12544 evsjv‡`k †M‡RU, AwZwi³, GwcÖj 6, 2014 (P) Z_¨ wbivcËv cwjwmi mnvqK KvMRc‡Îi Drm, eY©bv h_v-GKwU we‡kl Z_¨ e¨e¯’vi Rb¨ wb‡`©kbvewj Ges Kvh©cÖYvjx A_ev Z‡_¨i wbivcËv welqK AvBb-Kvbyb hvnv e¨enviKvix‡`i gvwbqv Pwj‡Z nB‡e| (2) GB Z_¨ wbivcËv cwjwm‡K Aek¨B ms¯’vi wfZ‡i mKj e¨enviKvixi Kv‡Q Ggbfv‡e †cuŠQvBqv w`‡Z nB‡e hvnv‡Z AvMÖnx cvVK I e¨enviKvixMY Bnv mn‡R eywS‡Z cv‡i| (3) Z_¨ wbivcËv cwjwmi bgybv QK 1. cÖ¯Ívebv 9. SzuwK e¨e¯’vcbv 2. msÁv 10. wbivcËv wbqš¿Y 3. f~wgKv 11. wbivcËv cwjwmmg~n, Bnv‡`i g~jbxwZ, gvb`Ð I GB¸wji h_vh_ AbymiY 4. D‡Ïk¨ 12. Bw݇W›U e¨e¯’vcbv 5. †ÿÎ/AvIZv 13. cwjwm m¤úwK©Z m‡PZbZv Ges Z_¨ wbivcËv welqK cÖwkÿY 6. cwjwm ev¯Íevqb I cwiexÿY 14. Z_¨m~‡Îi eY©bv (wb‡`©kbvcÎ/c×wZ/cwiwkó) 7. Z_¨ m¤ú` I †kÖwYKiY 8. f~wgKv I `vq`vwqZ¡ 19| cwiwkó-L: Z_¨m~Î Appendix B: References (1) CoBIT: IT Governance Framework (2) ITIL: IT Services Management (3) ISO/IEC 27000:2009, Information security management systems Overview and vocabulary (4) ISO/IEC 27001:2005, Information security management systems Requirements (5) ISO/IEC 27002:2005, Code of practice for information security management (6) ISO/IEC 27003, Information implementation guidance security management system (7) ISO/IEC 27004, Information security management Measurement (8) ISO/IEC 27005:2008, Information security risk management