Xa besenza nasiphi na isigqibo esibalulekileyo kwinkampani, abasebenzi badlula kwindlela yokukhusela esisiseko, eyaziwa ngokuba ziinqanaba ezi-5 zokuphendula kutshintsho (ngu-E. KΓΌbler-Ross). Isazi ngengqondo esidumileyo sakha sachaza ukusabela ngokweemvakalelo, siqaqambisa izigaba ezi-5 eziphambili zokuphendula ngokweemvakalelo: ukwala, umsindo, isivumelwano, ukuxinezeleka kwaye ekugqibeleni Ukwamkelwa. Silungiselele uthotho lwamanqaku anikezelwe kwisiqinisekiso se-ISO 27001, apho siya kujonga kwinqanaba ngalinye. Namhlanje siza kuthetha ngeyokuqala kubo - ukukhanyela.
Ukufumana isatifikethi se-ISO 27001 βsombonisoβ kuluyolo oluthandabuzekayo kakhulu, kuba kufuna ixesha elide namalungiselelo abizayo. Ngaphezu koko, njengoko kubonisa , lo mgangatho awuthandwa kakhulu kwi-Russian Federation: ukuza kuthi ga ngoku, iinkampani ze-70 kuphela ziqinisekisiwe ukuthotyelwa. Kwangaxeshanye, lo ngomnye wemigangatho ethandwa kakhulu kumazwe aphesheya, ukuhlangabezana neemfuno ezikhulayo zoshishino kwinkalo yokhuseleko lolwazi.
Inkampani yethu ibonelela ngoluhlu olupheleleyo lweenkonzo zokukhupha imisebenzi ye-accounting: accounting kunye nerhafu, ukuhlawula kunye nolawulo lwabasebenzi. Sikwenye yezikhundla eziphambili zemarike, ngakumbi ngenxa yokuba iinkampani zangaphandle ezinamasebe eRussia ziyasithemba ngolwazi lwazo oluyimfihlo. Oku akusebenzi kuphela kwiinkqubo zemali zabathengi bethu, kodwa nakwidatha yobuqu esisebenza nayo yonke imihla. Ngokubhekiselele koku, umba wokhuseleko lolwazi yenye yezinto eziphambili ngokubaluleka.
Ngokuqhelekileyo, zonke iinkqubo zoshishino zezahlulo zaseRashiya zilawulwa kwaye zibhengezwe yiofisi yeenkampani zangaphandle, ngoko ke kufuneka zihambelane nemigangatho yeqela langaphakathi. Kutshanje, abanye babaxumi bethu abaphambili baqale ukuhlaziya imigaqo-nkqubo yabo yokhuseleko kwicala lokuziqinisa. Ewe, oku kungenxa yeendlela zehlabathi kwinani elikhulayo lohlaselo lwe-cyber kunye nelahleko ehambelana neziganeko zokwaphulwa kokhuseleko lolwazi Ukuba kuyimfuneko ukuphumeza amanyathelo okhuseleko, imigaqo-nkqubo kunye neenkqubo ezijolise ekwandiseni ukhuseleko lolwazi lwenkampani, unokwenza ngaphandle kwe-ISO. Ukuqinisekiswa kwe-IEC 27001, ukonga imali eninzi, ixesha kunye nemithambo-luvo.
Namhlanje, iimfuno zokhuseleko lolwazi olukhoyo kwinkampani sele ziqalisile ukuvela kwiithenda ezivela kubathengi bamanye amazwe. Abanye, ukwenzela ukuba kube lula ukuqinisekiswa kwabo kunye nokudibanisa indlela yokwenza, beka imilinganiselo yokuvavanya okunyanzelekileyo - ubukho be-ISO / IEC 27001 isatifikethi.
Nantsi into esiyibonileyo: Omnye wabaxumi bethu abaphambili bamazwe aphesheya oqinisekisiweyo kulo mgangatho ubonakala elomeleze kakhulu iqela lakhe lokhuseleko lolwazi lwehlabathi. Sazi njani ngale nto? Bagqibe kwelokuba baphicothe inkqubo yethu yolawulo lokhuseleko lolwazi, kuba sibabonelela ngeenkonzo zocwangciso-mali kunye nolawulo lwabasebenzi - kwaye, ngokufanelekileyo, ukhuseleko lweenkqubo zethu zolwazi lubaluleke kakhulu kubo. Uphicotho lwangaphambili lwenzeka kwiminyaka emi-3 eyadlulayo - ngelo xesha yonke into yahamba ngaphandle kwentlungu.
Ngeli xesha, iqela elinobubele lamaIndiya lasihlasela, ngobuchule lafumanisa iintsilelo ezininzi kwinkqubo yethu yolawulo lokhuseleko. Inkqubo yophicotho-zincwadi ifana nevili leSamsara - kwakubonakala ngathi ngokomgaqo babengenanjongo yokufikelela nakweyiphi na inqaku lokugqibela njengenxalenye yophicotho. Yayingumtya ongapheliyo wemibuzo, izimvo, izimvo zethu kunye nobungqina bobunyani bazo, iifowuni zeenkomfa kunye neencoko ezinde zefilosofi kwiinzame zokuqonda i-accent yeqela lokhuseleko le-IT lomthengi. Ngendlela, uphicotho-zincwadi luqhubeka ngamanqanaba ahlukeneyo okuqina ukuza kuthi ga namhlanje - ngokuhamba kwexesha, siye savumelana noku. Ngaloo ndlela, imfuno yokuqinisekiswa ivele ngokwayo.
Mhlawumbi sinokwenza nge-ISO 9001?
Wonke umntu onolwazi olungaphezulu okanye oluncinci kumbandela wesiqinisekiso ngokwemigangatho ye-ISO uyaqonda ukuba isiseko sawo ngamnye sisiqinisekiso se-ISO 9001 βseNkqubo yoLawulo loMgangathoβ. Esi mhlawumbi sesona satifikethi sidumileyo ngoku kuwo wonke umgca wemigangatho ye-ISO. Sasingenayo-kwaye sagqiba kwelokuba singayifumani. Kwakukho izizathu ezininzi zoku:
- ukusebenza kakuhle kwezoqoqosho kwenkampani enesi satifikethi;
- iinkqubo zethu zangaphakathi, ubukhulu becala, zazisele zisondele kulo mgangatho;
- Ukufumana esi satifikethi kuya kufuna ixesha kunye nemali eyongezelelweyo.
Ngokufanelekileyo, sigqibe ekubeni siphumeze kwangoko i-ISO 27001, ngaphandle kokuqala nge-"lighter" 9001.
Okanye ngaba kuseyimfuneko?
Sijonge phambili, siye sabuyela izihlandlo ezininzi kumbuzo wokuba kububulumko na ukuyifumana. Saqala ukuwufunda lo mbandela macala onke, kuba sasingenabuchule kwaphela. Kwaye nazi iingcamango eziphosakeleyo ezisenze sacinga ngalo mbandela kwakhona.
Umbono ongalunganga #1.
Besinethemba lokuba umgangatho uya kusinika uluhlu lokukhangela oluneenkcukacha, uluhlu lwemigaqo-nkqubo kunye namanye amaxwebhu asemthethweni. Enyanisweni, kwavela ukuba i-ISO/IEC 27001 yiseti yeemfuno zenkqubo yolawulo lokhuseleko lolwazi ngokwayo kunye nenkqubo eyakhiwayo. Ngokusekwe kubo, bekuyimfuneko ukugqiba ngokuzimeleyo ukuba yintoni oza kuyibhala/uyiphumeze kwinkampani yethu ukuthobela iimfuno zomgangatho.
Umbono ongalunganga #2.
Sasikholelwa ngokunyanisekileyo ukuba kwakuya kwanela ukuba sifundisise uxwebhu olunye size siluphumeze ngexesha nje elifutshane ngokwentelekiso sisodwa. Enyanisweni, ngelixa sifunda uxwebhu, siye saqaphela ukuba zingaphi imigangatho ehambelanayo umgangatho wethu "ubambelela" kuyo, ukuba mingaphi imigangatho ekufuneka siqhelane nayo (ubuncinane bungaphezulu). "I-cherry" kwikhekhe yayikungabikho kweetekisi zemigangatho yangoku kwindawo yoluntu - kwafuneka zithengwe kwiwebhusayithi esemthethweni ye-ISO.
Umbono ongalunganga #3.
Sasiqinisekile ukuba siya kufumana yonke into esiyidingayo ukulungiselela isatifikethi kwimithombo evulekileyo. Inene bekukho izinto ezininzi kwi-ISO 27001 kwi-Intanethi, kodwa bezinqongophele kwizinto ezithile. Kwakungekho lula ukuyiqonda imiyalelo yesinyathelo-nge-nyathelo yokulungiselela isatifikethi, kunye neemeko zokwenyani zeenkampani eziphumeze lo mgangatho.
Umbono ongalunganga #4.
Siza kubhala iipolisi, kodwa aziyi kusebenza! Ewe, yinyani, inkampani yethu sele inemithetho emininzi kakhulu, akukho mntu uya kuhambelana nemigaqo-nkqubo emitsha engama-3. Enyanisweni, ngethamsanqa, abasebenzi bethu bathathe umsebenzi wokulawula imithetho emitsha ngokuthembekileyo kwaye baphumelele ngempumelelo uvavanyo lolwazi lwamaxwebhu enkqubo yokhuseleko lolwazi.
Umbono ongalunganga #5.
Ngelo xesha, sasingakwazi ukuzihlolisisa ngokucacileyo iingenelo esinokuzifumana kwimigudu yethu. Ngelo xesha, inani lezicelo zesi satifikethi lalingekho likhulu kangako, kwaye sasinezitshixo zethu kunye noyena mxhasi ufunwa kakhulu kwakudala phambi koqinisekiso. Amava abonise ukuba siphumelele ngaphandle komgangatho.
Ngaxa lithile, siye sabona ukuba sasivala ngesiphithiphithi esinye okanye esinye isikhewu esavelayo ngenxa yeemfuno zomxhasi. Ngalo lonke ixesha siza nemigaqo-nkqubo emitsha okanye izisombululo. Kwaye ekugqibeleni ngokuzimeleyo safikelela kwisigqibo sokuba kuya kuba lula kakhulu ukucwangcisa inkqubo, eya kuthi isisindise iindleko ezininzi zabasebenzi kwixesha elizayo. Umgangatho wawulungiselelwe ukwenza lula lo msebenzi.
Ngoku, kwiminyaka emibini kamva, sibona ukunyuka kwenani lezicelo kunye nomdla kulo mbandela kubathengi abakhulu bamazwe ngamazwe.
Isigqibo sokugqibela.
Ukuqukumbela, singathanda ukuthi iinkokeli zethu zeshishini zifumene isatifikethi se-ISO/IEC 27001, esiye sanyanzela bonke abanye ababoneleli abakhulu (kubandakanywa nathi) ukuba bacinge ngalo mbandela. Ngokungathandabuzekiyo, umgca omhle kwizinto zokuthengisa zenkampani - kwiwebhusayithi, kwiintanethi zentlalo, kwiincwadana zentengiso, njl. - inokuthathwa njengebhonasi emnandi, kodwa ngaba kufanelekile ukuchitha izixhobo ezininzi kuyo? Sagqiba ngokwethu ukuba kuthi oku kungaphezulu nje komgca omhle, kwaye sizibandakanye kule projekthi.
umthombo: www.habr.com