Download Contents

GISMS (Government Information Security Management System) in Brief
Objective
Benefit
To continuously
secure information of
Royal Government of
Cambodia.
To help ensure
the governance continuity of
Royal Government of
Cambodia.
Risk of
Insufficient
IS Management
Assuring confidentiality
Assuring safeness / fairness
Information
Leakage
Maintaining integrity
Maintaining transparency
Information
Falsification
Keeping availability
Keeping stability
Service Disabled
Characteristic
• GISMS is based on ISO27001, the global standard.
• Top-Down approach gets GISMS the most effective as the indispensable and mandatory
business.
• PDCA (Plan-Do-Check-Action) cycles can gradually enhance information security step by step.
• Government unified ISMS can keep the better level of information security, by researching private
and public sectors in Cambodia and by considering the global trends, with the minimum power.
Risk Evidence
• RGC is being increasingly exposed to the cyber attacks of outsiders as it utilizes IT and internet
more as identified the notably high ratio of virus infection reaching 35%.
6
Risks and Measures Example
There exist present and clear dangers of information security and it needs to react proactively.
Measure
<IS Three Elements> <Protection>
Risk
<Vulnerability>
<Threats>
Information Leakage
Destroying Media
Disposing
Social Engineering
Room Entry/Exit Control Normal FD/CDs
Confidentiality
Software Patch File-sharing Software Usage
Virus/Worm
Anti-Virus Software
Security Hole
Strong Password Entry Simple Password
Password Cracking
Compulsory
Information Falsification
Access Control
Improper Settings
Hacking/
Access Logging
of Server
Unauthorized Access
Information
Encryption
Integrity
Plain Text
Security
Sniffing
Digital Signature
Communication
Fingerprint
Trojan Horse
Security Hole
Firewall/DMZ
Wiring Laptop PC
Availability
Service Disabled
Laptop PC
Left in a car
Internet Connection
ID/Password Stolen
Cut-off
Data Backup
No UPS
& Recovery Procedure
Theft
Denial of
Service Attack
Electric Outage
7
8