RAKKSSA VERSI 1.0, APRIL 2016
2.1.1 Prinsip “Perlu-Tahu” ............................................................................... 16
2.1.2 Hak Keistimewaan Minimum .................................................................. 16
2.1.3 Pengasingan Tugas ............................................................................... 17
2.1.4 Kawalan Capaian Berdasarkan Peranan ............................................... 17
2.1.5 Peminimuman Data ................................................................................ 17
2.2 Teknologi ...................................................................................................... 17
2.2.1 Peringkat Pemprosesan Data ................................................................ 17
2.2.2 Elemen Dalam Persekitaran Pengkomputeran ...................................... 18
2.2.3 Kawalan Capaian ................................................................................... 20
2.2.4 Kriptografi ............................................................................................... 21
2.2.5 Pengasingan .......................................................................................... 21
2.3 Proses .......................................................................................................... 22
2.3.1 Konfigurasi Asas .................................................................................... 22
2.3.2 Kawalan Perubahan Konfigurasi ............................................................ 22
2.3.3 Sandaran................................................................................................ 23
2.3.4
Kitaran Pengurusan Aset ...................................................................... 23
2.4 Manusia ........................................................................................................ 24
2.4.1 Kompetensi Pengguna ........................................................................... 24
2.4.2 Kompetensi Pelaksana........................................................................... 24
2.4.3 Peranan.................................................................................................. 25
3.0
KESAN ........................................................................................................ 26
3.1
Pemantauan Berterusan ............................................................................. 26
3.1.1 Teknologi................................................................................................ 26
3.1.2 Perkongsian Wawasan Dan Kecerdasan ............................................... 27
3.2
Anomali dan Peristiwa ................................................................................. 27
3.2.1 Aliran Data Asas .................................................................................... 27
3.2.2 Pengagregatan Data .............................................................................. 27
3.2.3 Korelasi .................................................................................................. 27
3.2.4 Pemberitahuan ....................................................................................... 27
3.2.5 Kenal Pasti Impak .................................................................................. 27
4.0
TINDAK BALAS .......................................................................................... 28
4.1 Pelan Tindak balas ........................................................................................ 28
4.2
Komunikasi.................................................................................................. 28
4.3
Analisis ........................................................................................................ 28
4.4
Mitigasi ........................................................................................................ 28
© RAKKSSA
ii