de falsificare aNoilor permise electronice, unde trebuie s\u0103 ofere un r\u0103spuns pentru identificarea clar\u0103 a problemei. Exist\u0103 \u00eentreb\u0103ri care se refer\u0103 direct la securitatea tehnologiei (procesului) \u00een func\u021bie de domeniul de aplicare \u2013 procesele din industria petrolier\u0103 \u0219i gazier\u0103, centrale atomice sau re\u021bele electrice. De exemplu, poate ap\u0103rea o \u00eentrebare de tipul: Care tip de control de securitate fizic\u0103 este atunci c\u00e2nd se prime\u0219te un Alarma de la senzorul de temperatur\u0103 a aburului pe HMI? Sau o \u00eentrebare de tipul: Ce situa\u021bie (eveniment) ar justifica o analiz\u0103 a \u00eenregistr\u0103rilor video de pe camerele de supraveghere ale sistemului de securitate perimetral\u0103 a obiectului?\n

    \u00cen procente, a\u0219 sublinia c\u0103 num\u0103rul \u00eentreb\u0103rilor din aceast\u0103 sec\u021biune a fost de maximum 5% at\u00e2t la examenul meu, c\u00e2t \u0219i la testele de simulare.<\/li>\n

  2. O alt\u0103 categorie major\u0103 de \u00eentreb\u0103ri const\u0103 \u00een \u00eentreb\u0103rile despre APU, PLC, SCADA: aici va fi necesar\u0103 o abordare sistematic\u0103 a studiului materialelor despre cum sunt structurate sistemele de control ale proceselor tehnologice, \u00eencep\u00e2nd de la senzori \u0219i termin\u00e2nd cu serverele unde ruleaz\u0103 programul aplica\u021biei. Vor fi multe \u00eentreb\u0103ri despre tipurile de protocoale industriale de transfer de date (ModBus, RTU, Profibus, HART etc.). Vor ap\u0103rea \u00eentreb\u0103ri despre diferen\u021bele \u00eentre RTU \u0219i PLC, cum s\u0103 protejezi datele \u00een PLC de modific\u0103rile efectuate de atacatori, \u00een ce p\u0103r\u021bi ale memoriei PLC sunt stocate datele, iar unde se g\u0103se\u0219te logica propriu-zis\u0103 (programul scris de programatorul APU). De exemplu, poate ap\u0103rea o \u00eentrebare de tipul: Cum poate fi detectat\u0103 o atac \u00eentre PLC \u0219i HMI care func\u021bioneaz\u0103 pe protocolul ModBus?\n

    Vor exista \u00eentreb\u0103ri despre diferen\u021bele \u00eentre sistemele SCADA \u0219i DCS. Vor fi multe \u00eentreb\u0103ri despre regulile de segmentare a re\u021belilor APU la nivelurile L1, L2 de nivelul L3 (voi detalia mai mult \u00een sec\u021biunea despre re\u021bea). \u00centreb\u0103rile situa\u021bionale pe aceast\u0103 tem\u0103 vor fi de asemenea foarte variate \u2013 descriu o situa\u021bie \u00een sala de dispecerizare \u0219i trebuie s\u0103 alegi ac\u021biunile care trebuie efectuate de operatorul procesului sau dispecer.<\/p>\n

    \u00cen general, aceast\u0103 sec\u021biune este cea mai specific\u0103 \u0219i specializat\u0103. Va necesita de la dvs. cuno\u0219tin\u021be bune:
    \n \u2014 ASUP, partea de teren (senzori, tipuri de conectare a dispozitivelor, caracteristici fizice ale senzorilor, PLC, RTU);
    \n \u2014 sisteme de protec\u021bie de urgen\u021b\u0103 (ESD \u2013 sistem de oprire de urgen\u021b\u0103) pentru procese \u0219i obiecte (de altfel, pe Habr exist\u0103 un excelent ciclu de articole pe aceast\u0103 tem\u0103 de la     Vladimir_Sklyar<\/a><\/noindex>)
    \n \u2014 o \u00een\u021belegere de baz\u0103 a proceselor fizice care au loc, de exemplu, \u00een rafinarea petrolului, generarea de energie electric\u0103, conducte etc.;
    \n \u2014 \u00een\u021belegerea structurii arhitecturilor DCS \u0219i SCADA;
    \nA\u0219 dori s\u0103 subliniez c\u0103 \u00eentreb\u0103rile de acest tip pot constitui p\u00e2n\u0103 la 25% din toate cele 115 \u00eentreb\u0103ri ale examenului. <\/li>\n

  3. Tehnologii de re\u021bea \u0219i securitate \u00een re\u021bea: Cred c\u0103 num\u0103rul \u00eentreb\u0103rilor din acest subiect este pe primul loc \u00een examen. Vor fi probabil toate \u2013 modelul OSI, pe ce niveluri func\u021bioneaz\u0103 un protocol sau altul, o mul\u021bime de \u00eentreb\u0103ri despre segmentarea re\u021belei, \u00eentreb\u0103ri situative despre atacurile \u00een re\u021bea, exemple de jurnale de conexiune cu propunerea de a determina tipul de atac, exemple de configura\u021bii ale switch-ului cu propunerea de a identifica configura\u021bia vulnerabil\u0103, \u00eentreb\u0103ri despre vulnerabilit\u0103\u021bile protocoalelor de re\u021bea, \u00eentreb\u0103ri despre specifica\u021biile conexiunilor re\u021belelor industriale. Foarte multe \u00eentreb\u0103ri se pun despre ModBus. Structura pachetelor de re\u021bea ale aceluia\u0219i ModBus, \u00een func\u021bie de varietatea sa \u0219i versiunile acceptate de dispozitiv. O aten\u021bie mare este acordat\u0103 atacurilor asupra re\u021belelor wireless \u2013 ZigBee, Wireless HART, \u00eentreb\u0103ri generale despre securitatea re\u021belei din \u00eentreaga familie 802.1x. Vor fi \u00eentreb\u0103ri despre regulile de amplasare a anumitor servere \u00een re\u021beaua ASUTP (aici trebuie citit standardul IEC-62443 \u0219i \u00een\u021belese principiile modelului de re\u021bea de referin\u021b\u0103 ASUTP). Vor ap\u0103rea \u00eentreb\u0103ri despre modelul Purdue.<\/li>\n
  4. Categoria de \u00eentreb\u0103ri care se refer\u0103 exclusiv la caracteristicile func\u021bionale ale sistemelor de transmitere a energiei electrice \u0219i sistemelor de securitate informa\u021bional\u0103 pentru acestea. \u00cen SUA, aceast\u0103 categorie de sisteme de automatizare a sistemelor de transport de energie, este numit\u0103 Power Grid \u0219i i se aloc\u0103 un rol distinct. Pentru acest lucru, chiar exist\u0103 standarde separate (NIST 800.82) care reglementeaz\u0103 abordarea cre\u0103rii sistemelor de securitate informa\u021bional\u0103 pentru acest sector. \u00cen \u021b\u0103rile noastre, \u00een majoritatea cazurilor, acest sector se limiteaz\u0103 la sistemele de monitorizare a consumului de energie electric\u0103 (corecta\u021bi-m\u0103 dac\u0103 cineva a \u00eent\u00e2lnit o abordare mai serioas\u0103 \u00een controlul sistemelor de distribu\u021bie \u0219i livrare a energiei electrice). A\u0219adar, \u00een examen ve\u021bi \u00eent\u00e2lni \u00eentreb\u0103ri destul de specifice referitoare la Power Grid. \u00cen majoritatea cazurilor, acestea au fost cazuri de utilizare pentru o anumit\u0103 situa\u021bie creat\u0103 la o central\u0103 electric\u0103, dar de asemenea pot exista \u00eentreb\u0103ri despre dispozitivele utilizate chiar \u00een Power Grid. Vor fi \u00eentreb\u0103ri care vizeaz\u0103 cuno\u0219tin\u021bele din sec\u021biunile NIST pentru aceast\u0103 categorie de sisteme.<\/li>\n
  5. \u00centreb\u0103rile se refer\u0103 la cuno\u0219tin\u021bele despre standarde: NIST 800-82, NERC, IEC62443. Cred c\u0103 aici nu sunt necesare comentarii speciale \u2013 trebuie s\u0103 ne orient\u0103m \u00een sec\u021biunile standardelor, ce r\u0103spunde pentru ce \u0219i ce recomand\u0103ri con\u021bine. Apar \u00eentreb\u0103ri specifice, de exemplu, ce \u00eentreab\u0103 despre frecven\u021ba verific\u0103rii func\u021bionalit\u0103\u021bii sistemului, frecven\u021ba actualiz\u0103rii procedurilor etc. Propor\u021bia acestor \u00eentreb\u0103ri poate fi de p\u00e2n\u0103 la 15% din num\u0103rul total de \u00eentreb\u0103ri. Dar depinde c\u00e2t de mult noroc ai. De exemplu, \u00een dou\u0103 teste de prob\u0103, am \u00eent\u00e2lnit doar c\u00e2teva astfel de \u00eentreb\u0103ri. \u00cens\u0103, la examen, au fost \u00eentr-adev\u0103r multe.<\/li>\n
  6. \u0218i ultima categorie de \u00eentreb\u0103ri este o varietate de cazuri de utilizare \u0219i \u00eentreb\u0103ri situa\u021bionale. <\/li>\n<\/ol>\n

    <\/p>\n

    \u00cen general, trainingul \u00een sine, cu excep\u021bia poate a CTF NetWars, nu a fost foarte informativ pentru mine \u00een ceea ce prive\u0219te dob\u00e2ndirea de cuno\u0219tin\u021be poten\u021bial noi. Mai degrab\u0103, am dob\u00e2ndit detalii mai profunde despre anumite subiecte, \u00een special \u00een domeniul organiz\u0103rii \u0219i protec\u021biei re\u021belelor radio, utilizate pentru transmiterea informa\u021biilor tehnologice, precum \u0219i un material mai bine structurat despre standardele interna\u021bionale dedicate acestui subiect. De aceea, pentru inginerii \u0219i speciali\u0219tii care au cuno\u0219tin\u021be \u0219i experien\u021b\u0103 suficient\u0103 \u00een domeniul A\u0218UTP\/KIP sau re\u021bele industriale \u2013 merit\u0103 s\u0103 te g\u00e2nde\u0219ti s\u0103 economise\u0219ti la training (iar economisirea are sens), s\u0103 te preg\u0103te\u0219ti singur \u0219i s\u0103 te prezinti direct la examenul de certificare, care, de altfel, cost\u0103 700 USD. \u00cen caz de e\u0219ec, va trebui s\u0103 pl\u0103te\u0219ti din nou. Exist\u0103 destule centre de certificare care te vor accepta la examen, important e s\u0103 aplici din timp. \u00cen general, recomand s\u0103 \u00ee\u021bi stabile\u0219ti imediat o dat\u0103 pentru examen, deoarece altfel vei am\u00e2na constant, \u00eenlocuind procesul de preg\u0103tire cu alte lucruri din via\u021ba de zi cu zi, importante sau nu. A\u0219adar, av\u00e2nd o dat\u0103 precis\u0103 pentru finalizare, vei fi auto-motivat.<\/p>\n

    Sursa: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

    \u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442! \u041d\u0430 \u0432\u0441\u0435\u043c\u0438 \u043b\u044e\u0431\u0438\u043c\u043e\u043c \u043f\u043e\u0440\u0442\u0430\u043b\u0435 \u0431\u044b\u043b\u043e \u043c\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u043d\u044b\u0445 \u0441\u0442\u0430\u0442\u0435\u0439 \u043f\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u0418\u0411, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043f\u0440\u0435\u0442\u0435\u043d\u0434\u043e\u0432\u0430\u0442\u044c \u043d\u0430 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0438 \u043d\u0435\u043f\u043e\u0432\u0442\u043e\u0440\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 \u043d\u0435 \u0441\u043e\u0431\u0438\u0440\u0430\u044e\u0441\u044c, \u043d\u043e \u0432\u0441\u0435 \u0436\u0435 \u043e\u0447\u0435\u043d\u044c \u0445\u043e\u0442\u0435\u043b \u0431\u044b \u043f\u043e\u0434\u0435\u043b\u0438\u0442\u044c\u0441\u044f \u0441\u0432\u043e\u0438\u043c \u043e\u043f\u044b\u0442\u043e\u043c \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f GIAC (Global Information Assurance Company) \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0439 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0421\u043e \u0432\u0440\u0435\u043c\u0435\u043d \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0442\u0430\u043a\u0438\u0445 \u0441\u0442\u0440\u0430\u0448\u043d\u044b\u0445 \u0441\u043b\u043e\u0432 \u043a\u0430\u043a Stuxnet, Duqu, Shamoon, Triton, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-37831","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Cum au ob\u021binut cosacii certificatul GICSP | ProHoster","description":"Salut tuturor!","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/kak-kazaki-gicsp-sertifikat-poluchali","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0430\u043a \u043a\u0430\u0437\u0430\u043a\u0438 GICSP \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u043f\u043e\u043b\u0443\u0447\u0430\u043b\u0438 | ProHoster","og:description":"\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442!","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/kak-kazaki-gicsp-sertifikat-poluchali","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:20:00+00:00","article:modified_time":"2019-10-31T19:20:00+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"37831","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 19:26:35","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:20:22","updated":"2026-01-23 19:26:35","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/37831","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=37831"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/37831\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=37831"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=37831"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=37831"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}