UBND TiNH BINH DTNH CONG HOA XA HQI CHU NGHiA vrcr NAMsa TAl NGUYEN vA Men TRlfONG DQc l~p - T., do - H~nh phuc

S6: 464 IQD-SrnMT Binh Dinh, ngay Oithang M ndm 2017

QUYETDINHBan hanh Quy ch~ bao dam an toan, an ninh thong tin trong hoat d{mg

rrng dung cong ngh~ thong tin cua SO-Tai nguyen va Moi truong Binh Dinh

GIAM DOC sa TAl NGUYEN vA MOl TRUONG

Can cir Luat Cong nghe thong tin ngay 29/6/2006;

Can cir Luat An toan thong tin mang ngay 19/11/2015;

Can cir Quyet dinh s6 22/QD-UBND ngay 12/7/2012 cua UBND tinhBinh Dinh v~ viec ban hanh Quy ch~ dam bao an toan, an ninh thong tin tronghoat dong irng dung cong nghe thong tin cua cac co quan quan 1y hanh chinhnha nuoc tinh Binh Dinh;

Can cir Quyet dinh s6 366/QD-UBND ngay 03/0212016 cua UBND tinhban hanh Quy dinh chirc nang, nhiem V\), quyen han va co c~u t6 chirc cua SoTai nguyen va Moi tnrong;

Xet d~ nghi cua Chanh Van phong Sa va Giam d6c Trung tam Cong nghethong tin,

QUYETDINH:

Di~u 1. Ban hanh kern theo Quyet dinh nay "Quy ch~ bao dam an toan, anninh thong tin trong hoat dong trng dung cong nghe thong tin cua So Tai nguyenva Moi tnrong Binh Binh".

Di~u 2. Quyet dinh co hieu hrc thi hanh k~ nr ngay ky.

Di~u 3. Chanh Van phong Sa, Giam d6c Trung tam Cong nghe thong tin,lanh dao va cong chirc, vien chirc cac phong, don vi tnrc thuoc Sa chiu trachnhiern thi hanh Quyet dinh nay./.-,~

NO'i nhiin:- Nhu dibu 3;- GD va cac PGD Sa:- Sa Thong tin va Truyen thong:- Luu: YT, YP, NH.19lj _

UBND TiNH BINH £)~H C<)NG HOA xA H<)I CHU NGHiA VI~T NAMso TAl NGUYEN vA MOl TRUONG DQc I~p - T., do - H~nh phuc

QUYCHE

Bao dam an toan, an ninh thong tin trong hoat dQng trng dungcong ngh~ thong tin ciia S6' Tai nguyen va Moi trtrimg

(Kem theo Quyet dinh s6 464 IQD-STNMT ngay01 IhangA1 niim 2017

cua Giam d6c Sa Tai nguyen va Moi truimg)

Chuong IQUY DINH CHUNG

Di~u 1. Pham vi, d&i ttrQ11gap dung va muc dich

1. Quy ch~ nay quy dinh v~ bao dam an toan, an ninh thong tin trong hoatdong irng dung cong nghe thong tin cua Sa Tai nguyen va Moi tnrong tinh BinhDinh.

2. Quy ch~ nay ap dung d6i voi t~t ca cac phong chuyen mon, don vi truethuoc va can bQ, cong chirc, vien chirc thuoc Sa.

3. Muc dich dam bao an toan, an ninh thong tin: Giam thieu diroc cacnguy co gay Sl,T c6 m~t an toan, an ninh thong tin va dam bao an toan v~ dfr lieu,cac thi~t bi cong nghe thong tin trong hoat dQng irng dung cong nghe thong tincua Sa.

Di~u 2. Ghii thich tir ngfr

1. An toan, an ninh thong tin: La Sl,T bao v~ thong tin va h~ thong thong tintranh bi truy cap, sir dung, ti~t lQ, gian dean, sua d6i hoac pha hoai trai phepnh~m bao dam tinh nguyen ven, tinh bao mat va tinh kha dung cua thong tin.

2. H¢ thong thong tin: La t~p hQ'P thi~t bi phan cling, phan m~m va co sadir li~u diroc thi~t l~p phuc vu muc dich tao lap, cung cap, truyen dira, thu thap,xu ly, hru trir va trao d6i thong tin nhir: H~ thong mang nQi bo, H~ thong Vanphong dien nr, thir di~n nr, trang thong tin dien tir; ...

3. Xdm pham an toan, an ninh thong tin: La hanh vi truy cap, sir dung, ti~tlQ, lam gian doan, sua d6i, lam sai lech chirc nang, pha hoai trai phep thong tinva h~ thong thong tin.

4. Nguy co mdt an loan, an ninh thong tin: La nhirng nhan t6 ben tronghoac ben ngoai co kha nang anh huang toi trang thai an toan thong tin. '2

2

5. Danh gia rui ro an toan, an ninh thong tin: La viec xac dinh, phan tichnguy co mftt an toan thong tin co thS co va dir bao mire dQ, pharn vi arm huangva kha nang gay thiet hai khi xay ra sir c6 mftt an toan thong tin.

6. Quan If; rui ro an toan, an ninh thong tin: La viec thirc hien danh giarui ro an toan thong tin, xac dinh yeu c~u bao v~ thong tin va h~ thong thong tinva ap dung giai phap phong, chong, giam thiSu thiet hai khi co sir c6 mat an toanthong tin.

7. H¢ thong mc;mg LAN: La h~ thong mang noi bQ dung dS kSt n6icac may tinh trong mot pham vi co quan, don vi. Cac may tinh trong mang LANco thS chia se tai nguyen voi nhau nhu: chia se t~p tin, may in, may quet va mots6 thiSt bi khac.

8. Phdn m~m t19C hai: La phan m~m co kha nang gay ra hoat dong khongbinh thirong cho mot phan hoac toan bQ h~ thong thong tin hoac thuc hien saochep, sua dbi, xoa bo trai phep thong tin luu trir trong h~ thong thong tin.

Di~u 3. Cae hanh ~i hi nghiem eim

1. Ngan chan trai phap luat viec truyen tai thong tin tren mang; can thiep,truy cap, gay nguy hai, xoa, thay dbi, sua chira, sao chep, lam sai lech trai phepthong tin tren mang;

2. Can tro trai phap luat, gay anh huang toi sir hoat dong binh thuong cuah~ thong thong tin hoac can tro trai phap luat, gay anh huang toi kha nang truynhap hop phap cua ngiroi sir dung toi h~ thong thong tin;

3. Tftn cong, vo hieu hoa trai phap luat lam mftt tac dung cua bien phapbao ve an toan thong tin cho h~ thong thong tin; loi dung so ho, diSm ySu cua hethong thong tin, tftn cong, chiSm quyen di~u khiSn trai phep d6i voi h~ thongthong tin;

4. Phat tan thir rac, tin nhan rac, phan mem dQc hai, thiet l~p h~ thongthong tin gia mao, lira dao;

5. Loi dung mang dS truyen ba thong tin, quan diem, thirc hien cac hanhvi gay hai dSn an ninh quoc gia, tr~t nr, an toan xii hoi, loi ich quoc gia trenmang; pha hoai khoi dai doan kSt toan dan; tuyen truyen chiSn tranh xam hroc,khung b6; gay h~n thu, mau thuan giira cac dan toe, s~c tQc, ton giao va baingoai;

6. Loi dung mang dS truyen ba trai phep tai lieu, hinh anh, am thanh hoacdang thong tin khac nham kich dong bao lire, dam 0, d6i truy, tQi ac, t~ nan xiihoi, me tin di doan, pha hoai thu~n phong, my tuc cua dan toe; boi nho, gay thuhan, xam hai toi quyen va loi ich hop phap cua tb chirc, ca nhan; 1:')

---

3

7. Cac hanh vi bi nghiern c~m khac theo quy dinh cua phap luat,

Clnrong II

BAo DAM AN ToAN, AN NINH THONG TIN

Di~u 4. Cac bi~n phap quan ly ky thu~t err ban trong cong tac bao dam antoan, an ninh thong tin

1. r6 chtrc mo hinh mang: Cai dat, c~u hinh, t6 chirc h~ thong mang theomo hinh May khach/May chu (Client/Server), han che sir dung mo hinh mangngang hang. Khi thi~t l~p cac dich vu tren moi tnrong mang Internet, chi cungcap nhimg chirc nang thi~t y~u nhat bao dam duy tri hoat dong cua h~ thongthong tin; han ch~ str dung chirc nang, cong giao tiep mang, giao thirc va cacdich vu khong c~n thi~t.

2. Quan If; h? thong mang khong day (Wireless LAN): Khi thi~t lap mang. khong day, c~n thi~t l~p cac thong s6 an toan va dinh ky 03 thang hoac 06 thangthay d6i mat khau truy cap nh~m tang cuong cong tac bao m~t.

3. r6 chuc quan If; tai khoan: Ti~n hanh ra scat dinh ky cac tai khoan vadinh danh nguoi dung trong h~ thong thong tin. Huy tai khoan, quyen truy caph~ thong thong tin, thu h6i lai dt ca cac tai sari lien quan toi h~ thong thong tin(khoa, the nhan dang, thu rnuc luu trir, ... ) d6i voi can bQ, cong chirc, vien chirc,ngiroi lao dong khong con su dung.

4. Quan If; dang nhdp h? thong: Cac h~ thong thong tin e~n gioi han s6l~n dang nhap vao h~ thong, tir dong khoa tai khoan khi lien tuc dang nhap saivirot qua s6 l~n quy dinh. T6 chirc theo doi, giam sat t~t ca cac ·phuang phapdang nhap nr xa, nh~t la cac tnrong hop dang nhap vao h~ thong voi muc dichquan trio Tang cirong viec StT dung mang rieng ao (VPN - Virtual PrivateNetwork) khi co nhu e~u lam viec tir xa; yeu e~u nguoi sir dung dat mat kh~uvoi dQ an toan cao.

5. Quan If; nhdt ky si: kien (Iogfile): H~ thong thong tin c~n ghi nhan cacSlJ kien: qua trinh dang nhap h~ thong, cac thao tac e~u hinh h~ thong, qua trinhtruy xuat h~ thong ... Thirong xuyen ki~m tra, sao luu (backup) cac nhat ky SlJ

kien theo tirng thang d~ theo doi, xac dinh nhirng SlJ kien da xay ra cua h~ thongva han ch~ viec tran nhat kY SlJ kien gay anh huong d~n hoat dong cua h~ thong.

6. Chong phdn mem dr)c hai: Tri~n khai cac ph~n m~m chong ma dQe trencac may tinh, thi~t bi di dong trong mang d~ phat hien, loai tnr phan mern dochai. Thirong xuyen c~p nhat cac phien ban moi, cac ban va 16i cua cac phanm~m chong virus d~ bao dam chuang trinh quet virus cua co quan tren cac may

Ii'.::-

4

chu, may tram luon duoc cap nhat moi nhat; thiet I~p chS dQ quet thirong xuyenit nhat tuftn 01 lftn. Thuong xuyen c~p nhat ban va cac 16 heng bao m~t cua h~di~u hanh va cac phftn mem irng dung tren may tinh d~ han chS t6i da rui ro meltan toan thong tin.

7. T6 chtrc quan If; tai nguyen: Ki~m tra, giam sat chirc nang chia se thongtin (Network File and Folder Sharing). T6 chirc celp phat tai nguyen tren maychu theo danh muc thir muc cho nrng phong, don vi tI1!C thuoc; khuyen caonguoi su dung din nh~c viec chia se tai nguyen tren may dang sir dung, tuyet d6ikhong diroc chi a se toan bQ 6 cirng, Khi thuc hien viec chia se tai nguyen trenmay chu hoac tren may C\lCbQ cftn sir dung mat khau d~ bao v~ thong tin.

8. Thiit ldp co chi sao luu va phuc h6i cho may chu, may tram va h?thong thong tin co lien quan: May chu va may tram cftn duoc thirc hien cac bienphap sao hru dfr lieu, thong tin quan trong nh~m phuc vu cho cong tac phuc h6idir lieu mot each nhanh nhelt.

9. Cac bien phap ley thudt bao dam an toan cho Cong/ Trang thong tindien tir (g9i tat la trang web):

a) Xac dinh celu true thiSt kS trang web: Quan Iy toan bQ cac phien bancua ma nguon, phoi hop voi don vi thirc hien dich vu hosting t6 chirc mo hinhtrang web hop Iy tranh kha nang teln cong leo thang d?c quyen. Yeu cftu don vicung celp dich vu hosting phai cai d?t cac h~ thong phong v~ nhu nrong lira(firewall), thiSt bi phat hien/phong chong xam nhap (IDS/IPS) a mire irng dungweb (WAF- Web Application Firewall).

b) V~n hanh irng dung web an toan: Cac trang web khi dira vao sir dunghoac khi b6 sung them cac chirc nang, dich vu cong moi cftn lien h~ voi Trungtam Cong nghe thong tin va Truyen thong (So Thong tin va Truyen thong) hoaclien h~voi cac t6 chirc an ninh rnang danh gia ki~rri dinh nh~m tranh duoc cac16i bao mat thuong xay ra tren irng dung web.

c) ThiSt I~p va cau hinh co so dfr lieu an toan:

- Luon c~p nhat ban va 16i moi nhelt cho h~ quan tri co so dfr lieu; sir dungcong cu d~ danh gia, tim kiem 16 hong tren may chu co so dfr lieu;

- GO-bo cac co so dtr lieu khong sir dung;

- Co cac co chS sao luu dfr lieu, tai li~u hoa qua trinh thay d6i celu truebang each xay dung nhat ky CSDL voi cac nQi dung nhu: nQi dung thay d6i, lydo thay d6i, thai gian, vi tri thay d6i, ...

d) Ph6i hQ1Jvoi cac nha cung celp dich vu hosting xay dung phirong anphuc h6i trang web, trong do chu y m6i thang thirc hien viec backup toan bQ nQi

Ti!

5

dung trang web 0 1 l~n bao g6m ma nguon, co sa dfr lieu, dfr lieu phi c~u true, ...d~ bao dam khi co su c6 co th~ kh~c phuc lai ngay trong vong 24 gio.

Di~u 5. Cac bi~n phap quan ly v~n hanh trong cong tac bao dam an toan, anninh thong tin

1. D6i voi cac phong, Gemvi true thuoc:

a) Thirong xuyen ph6 bien, huang dfin, trang bi cac ki~n thirc, Icy nang v~an toan thong tin cho can bQ, cong chirc, vien chirc d~ van hanh, khai thac, sudung cac h~ thong thong tin mot each an toano

b) Khong sir dung may tinh co k~t n6i mang Internet d~ danh may, in, hrutrir tai lieu mat. MQi thong tin thuoc bi mat Nha mroc khi hru trfr va truyen ditren moi twang mang phai diroc ma hoa va quan ly theo guy dinh cua phap luatv~ co yeu, khuyen khich irng dung, sir dung chir ky s6 trong giao dich dien nr.

c) Viec thanh ly, tieu huy thiet bi, phan mem, v~t mang thong tin cua cacco quan phai dam bao yeu c~u khong d~ 1Q,IQt thong tin nha mroc; phai co guytrinh cu th~ va phai hru gifr h6 sa, bien ban thanh ly, tieu huy.

2. D6i voi can bo chuyen trach Cong nghe thong tin (CNTT):

a) Tham rmru cho lanh dao co quan, don vi v~ cong tac bao dam an toanthong tin; van hanh an toan cac h~ thong thong tin cua ca quan, don vi; tri~nkhai cac bien phap bao dam an toan thong tin cho t~t ca can bo, cong chirc, vienchirc trong co quan, don vi minh.

b) N~m virng va thuc hien nghiern tuc cac guy dinh v~ bao v~ bi mat NhaNurre. Thirong xuyen nr cap nhat cac ki~n thirc v~ an toan thong tin, nguy catiem :in co th~ gay m~t thong tin va cac bien phap phong tranh khi ti~n hanh cachoat dong quan ly hay ky thuat nghiep vu.

c) Thirc hien viec danh gia, bao cao cac rui ro gay mat an toan thong tinva mire dQ nghiern trong cua cac rui ro do. Cac rui ro gay m~t an toan thong tinco the xay ra do sir truy cap trai phep, sir dung trai phep, mat, thay d6i hoac phahuy thong tin va h~ thong thong tin.

d) Ap dung bien phap quan ly va ky thuat phu hQ'P voi tieu chuan, guychuan ky thuat v~ an toan thong tin d~ phong, chong nguy co, khac phuc sir c6an toan thong tin.

e) Ph6i hQ'Pchat che voi Sa Thong tin va Truyen thong, co guan Cong antrong cong tac phong ngira, d~u tranh, ngan chan cac hoat dong xarn pharn antoan, an ninh thong tin.

3. D6i voi can bo, cong chuc, vien chtrc va nguoi lao dong:

6

a) Thirong xuyen c~p nhat nhtrng chinh sach, quy trinh, thu tuc an toanthong tin cua don vi cling nhir thirc hien nhtrng huang d~n vS an toan thong tincua co quan hoac can bQ chuyen trach cong nghe thong tin.

b) Han ch~ viec sir dung chirc nang chia se tai nguyen, khi sir dung chircnang nay cAn b~t thuoc tinh bao mat bang mat khau va thirc hien viec thu h6ichirc nang nay khi da sir dung xong.

c) Cac tai khoan dang nhap cAn phai d~t mat khau, thay d6i mat khau dinhky, cAn dang xu~t tai khoan khoi he thong khi khong con sir dung, Hoac ngatk~t n6i mang d~ tranh bi cac tin t~c Ioi dung, diSu khi~n may tinh tit xa.

d) Chi sir dung H~ thong HQp thu dien tir (mail) cong vu, H~ thong Vanphong dien nr lien thong, Ccng/Trang thong tin di~n nr, cac h~ thong thong tinkhac cua co quan Nha mroc d~ giri, nhan, dang tai van ban dien nr trong hoat dongcua Sa.

e) SU dung chirc nang ma hoa a mire he diSu hanh d~ bao dam cac dfr lieunhay earn nhir tai khoan, mat khau, cac t~p tin quan trong, v.v ... duoc ma hoa.Cac t~p tin dinh kern thir dien nr, tai xuong tit Internet hoac san chep tit thi~t bihru tm cAn duoc ki~m tra d~ tranh lay nhiem cac phan mem dQc hai.

Di~u 6. Xay d1}'ng va ap dung quy trinh bao dam an toan thong tin

Cac co quan, don vi phai xay dung va ap dung quy trinh bao dam an toancho h~ thong thong tin nham giam thi~u cac nguy co gay ra sir c6, tao dieu kiencho viec kh~c phuc va truy v~t trong tnrong hop co su c6 xay ra.

NQi dung cua quy trinh bao gom cac biroc co ban sau:

a) L~p k~ hoach bao v~an toan cho h~ thong thong tin;

b) Xay dung h~ thong bao v~ an toan thong tin;

c) Quan ly va v~n hanh h~ thong bao ve an toan thong tin;

d) Ki~m tra danh gia hoat dong cua h~ thong bao v~ an toan thong tin;

e) Bao tri va nang c~p h~ thong bao v~ an toan thong tin.

Chuong III

TIUCH NHI¥M BAo DAM AN ToAN, AN NINH THONG TIN

Di~u 7. Trach nhiem cua Lanh d~o phong, don vi tr1}'c thu(}c

1. Quan tam va Uti tien b6 tri kinh phi cho viec tri~n khai cac bien phapbao dam an toan thong tin trong hoat dong irng dung CNTT cua co quan, don vi.

T£

7

2. Xay dung quy che, quy trinh nQi bQ v~ bao dam an toan thong tin theoquy dinh tai Di~u 6 va cac quy dinh cua phap luat.

3. Khi co su c6 mat an toan thong tin phai kip thai chi dao khftc phucngay, iru tien sir dung can bQ kY thuat chuyen trach trong co quan, don vi vathong bao bang van ban cho Sa Thong tin va Truyen thong, co quan c~p trenquan ly tnrc tiep dS bi~t va ph6i hop xu lY.

4. Ph6i hop chat che voi co quan Cong an trong cong tac phong ngira, d~utranh, ngan chan cac hoat dong xam pham an toan thong tin. Tao di~u kien thuanloi cho cac co quan chirc nang tham gia khftc phuc su c6 va thirc hien dung theohuang d~n.

5. Bao cao tinh hinh va k~t qua thirc hien cong tac bao dam an toan thongtin tai co quan, don vi va giri Sa Thong tin va Truyen thong khi co yeu cau.

Di~u 8. Trach nhiem ciia Trung tam Cong ngh~ thong tin

1. Tham rmru giup Giam d6c Sa trong cong tac quan ly v~ cong tac dambao an toan thong tin trong co quan Sa Tai nguyen va Moi tnrong,

2. Chu tri tham rmru lanh dao Sa, phoi hop Van phong Sa t6 chirc ki~m tradinh ky hoac dQt xuat khi phat hien co d~u hieu, hanh vi vi pham an toan thongtin, xu ly nghiern cac hanh vi vi pham an toan thong tin theo quy dinh cua phapluat.

3. Huang d~ cac tieu chi va quy trinh kY thuat nh~m dam bao an toanthong tin; ki~m tra cong tac dam bao an toan thong tin; cir nhan vien tham giacac chuang trinh dao tao, b6i dirong va tuyen truyen v~ an toan thong tin.

4. Huang d~n cac phong, don vi thuc hien cac bao cao v~ sir c6 m~t antoan thong tin va k~t qua thirc hien cong tac dam bao an toan thong tin.

5. Tuy theo mire dQ su c6, phoi hop cac don vi co lien quan huang d~n xuly, img ciru cac sir c6 m~t an toan thong tin.

6. Dira nQi dung dam bao an toan thong tin van K~ hoach irng dung CNTThang nam cua Sa; du toan kinh phi dS triSn khai cong tac dao tao, huang d~ndam bao an toan, an ninh thong tin cho cac h~ thong thong tin cua Sa.

Di~u 9. Trach nhi~m cua can b{), cong chirc, vien chirc

1. Nghiern chinh ch~p hanh cac quy ch~ nQi bQ, quy trinh v~ an toan thongtin cua co quan ciing nhir quy dinh khac cua phap luat, nang cao y thirc canhgiac va trach nhiem bao dam an toan thong tin tai don vi.

2. Khi phat hien sir c6 phai bao ngay voi co quan c~p tren va bQ phanchuyen trach CNTT dS kip thai ngan chan, xu ly. 'Tqj

8

3. Co trach nhiem bao ve, quan ly tai khoan diroc c~p tarn thai (neu co) dSdang nhap van cac h~ thong thong tin thirc hien giao dich voi cac co quan quacac dich vu cong tnrc tuyen, H~ thong mail cong vu, H~ thong Van phong diennr lien thong, khong giao tai khoan cho ngiroi khac sir dung,

CHUONGIV

KHEN THUONG, KY LU~T

Di~u 10. Cac phong chuyen mon, don vi, ca nhan tnrc thuoc So' phai chap hanhnghiem Quy ch~ nay. N~u vi pham thi tuy theo tinh chat, mire dQ se bi xu ly, kyluat theo quy dinh.

Di~u 11. Cac phong chuyen mon, don vi, ca nhan thirc hien t6t Quy ch~ naydiroc xet thi dua khen thirong hang nam. Ngiroi co cong phat hien, ngan chankip thai cac hanh vi vi pham se dircc khen thirong theo Quy ch~ thi dua khenthirong cua So'.

CHUONGV

TO CHUC THVC HltN

Di~u 12. Quy ch~ nay diroc ph6 bi~n d~n t~t ca cong chirc, vien chirc, nhan vientrong co quan, don vi thuoc So' va co hieu lire kS tir ngay kY ban hanh.

Di~u 13. Trong qua trinh thirc hien neu c~n b6 sung chinh sua, cac ca nhan, donvi giri kien nghi v~ Trung tam Cong nghe thong tin dS tong hop, trinh Giam d6cSo' xem xet, quyet dinh.

Di~u 14. Giam d6c Trung tam Cong nghe thong tin; Chanh Van phong So'; Thutnrong cac phong chuyen mon, don vi tnrc thuoc So', trong pham vi chirc nang,nhiern vu co trach nhiern chi dao, huong d~n, kiem tra v~ don d6c thirc hien Quych~ nay.l.!1l

GIAMDOC

D~ng Trung Thanh

9