关于网上支付的安全性审计

wuyuanya

最近中央电视台报道了美国MASTERCARD的信用卡系统被黑客入侵,损失较大.如何防范和减少网络系统风险并与之相关的审计要求.在今年的考试中应有一定的份量.\r\n      请问网络安全审计从何处入手?有那方面的资料可以参考?\r\n\r\n     另外,根据版主的建议,本人将把第一章的读后感和需要注意的问题及重点列出来.

降龙十八掌

CISA对于战争地区的IS风险的考核力度也会加大

wangderek

I am involved in audit project of payment gateway. Our audit is to verify the security mechanism of firewall, router, payment gateway, CA infrasture,network infrasture, operating system, database. We aslo vefity whehter change control, physical security, user maintenance procedure, anti-virus, monitor of log, backup procedure, drill of system recovery is in place.