Tsallaka zuwa babban abun ciki
Tuntuɓa
BilgeQor
Nazarin Misalan Aiki

Nazarin Lamuran Tsaro

Bayanan ayyukan Tsaro

Taƙaitattun bayanai masu tsari na ayyukan nazarin tsaro, ƙarfafa tsaro, da shawarwari da aka kammala a kasuwanninmu daban-daban.

Waɗannan su ne ainihin ayyukan da aka kammala. An ɓoye sunayen abokan ciniki da bayanan da za su iya bayyana su don kiyaye sirri. An bayyana sakamakon ne cikin iyakokin kowane aikin da aka tabbatar.

34Ayyuka
6Nau'in aiki
68Kasuwanni
16masana'antu
Service
Masana'antu
Mahalli
Aikin da aka kammala
Masana'antu: Ayyukan KuɗiYankin: Australia
Nazarin Tushe na Essential Eight — matakin StandardAinihin aikin da aka kammala · An ɓoye bayanan abokin ciniki don kiyaye sirri

Wani kamfanin ba da sabis na kuɗi da yake shirin sabunta inshorar haɗurran tsaron yanar gizo ya buƙaci bita mai tsari na matakan kariyarsa bisa tsarin Essential Eight. Ƙungiyoyin cikin kamfanin ba su da ma'aikatan da aka ware domin gudanar da tantancewar ba tare da katse ayyukan yau da kullum ba.

Abubuwan da suka kasance cikin iyakar aikin

Bita kan dabarun rage haɗari guda takwas kamar yadda aka ayyana su a tsarin Essential Eight na Australian Signals Directorate. Tantancewar ta shafi babban muhallin tsarin ƙungiyar da ake amfani da shi wajen gudanar da ayyuka da matakan sarrafa damar shiga na masu gudanarwa. An ayyana iyakar aikin kuma an tabbatar da ita a rubuce kafin a fara aiki.

Abin da aka yi nazari

  • Saitunan sarrafa aikace-aikace a duk endpoints na farko
  • Yadda aka aiwatar da gyare-gyaren manhaja a sabis ɗin da ake iya shiga ta intanet
  • Tsarin saitin macro na Office da sarrafa manufofi
  • Saitunan ƙarfafa tsaron manhajar mai amfani
  • Ƙuntatawa na ba da dama ta gudanarwa
  • Kasancewar gyare-gyaren tsarin aiki na baya-bayan nan a duk kadarorin da ke cikin iyakar aikin
  • Yawan asusun gudanarwa da tabbatar da shaidar mai amfani ta amfani da abubuwa da yawa ya shafa
  • Saitunan yin kwafin ajiyar bayanai na yau da kullum da hanyoyin dawo da bayanai da aka gwada

Abin da aka kawo

  • Rubutaccen rahoton bitar ma'aunin farko tare da matakin balaga na kowace dabara
  • Rajistar abubuwan da aka gano, da aka jera bisa fifiko, tare da shawarar tsarin gudanar da gyare-gyare
  • Takaitaccen bayani ga manyan shugabanni wanda ya dace da gabatarwa ga kwamitin gudanarwa ko kamfanin inshora
  • Bayanan jagorar gyara ga kowane abin da aka gano wanda ke buƙatar ɗaukar mataki

Ba a haɗa shi ba

  • ×Gwajin kutsawa ko ƙoƙarin amfani da raunin tsarin a aikace
  • ×Binciken kayayyakin more rayuwa a waje da iyakar da aka ƙayyade
  • ×Bayar da takardar shaida ko takardar shaidar bin ƙa'idoji
  • ×Sa ido na ci gaba ko ayyukan tsaro da ake gudanarwa

Abin da ya canja bayan aikin

Ƙungiyar ta miƙa rahoton bita ga kamfanin inshorarta na haɗurran yanar gizo a matsayin shaida ta yanayin matakan tsaronta na yanzu. Ƙungiyoyin cikin gida sun yi amfani da kundin abubuwan da aka gano don ba ayyukan gyara fifiko a kwata na gaba. An nemi a sake yin tantancewa bayan watanni shida.

Shawarar mataki na gaba

Sake tantance Tsaro na Essential Eight bayan gyara, ko Monthly Security Advisory don ci gaba da jagora.

Essential Eight Baseline Review

Dalilin da ya sa muke wallafa waɗannan taƙaitattun bayanai

Masu sayen ayyukan Tsaro suna buƙatar fahimtar abin da suke saya kafin su ɗauki alƙawarin saye. Waɗannan misalan ayyuka suna bayyana abin da aka haɗa cikin iyakokin aikin, abin da aka miƙa, da abin da ba a haɗa ba — domin ka iya tantance ko sabis ɗin ya dace da yanayinka.

Yadda za a karanta waɗannan nazarin misalai

Shaida ba tare da yin iƙirarin da ya wuce kima ba

Kowane nazarin lamari na tsaro yana wakiltar ainihin aikin abokin ciniki da aka kammala. Ba a bayyana sunayen abokan ciniki da bayanan aiki da za su iya bayyana ko su waye ba saboda kiyaye sirri. Yana nuna abin da ya jawo aikin, iyakar aikin da aka amince da ita, wuraren da aka yi wa bita, abubuwan da aka miƙa, iyakoki da mataki na gaba domin masu saye su fahimci yadda BilgeQor ke mayar da bayanan yanayin haɗari zuwa Fayil ɗin Tsaro mai amfani a aikace.

An tabbatar da iyakar aiki

Kowane nazarin aiki yana farawa ne da iyakokin aikin da aka rubuta, ba da alkawarin da ba shi da iyaka ba.

An adana shaidu

Ana bayyana abubuwan da ake miƙawa a matsayin bayanan da aka rubuta, taƙaitattun bayanai, sakamakon bincike da jagorar gyara.

Iyakoki a bayyane

Misalan sun guji sunayen abokan ciniki, da'awar samun takardar shaida, amincewar binciken tantancewa, da sakamakon da aka ba da tabbacin samunsa.

Ka duba hanyar bayarwa
Binciken Tsaro
Ƙarfafa tsaron shafin yanar gizo & tsarin kwamfuta
Tsaron Aikace-aikace
Shawara da Maido da Aiki
Binciken Tsaro
9

Binciken Tsaro

Tantance yanayin farko da tsarin tsaro cikin tsari ga ƙungiyoyin da ke kimanta matsayinsu na tsaro.

Masana'antu:Ayyuka na ƘwararruYankin: Hong KongBinciken tantancewa na tsanaki
Binciken Shirye-shiryen Tsaro na Yanar gizo na SMEs
SME Cybersecurity Readiness Review — matakin Standard

Yanayin da ake ciki

Wani kamfanin ayyukan ƙwararru da ke kula da takardun sirri na abokan ciniki na manyan kamfanoni yana buƙatar nuna shirin tsaro ga abokan ciniki masu yiwuwa da ke gudanar da binciken tsanaki kan masu samar da sabis. Abokan hulɗar kamfanin sun buƙaci tsararren tushen shaida da ya shafi sarrafa shiga, ayyukan na'urorin ƙarshe, da hanyoyin sarrafa bayanai kafin babban aiki da abokin ciniki.

Abubuwan da suka kasance cikin iyakar aikin

Binciken babban muhallin kwamfutocin aikin kamfanin, saitunan imel da raba fayiloli, matakan sarrafa damar shiga ta masu gudanarwa, da hanyoyin sarrafa bayanai. Tantancewar ta danganta abubuwan da aka gano da matakan gyara masu amfani bisa fifikonsu. An fayyace iyakokin aikin kuma an tabbatar da su a rubuce kafin a fara aikin.

Tsarin lokaci da kuma tsarin aiki

An kammala bitar cikin kwanakin aiki goma bayan tabbatar da faɗin aikin. Ba a buƙatar shiga wurin a zahiri. An gudanar da dukkan bitar daga nesa bisa takardun da aka amince da su da shaidar saitunan dandamali.

Abin da aka yi nazari

  • Saitunan tsaro na dandalin imel da matakan sarrafa haɗarin fuskantar phishing
  • Matakan sarrafa damar shiga tsarin raba fayiloli da ma'ajiyar girgije, da manufofin raba fayiloli da waɗanda ke wajen ƙungiya
  • Raba haƙƙoƙin gudanarwa ga asusun kwamfutocin aiki da na dandamali
  • Yadda tabbatar da shaidar mai amfani ta hanyoyi da yawa ta shafi asusun da suke da matuƙar muhimmanci ga kasuwanci
  • Ko na'urorin ƙarshen cibiyar sadarwa suna da sabbin gyare-gyaren software da kuma hanyoyin sabunta software
  • Hanyoyin sarrafa bayanai da janye damar shiga tsarin daga ma'aikata da masu aikin kwangila idan sun bar aiki

Abin da aka kawo

  • Rubutaccen rahoton bitar shiri tare da sakamakon bincike da aka jera bisa fifiko
  • Takaitaccen bayani ga manyan masu gudanarwa, wanda ya dace da nazarin tantancewa da ake gabatarwa ga abokin ciniki kafin yanke shawara
  • Jerin gyare-gyare bisa fifiko tare da tsarin matakan da aka ba da shawarar a bi
  • Bayanan jagora ga kowane abin da aka gano da ke buƙatar kulawa

Abin da ya canja bayan aikin

Kamfanin ya yi amfani da taƙaitaccen rahoton da aka shirya wa shugabanni a matsayin takardar tallafi a amsarsa ga takardar tambayoyin masu samar da kaya ko ayyuka. Abokan hulɗa na cikin kamfanin sun aiwatar da matakan da suka shafi sakamakon binciken kula da damar shiga da aka ba fifiko kafin fara aikin abokin ciniki. An tattauna wani aikin ba da shawara na gaba domin ci gaba da yin bita duk bayan watanni uku.

Ba a haɗa shi ba

×Gwajin kutsawa ko ƙoƙarin amfani da raunin tsarin a aikace×Binciken ababen more rayuwa na sabar ko iyakar cibiyar sadarwa×Bayar da takardar shaida ko takardar shaidar bin ƙa'idoji×Sa ido na ci gaba ko ayyukan tsaro da ake gudanarwa

Shawarar mataki na gaba

Monthly Security Advisory don samun jagoranci na Tsaro mai tsari a kai a kai, ko kuma sake tantancewa da aka tsara bayan aiwatar da matakan magance abubuwan da aka gano waɗanda aka ba fifiko.

Binciken Shirye-shiryen Tsaro na Yanar gizo na SMEs
Masana'antu:Fasahar Kiwon LafiyaYankin: SingaporeBin ƙa'idoji
Binciken Shirye-shiryen Tsaro na Yanar gizo na SMEs
SME Cybersecurity Readiness Review — matakin Standard

Yanayin da ake ciki

Wani kamfanin fasahar likitanci da ke shirin shigar da dandalinsa cikin tsarin sayayya na asibitoci a Singapore ya buƙaci nazarin matakin tsaro na asali. Tsarin sayayyar ya buƙaci shaidar tsaro da ta shafi matakan sarrafa damar shiga, yadda ake sarrafa bayanai, da hanyoyin kula da na'urorin ƙarshen hanyar sadarwa kafin kwamitin tantance masu samar da kayayyaki ko ayyuka ya ci gaba.

Abin da aka kawo

  • Rubutaccen rahoton bita na yanayin farko tare da sakamakon bincike da aka jera bisa fifiko
  • Taƙaitaccen bayani na shugabanci da ya dace da bitar sayen kayayyaki da ayyuka na asibiti

4 ×

Binciken Shirye-shiryen Tsaro na Yanar gizo na SMEs

Shawarar mataki na gaba

Monthly Security Advisory don ci gaba da samun bayyananniyar fahimtar matsayin Tsaro, ko sake tantancewa bayan aiwatar da matakan da suka shafi abubuwan da aka gano masu fifiko.

Binciken Shirye-shiryen Tsaro na Yanar gizo na SMEs
Masana'antu:Fasahar Gidaje da FilayeYankin: MalaysiaƘaruwa
Binciken Shirye-shiryen Tsaro na Yanar gizo na SMEs
SME Cybersecurity Readiness Review — matakin Standard

Yanayin da ake ciki

Wani kamfanin fasahar kadarori da ke faɗaɗa dandalinsa na haya a birane da dama na Malaysia, wata cibiyar sadarwar abokan hulɗar masu haɓakawa ta tuntuɓe shi don yin bitar matakin tsaro na asali a matsayin sharaɗin shiga shirinta na turawa (referral). Ƙungiyar tana buƙatar shaida mai tsari ta matakan tsaronta kafin a ci gaba da yarjejeniyar haɗin gwiwa.

Abin da aka kawo

  • Rubutaccen rahoton bita na yanayin farko tare da sakamakon bincike da aka jera bisa fifiko
  • Taƙaitaccen rahoto ga manyan masu gudanarwa wanda ya dace da bitar binciken tantancewa na abokin hulɗa

4 ×

Binciken Shirye-shiryen Tsaro na Yanar gizo na SMEs

Shawarar mataki na gaba

Monthly Security Advisory don samun tsararrun shawarwari kan Tsaro a kai a kai, ko sake tantancewa bayan aiwatar da abubuwan da bincike ya gano waɗanda aka ba fifiko.

Binciken Shirye-shiryen Tsaro na Yanar gizo na SMEs
Ayyuka masu alaƙa da gwamnatiNew ZealandBin ƙa'idoji
Binciken Shirye-shiryen Tsaro na Yanar gizo na SMEs

An buƙaci wani kamfanin ayyuka da ke ba hukumomin gwamnati a New Zealand tallafin gudanarwa da sarrafa bayanai ya cika ma'aunin tsaro na asali a matsayin wani ɓangare na sabunta kasancewarsa a jerin masu samar da kayayyaki da ayyuka da aka amince da su. Ƙungiyar ta buƙaci bita mai zaman kanta kan yanayin matakan sarrafawarta domin cika buƙatar bayar da tabbacin tsaro na shekara-shekara da wannan jerin ya tanada.

Fasahar IlimiIndonesiaBin ƙa'idoji
Binciken Shirye-shiryen Tsaro na Yanar gizo na SMEs

Kamfanin fasahar ilimi da ke ba da sabis ga cibiyoyin Indonesia ya buƙaci nazarin tsaro na asali a matsayin wani ɓangare na tsarin sayen kayayyaki da sabis na cibiyoyi. Dandamalin ya sarrafa bayanan koyon ɗalibai kuma ya buƙaci hujjojin tsaro da aka tsara kafin a saka shi cikin jerin masu samarwa na shirin ilimi na ƙasa.

Inshora da HaɗariAustraliaSabuntawa
Essential Eight Baseline Review

Wani kamfanin inshora da bayar da shawara kan haɗari ya buƙaci duba matakan kula da tsaro na shekara-shekara a matsayin wani ɓangare na wajibcin gudanarwarsa na cikin gida da kuma shirin sabunta inshorar alhakin ƙwararru. Kamfanin yana kula da muhimman takardun kuɗi da na haɗarin abokan ciniki, kuma shugabanci ya buƙaci bita mai zaman kansa kafin kammala neman sabuntawar.

Kasuwancin sayar da kaya ɗai-ɗai / Masu amfaniThailandƘaruwa
Binciken Shirye-shiryen Tsaro na Yanar gizo na SMEs

Wani kamfanin fasahar dillancin kayayyaki da ke gudanar da dandamali mai tashoshi da dama a Thailand ya buƙaci binciken tsaro na tushe yayin da faɗin sarrafa bayanansa ya ƙaru har ya haɗa da sabbin haɗin gwiwar ɓangare na uku. Ƙungiyar ayyuka ta gano cewa saurin girma ya zarce yadda suke ganin ikon shiga da ayyukan sarrafa bayanai a cikin kamfanin.

Kafofin Watsa Labarai & BugaVietnamƘaruwa
Binciken Shirye-shiryen Tsaro na Yanar gizo na SMEs

An buƙaci wani kamfanin yaɗa labarai da wallafe-wallafe a Vietnam, wanda ke shirin fara karɓar manyan kamfanoni a matsayin abokan cinikinsa na talla na farko, ya kammala tantance tsaronsa a matsayin mai samar da sabis, a cikin tsarin sayen sabis na abokin ciniki. Ƙungiyar ta buƙaci nazari mai tsari kan yanayin matakan sarrafawarta kafin a iya ƙulla yarjejeniyar talla.

Ƙarfafa tsaron shafin yanar gizo & tsarin kwamfuta
9

Ƙarfafa tsaron shafin yanar gizo & tsarin kwamfuta

Aikin ƙarfafa tsaron saituna da tabbatar da ingancinsu kai tsaye a manhajojin yanar gizo da ababen more rayuwar fasaha.

Masana'antu:Kasuwancin lantarkiYankin: SingaporeKafin ƙaddamarwa
Website Security Hardening
Website Security Hardening — matakin Standard na Tsaro

Yanayin da ake ciki

Wani mai gudanar da kasuwancin lantarki da ke shirin ƙaddamar da sabon shagon yanar gizo bisa tarin fasahohin da aka tsara musamman ya buƙaci ƙarfafa tsaro kafin ƙaddamarwa. Ƙungiyar tana da ƙwarin gwiwa a fannin haɓaka manhaja, amma ba ta da wani da aka keɓe don aikin tsaro wanda zai duba saitunan kafin fara amfani da shagon.

Abubuwan da suka kasance cikin iyakar aikin

Ƙarfafa Tsaro na aikace-aikacen yanar gizo da za a fara amfani da shi a muhallin aiki, wanda ya ƙunshi daidaita uwar garke, aiwatar da kanun tsaro na HTTP, bitar tsarin tabbatar da shaidar mai amfani, da duba ko kayan software da aikace-aikacen ya dogara da su suna kan sabbin sigogi. Iyakokin aikin sun takaita ga kwafin aikace-aikacen guda ɗaya da ɓangaren kayayyakin more rayuwar fasaha da ke da alaƙa da shi.

Tsarin lokaci da kuma tsarin aiki

An kammala bita cikin kwanakin aiki takwas. Aikace-aikacen ya kasance a shirye don fara aiki bayan aiwatar da muhimman binciken da aka fifita. An kammala tabbatarwa bayan gyara cikin kwanakin aiki uku bayan sake miƙawa.

Abin da aka yi nazari

  • Tsara kanun tsaro na HTTP da saitunan manufofi
  • Saitunan TLS/SSL da sarkar takardun shaida
  • Matakan sarrafa tsarin tabbatar da shaidar mai amfani da gudanar da zaman amfani
  • Sabuntawar abubuwan dogaro na wasu kamfanoni da matsayin sanannun raunin tsaro
  • Matakan sarrafa damar shiga ta masu gudanarwa da binciken ko bayanan shaidar shiga sun bayyana
  • Bitar sarrafa kurakurai da bayyanar bayanai

Abin da aka kawo

  • Rahoton ƙarfafa tsaro tare da sakamakon bincike da aka rarraba bisa matakin tsanani
  • Shawarwari kan saituna tare da jagororin aiwatarwa
  • Jerin abubuwan da za a duba wajen gyara matsaloli ga ƙungiyar masu haɓaka manhaja
  • Binciken tabbatarwa bayan gyara (zagaye daya ya hada)

Abin da ya canja bayan aikin

An warware matsalolin da aka gano waɗanda aka ba fifiko kafin ranar ƙaddamarwa. Ƙungiyar ta yi amfani da jerin abubuwan dubawa don ƙarfafa tsaro a matsayin samfuri wajen tura aikace-aikace zuwa amfani daga baya. Ba a gano matsaloli masu tsananin haɗari ba a nazarin tabbatarwa da aka yi bayan gyaran matsalolin.

Ba a haɗa shi ba

×Wuraren ƙarshe na API na backend da ba a haɗa su cikin iyakar aikin da aka amince da ita ba×Binciken tsaro na ciki na tashar biyan kuɗi ta ɓangare na uku×Manhajar rakiyar aikace-aikacen wayar hannu×Kulawa mai gudana bayan an rufe aikin karfafawa

Shawarar mataki na gaba

App Security Review don manhajar wayar hannu da ke rakiyar tsarin, ko Monthly Security Advisory don tallafin gudanar da ayyuka a kai a kai.

Website Security Hardening
Masana'antu:SaaS / FasahaYankin: VietnamBinciken tantancewa na tsanaki
Website Security Hardening
Website Security Hardening — matakin Standard na Tsaro

Yanayin da ake ciki

An nemi wani sabon kamfanin SaaS da ke shirin fara aiki da abokan cinikinsa na farko daga manyan kamfanoni ya samar da hujjojin tsaro a matsayin wani ɓangare na nazarin saye. An gina dandamalin mataki-mataki ba tare da wani nazarin tsaro na musamman ba. Ƙungiyar da ta kafa kamfanin ta buƙaci aikin ƙarfafa tsaro mai tsari don gano da magance giɓin saituna kafin wa'adin fara aiki da waɗannan abokan ciniki.

Abin da aka kawo

  • Rahoton ƙarfafa tsaro tare da abubuwan da aka gano waɗanda aka rarraba bisa tsanani da fifiko
  • Shawarwari kan saitunan tsari tare da jagororin aiwatarwa mataki-mataki

4 ×

Website Security Hardening

Shawarar mataki na gaba

App Security Review don bitar Tsaro a ɓangaren API da duk wata manhajar wayar hannu da ke amfani da shi, ko Monthly Security Advisory don samun jagoranci na ci gaba cikin tsari.

Website Security Hardening
Masana'antu:FintechYankin: Ƙasar FilifinBin ƙa'idoji
Website Security Hardening
Website Security Hardening — matakin Standard na Tsaro

Yanayin da ake ciki

Wani sabon kamfanin fintech da ke gudanar da dandamalin ba da rance ta dijital yana shirya takardu don zagayen bita na hukumomin sa ido. Ƙungiyar fasaha ta dandamalin ta gano cewa ba a yi bita a hukumance kan saitunan manhajarsa ta web ba tun lokacin da aka fara tura ta zuwa aiki. Shugabannin kamfanin sun buƙaci aikin ƙarfafa tsaro bisa tsari don ganowa da gyara giɓin saituna kafin wa'adin miƙa takardu ga hukumomin sa ido.

Abin da aka kawo

  • Rahoton ƙarfafa tsaro tare da abubuwan da aka gano waɗanda aka rarraba bisa tsanani da fifiko
  • Shawarwari kan saituna tare da jagororin aiwatarwa

4 ×

Website Security Hardening

Shawarar mataki na gaba

Binciken Tsaro na App Security Review don kowace manhajar wayar hannu, ko Monthly Security Advisory don ci gaba da samun jagora kan gudanar da ayyuka.

Website Security Hardening
Fasahar Gidaje da FilayeHong KongKafin ƙaddamarwa
Website Security Hardening

Wani kamfanin fasahar gidaje da filaye da ke shirin ƙaddamar da dandamalinsa na haya ya buƙaci ƙarfafa tsaro kafin ƙaddamarwa. Dandamalin yana sarrafa bayanan shiga na wakilai da takardun ma'amalolin gidaje da filaye. Ƙungiyar da ta kafa kamfanin ta buƙaci aikin ƙarfafa tsaro mai tsari kafin ba masu amfani daga waje damar shiga.

Ayyuka & Jigilar KayayyakiIndonesiaƘaruwa
Website Security Hardening

Wani kamfanin fasahar jigilar kayayyaki da ke faɗaɗa dandamalinsa na sarrafa rukunin motoci don yi wa manyan kamfanoni hidima ya buƙaci ƙarfafa tsaro kafin fara aiki da waɗannan abokan ciniki. Manyan kamfanonin da ƙungiyar ke sa ran samu a matsayin abokan ciniki sun nemi hujjojin tsaro a matsayin wani ɓangare na tantance masu samar da kayayyaki da ayyuka. Kamfanin ya buƙaci aikin ƙarfafa tsaro mai tsari don magance giɓin da aka gano kafin lokacin da aka ware don fara aiki da waɗannan abokan ciniki.

Fasahar Kiwon LafiyaMalaysiaKafin ƙaddamarwa
Website Security Hardening

Wani kamfanin fasahar kiwon lafiya da ke gina dandamalin tsara alƙawuran marasa lafiya da adana bayanansu ya buƙaci ƙarfafa tsaro kafin ba abokan hulɗa na asibiti damar shiga. Ƙungiyar ta haɓaka dandamalin cikin sauri kuma ta buƙaci binciken tsare-tsarensa bisa tsari kafin sauyawa daga gwajin farko da aka takaita ga rufaffiyar ƙungiya zuwa ba abokan hulɗa na asibiti daga waje damar shiga.

Fasahar IlimiNew ZealandKafin ƙaddamarwa
Website Security Hardening

Wani kamfanin fasahar ilimi da ke shirin tura dandalinsa na koyo ga abokan ciniki na cibiyoyi ya buƙaci ƙarfafa tsaro kafin tura dandalin. Ƙungiyar IT ta cibiyar ta buƙaci hujjojin tsaro da suka shafi saitunan dandalin da yadda yake sarrafa bayanai kafin a ba asusun ɗalibai damar shiga.

Ayyuka na ƘwararruAustraliaBinciken tantancewa na tsanaki
Website Security Hardening

Wani kamfanin ba da shawara kan gudanarwa da ke gudanar da dandamalin hulɗa da kwastomomi ya samu buƙata daga wani babban kamfani da yake yi wa aiki cewa ya gabatar da hujjojin tsaro game da saitunan dandamalinsa na yanar gizo kafin a iya ƙulla kwangilar ba da shawara ta shekaru da yawa. Dandamalin kamfanin yana sarrafa takardun ayyukan da ake yi wa kwastomomi da saƙonnin hulɗa da ke ɗauke da bayanan sirri na kwastomomi.

Kafofin Watsa Labarai & BugaSingaporeBinciken tantancewa na tsanaki
Website Security Hardening

Wani babban kamfani mai yin talla ya tuntubi kamfanin yaɗa labarai da wallafe-wallafe da ke gudanar da dandamalin rarraba abun ciki, yana buƙatar a duba tsaron dandamalin a matsayin wani ɓangare na tsarin shigar da masu samar da sabis na tallan da ake saye da sanyawa ta tsarin kwamfuta. Ƙungiyar fasaha ta kamfanin ta buƙaci aikin ƙarfafa tsaro mai tsari domin samar da takardun tsaro da ake buƙata.

Tsaron Aikace-aikace
9

Tsaron Aikace-aikace

Binciken tsaro na aikace-aikacen wayar hannu da na yanar gizo don ƙungiyoyin da ke shirya don rarrabawa ko bin doka.

Masana'antu:Fasahar Kiwon LafiyaYankin: MalaysiaBin ƙa'idoji
Web & App Security Review (Binciken Tsaro na Yanar Gizo da App)
Binciken Tsaro na Yanar Gizo da App — matakin Standard

Yanayin da ake ciki

Wani kamfanin fasahar kiwon lafiya da ke shirya manhajar wayar hannu don amfanin asibiti ya buƙaci duba tsaro kafin raba ta ga masu aikin lafiya. Shugabancin abokin ciniki ya bayyana shirin bin ƙa'idojin hukuma da kula da bayanan marasa lafiya a matsayin fifiko.

Abubuwan da suka kasance cikin iyakar aikin

Binciken Tsaro na manhajar gudanar da ayyukan asibiti a na'urar hannu, wanda ya ƙunshi fayil ɗin manhajar da aka harhada, ɓangaren sadarwarta ta API, da yadda aka aiwatar da tabbatar da shaidar mai amfani da adana bayanai. An binciki sigogin iOS da Android da aka gina a cikin iyakokin aikin da aka amince da su. An gudanar da binciken bisa OWASP Mobile Top 10 a matsayin tsarin da aka ɗauka a matsayin ma'auni.

Tsarin lokaci da kuma tsarin aiki

Ana isar da bita cikin kwanakin kasuwanci goma sha huɗu bayan karɓar ginin aikace-aikacen da aka amince da su da takardun API. Ana gudanar da dukkan bitar daga nesa. Ba a buƙatar samun damar shiga yanayin samarwa.

Abin da aka yi nazari

  • Nazarin lambar na'ura ta aikace-aikace da nazarinta ba tare da gudanar da ita ba don gano sanannun alamomin raunin tsaro
  • Tsaron sadarwar API, ciki har da layin sufuri da tantance shaida
  • Hanyar adana bayanan marasa lafiya da rufaffen ɓoye bayanai a na'urar da ake amfani da ita
  • Tabbatar da ainihin mai amfani da sarrafa token na zaman amfani
  • Ko SDK da ɗakunan lambar shiri na wasu masu samarwa suna kan sabbin sigogi
  • Gudanar da bayanai masu mahimmanci a cikin yanayin rayuwar aikace-aikacen

Abin da aka kawo

  • Rahoton bitar tsaro na wayar hannu tare da sakamakon bincike da rarrabawa bisa matakin tsanani
  • Taƙaitaccen bayani kan batutuwan OWASP Mobile Top 10 da aka duba
  • Jagorar gyara da mai haɓaka manhaja zai iya amfani da ita kai tsaye ga kowace matsala da aka gano
  • Binciken sarrafa bayanai tare da shawarwari

Abin da ya canja bayan aikin

Ƙungiyar haɓakawa ta magance abubuwan da aka gano masu tsanani da masu tsananin gaske kafin rarrabawa ga masu amfani a fannin kula da marasa lafiya. An yi amfani da rahoton bita a matsayin abin dogaro yayin bitar tsarin gudanarwa na ciki. An fara aikin ba da shawara na Care Plan don bita da aka tsara da rubutattun matakan da za a ɗauka na gaba, ba don sa ido mai ci gaba kan manhajar ko ɗaukar nauyin martani ba.

Ba a haɗa shi ba

×Gwajin kutsawa na kayayyakin aikin backend×Binciken tsaron haɗin EMR na ɓangare na uku da ya wuce iyakar ɓangaren API da aka amince da shi×Takardar shaidar bin ƙa'idojin hukumomi ko amincewarsu×Ci gaba da sa ido kan manhaja bayan an kammala nazarin

Shawarar mataki na gaba

Monthly Security Advisory don ci gaba da kula da matsayin Tsaro, ko sake tantancewa bayan manyan sauye-sauye a sigar manhaja.

Web & App Security Review (Binciken Tsaro na Yanar Gizo da App)
Masana'antu:FintechYankin: Ƙasar FilifinBin ƙa'idoji
Web & App Security Review (Binciken Tsaro na Yanar Gizo da App)
Binciken Tsaro na Yanar Gizo da App — matakin Standard

Yanayin da ake ciki

Wani kamfanin fintech na biyan kuɗi da ke shirin zagayen gabatar da rahotanni mai alaƙa da Bangko Sentral ng Pilipinas ya buƙaci tantance tsaron manhajarsa ta wayar hannu daga wani mai zaman kansa. Manhajar tana sarrafa bayanan tantancewa na biyan kuɗi da bayanan ma'amaloli. Shugabannin kamfanin sun buƙaci bita mai tsari don gano inda suke fuskantar haɗari kafin gabatar da takardun gudanar da aiki.

Abin da aka kawo

  • Rahoton bitar tsaro na wayar hannu tare da sakamakon bincike da rarrabawa bisa matakin tsanani
  • Taƙaitaccen bayani kan batutuwan OWASP Mobile Top 10 da aka duba

4 ×

Web & App Security Review (Binciken Tsaro na Yanar Gizo da App)

Shawarar mataki na gaba

Monthly Security Advisory don ci gaba da tallafa wa matsayin bin ƙa'idoji a fannin Tsaro, ko sake tantancewa bayan manyan canje-canje a sigar manhaja.

Web & App Security Review (Binciken Tsaro na Yanar Gizo da App)
Masana'antu:SaaS / FasahaYankin: SingaporeBinciken tantancewa na tsanaki
Web & App Security Review (Binciken Tsaro na Yanar Gizo da App)
Binciken Tsaro na Yanar Gizo da App — matakin Standard

Yanayin da ake ciki

Wani kamfanin SaaS da ke yi wa abokan ciniki na kamfanoni hidima a wasu kasuwanni da aka zaɓa, sabon abokin ciniki na kamfani ya buƙaci a kammala bita mai zaman kansa kan tsaron layin API ɗinsa kafin a iya aiwatar da yarjejeniyar sarrafa bayanai. Dandalin yana bayyana bayanan abokan ciniki ta wasu REST APIs, kuma shugabanci ya buƙaci bita mai tsari don gano da gyara haɗarin kafin wa'adin kwangila.

Abin da aka kawo

  • Rahoton nazarin tsaron API tare da sakamakon bincike da rarrabawa bisa matakin tsanani
  • Jagorar gyara da mai haɓaka manhaja zai iya amfani da ita kai tsaye ga kowace matsala da aka gano

4 ×

Web & App Security Review (Binciken Tsaro na Yanar Gizo da App)

Shawarar mataki na gaba

Monthly Security Advisory don kula da Tsaro na API da dandamali a ci gaba bisa tsari, ko sake tantancewa bayan manyan sauye-sauyen sigar API.

Web & App Security Review (Binciken Tsaro na Yanar Gizo da App)
Fasahar inshoraAustraliaSabuntawa
Web & App Security Review (Binciken Tsaro na Yanar Gizo da App)

Wani kamfanin fasahar inshora da ke gina manhajar wayar hannu don gudanar da inshora yana gab da shiga zagayen sabunta inshorarsa na shekara-shekara. Manhajar tana sarrafa bayanan masu riƙe da takardun inshora da takardun sabuntawa. Mai tantance haɗarin inshora na ƙungiyar ya nemi a yi nazarin tsaron manhajar wayar hannu a matsayin wani ɓangare na tsarin sabunta inshorar alhakin ƙwararru.

Ayyuka & Jigilar KayayyakiIndonesiaƘaruwa
Web & App Security Review (Binciken Tsaro na Yanar Gizo da App)

Wani kamfanin fasahar jigilar kaya da ke tura manhajar wayar hannu ta direbobi da sarrafa ayarin motoci ga abokan ciniki na kamfanoni ya buƙaci duba tsaro kafin a bai wa ayarin motocin kamfanin damar shiga. Ƙungiyar sayayya ta abokin ciniki ta buƙaci shaidar tsaro mai zaman kanta ta manhajar wayar hannu kafin a ci gaba da tura ta ga kamfanin.

Fasahar IlimiThailandKafin ƙaddamarwa
Web & App Security Review (Binciken Tsaro na Yanar Gizo da App)

Kamfanin fasahar ilimi da ke shirin rarraba manhajarsa ta ilmantar da ɗalibai ga cibiyoyin da suke abokan hulɗa ya buƙaci bitar tsaro kafin rarrabawa. Manufar IT ta cibiyar da ke abokiyar hulɗa ta buƙaci shaidar tsaro daga wani ɓangare mai zaman kansa kafin a iya rarraba manhajar ga ɗaliban da suka yi rajista.

Kasuwancin sayar da kaya ɗai-ɗai / Masu amfaniVietnamKafin ƙaddamarwa
Web & App Security Review (Binciken Tsaro na Yanar Gizo da App)

Wani kamfanin sayar da kayayyaki da ke shirin ƙaddamar da manhajar sayayya ta wayar hannu ga masu amfani ya buƙaci bitar tsaro kafin ƙaddamarwa. Manhajar tana sarrafa bayanan shiga asusun abokan ciniki, tarihin oda, da fara biyan kuɗi. Ƙungiyar waɗanda suka kafa kamfanin tana son shaidun tsaro da aka tsara kafin ba da damar fitar da sigar farko da abokan ciniki za su yi amfani da ita.

Fasahar Gidaje da FilayeHong KongBinciken tantancewa na tsanaki
Web & App Security Review (Binciken Tsaro na Yanar Gizo da App)

Wani babban abokin haɗin gwiwa mai bunƙasa gidaje da filaye ya buƙaci kamfanin fasahar gidaje da filaye da ke gina manhajar wayar hannu don wakilai da masu gidaje ya kammala nazarin tsaro mai zaman kansa kafin a iya rarraba manhajar ga rukunin wakilan wannan mai bunƙasa gidaje da filaye. Manhajar tana sarrafa bayanan jerin gidaje da filaye da bayanan shaidar samun damar shiga na wakilai.

Kafofin Watsa Labarai & BugaNew ZealandKafin ƙaddamarwa
Web & App Security Review (Binciken Tsaro na Yanar Gizo da App)

Wani kamfanin kafofin watsa labarai da ke shirin ƙaddamar da manhajar wayar hannu ta masu amfani don isar da labarai da abun ciki yana buƙatar bitar tsaro kafin ƙaddamarwa. Manhajar tana sarrafa bayanan shaidar shiga na asusun masu biyan kuɗi da fara biyan kuɗi don samun abun ciki na premium. Ƙungiyar ta buƙaci shaidar tsaro mai tsari kafin ta kunna ƙaddamarwa ga jama'a.

Shawara da Maido da Aiki
6

Shawara da Maido da Aiki

Tallafin shawarwari na ci gaba da farfaɗowa daga abubuwan da suka shafi tsaro bisa tsari, ga ƙungiyoyin da ke gudanar da ayyukan tsaro.

Masana'antu:Ayyuka & Jigilar KayayyakiYankin: IndonesiaShawara
Monthly Security Advisory (Shawarar Tsaro na Wata)
Monthly Security Advisory — matakin Standard na Tsaro

Yanayin da ake ciki

Wani kamfanin fasahar sufuri da jigilar kayayyaki da ke faɗaɗa ayyukansa a birane da dama ya buƙaci jagorancin tsaro mai tsari ba tare da kuɗin ɗaukar ma'aikacin tsaro na cikakken lokaci ba. Kamfanin ya fuskanci wani lamari na fallasar bayanan shiga asusu kwanan nan kuma yana son tallafin shawarwari mai tsari.

Abubuwan da suka kasance cikin iyakar aikin

Shawarwari masu ci gaba a kowane wata da suka shafi dandalin yanar gizo na ƙungiyar, kayan aikin cikin gida, da hanyoyin tsaro da ƙungiyar ke bi. An fayyace iyakokin shawarwarin a lokacin fara haɗin gwiwa, kuma ana iya daidaita su a kowane watanni uku cikin iyakokin da aka amince da su. Wannan ba sabis ne na gudanar da tsaro ba — shawarwari da jagoranci kawai.

Tsarin lokaci da kuma tsarin aiki

Haɗin gwiwar aiki mai ci gaba na kowane wata. An kammala shigar da abokin ciniki cikin mako guda bayan tabbatarwa. Zaman shawarwari na kowane wata bisa tsayayyen jadawali. Haɗin gwiwar yana gudana a kowane wata ba tare da ƙayyadadden lokaci ba, tare da duba iyakar aiki a kowane kwata.

Abin da aka yi nazari

  • Nazarin yanayin tsaro na kowane wata bisa rukunin matakan sarrafawa da aka amince da su
  • Bitar ko an sabunta patch da sabuntawa a tsarukan da aka ƙayyade iyakarsu
  • Bitar sarrafa damar shiga da haƙƙoƙin amfani da tsarin a kowane kwata
  • Nazarin abubuwan da suka faru da gargadi daga rajistar bayanai (logs) da abokin ciniki ya bayar
  • Jagoranci na ƙungiyar game da sababbin barazanar da ke da muhimmanci ga wannan bangare

Abin da aka kawo

  • Taƙaitaccen bayanin shawarwari na kowane wata tare da abubuwan da aka lura da su da matakan da aka ba da shawarar ɗauka
  • Rahoton taƙaitaccen yanayin tsaro na kowane kwata
  • Jerin ayyukan da aka fi fifita bayan kowane sake dubawa
  • Hanyar samun shawara kai tsaye don tambayoyin da ke buƙatar amsa cikin gaggawa kuma suke cikin iyakar aikin

Abin da ya canja bayan aikin

Ƙungiyar ta aiwatar da tsari mai tsayayyun matakai na bitar gyare-gyaren manhaja, tana amfani da taƙaitaccen rahoton shawarwari na kowane wata a matsayin jagorar gudanar da aiki. An gyara matsalolin sarrafa damar shiga da aka gano a kwata na farko kafin zagayen bita na gaba. An sabunta yarjejeniyar aikin bayan wa'adin farko na watanni uku, kuma aikin ya ci gaba.

Ba a haɗa shi ba

×Mayar da martani ga lamari mai gudana ko tallafin gaggawa a wajen lokutan shawarwari da aka amince da su×Gwajin shiga ko kuma kimanta tsaro mai aiki×Ganowa da amsawa da aka sarrafa ko lura da lokaci na ainihi×Ayyukan tsara tsarin Tsaro ko aiwatar da shi

Shawarar mataki na gaba

Sabunta hidimar ba da shawara, ko nazarin tushen ma'aunin tsaro da aka tsara domin tantance matsayin tsaro ta hanyar da ta fi bin ƙa'idodin hukuma.

Monthly Security Advisory (Shawarar Tsaro na Wata)
Masana'antu:Kasuwancin sayar da kaya ɗai-ɗai / Masu amfaniYankin: ThailandShawara
Monthly Security Advisory (Shawarar Tsaro na Wata)
Monthly Security Advisory — matakin Standard na Tsaro

Yanayin da ake ciki

Wani mai gudanar da fasahar kasuwancin sayar da kayayyaki, wanda ke tafiyar da dandalin ladan abokan ciniki da haɗin tsarin kasuwancin yanar gizo, ya buƙaci jagorancin tsaro na kowane wata bisa tsari yayin da ayyukansa na sarrafa bayanai suka faɗaɗa zuwa tashoshi da dama. Wajibai na kare sirrin bayanai da ke kan ƙungiyar sun ƙaru, kuma tana neman abokin haɗin gwiwa mai ba da shawara don ci gaba da samun bayyananniyar fahimtar halin tsaro ba tare da kuɗin gudanar da sashen tsaro na musamman ba.

Abin da aka kawo

  • Taƙaitaccen bayanin shawarwari na kowane wata tare da abubuwan da aka lura da su da matakan da aka ba da shawarar ɗauka
  • Taƙaitaccen bayanin matsayin tsaro na kowane kwata tare da bayanan da aka lura da su kan yadda yake sauyawa

4 ×

Monthly Security Advisory (Shawarar Tsaro na Wata)

Shawarar mataki na gaba

Sabunta sabis ɗin shawarwari, ko App Security Review da aka tsara don nazarin Tsaro a ɓangaren aikace-aikace na dandamalin shirin lada ga abokan ciniki masu aminci.

Monthly Security Advisory (Shawarar Tsaro na Wata)
Masana'antu:Fasaha / Kamfani mai tasowaYankin: New ZealandAbin da Ya faru
Incident Recovery Sprint
Incident Recovery Sprint — Matakin Standard

Yanayin da ake ciki

Wani sabon kamfanin SaaS ya gano shaidar shiga ba tare da izini ba a tsarin da yake amfani da shi wajen gudanar da aiki, bayan wani hari na gwada bayanan shiga da aka sace a asusu da yawa. Mai yiwuwa an fallasa bayanan abokan ciniki. Ƙungiyar waɗanda suka kafa kamfanin ta buƙaci tallafin gaggawa wajen tantance lamarin da fifita matakan ɗauka, jagora kan dakile harin, da tsarin matakai na farfaɗowa kafin wa'adin sanar da abokan ciniki da hukumomin sa ido.

Abin da aka kawo

  • Rahoton farko na rarrabewa tare da iyakar kutse da aka tabbatar da wadda ake zargi
  • Taswirar haɗari mai ganuwa tare da matakan gaggawa na fifiko

5 ×

Incident Recovery Sprint

Ana bada shawarar kiran ganowa

Shawarar mataki na gaba

Monthly Security Advisory don kula da matsayin Tsaro cikin tsari kuma a ci gaba, ko Baseline Review bayan cikakken farfaɗowa don tantance ingantawar matakan kariya.

Incident Recovery Sprint
FintechSingaporeShawara
Monthly Security Advisory (Shawarar Tsaro na Wata)

Wani kamfanin fintech da ke gudanar da dandalin biyan kuɗi da bayar da rance ya fara aikin Monthly Security Advisory bayan wani lokaci na saurin bunƙasar samfur. Ƙungiyar ta ƙara yawan injiniyoyinta kuma ta karɓi manyan abokan ciniki na kamfanoni da dama cikin watanni goma sha biyu. Shugabanni sun ga buƙatar samun tsararren ganin yanayin Tsaro na ci gaba ba tare da kuɗin ɗaukar ma'aikacin tsaro na musamman ba.

Fasahar Kiwon LafiyaƘasar FilifinAbin da Ya faru
Incident Recovery Sprint

Wani kamfanin fasahar kiwon lafiya ya gano alamun shiga ba tare da izini ba cikin wata manhaja da marasa lafiya ke amfani da ita, bayan ma'aikatan kula da marasa lafiya sun ba da rahoton ayyukan tabbatar da ainihi da ba a saba gani ba. Ƙungiyar waɗanda suka kafa kamfanin ta buƙaci taimakon gaggawa wajen tantance matsalar da fifita matakan ɗauka, jagora kan daƙile matsalar, da taswirar matakan farfaɗowa mai tsari kafin wa'adin sanar da abokin hulɗar kula da marasa lafiya.

SaaS / FasahaMalaysiaShawara
Monthly Security Advisory (Shawarar Tsaro na Wata)

Wani kamfanin SaaS da ke faɗaɗa dandalinsa na B2B domin yi wa manyan kamfanonin yankin hidima ya fara aikin Monthly Security Advisory bayan ƙungiyar sayayya ta wani babban kamfani abokin ciniki ta gabatar da tambayoyi game da matsayin tsaro yayin fara hulɗar kasuwanci. Ƙungiyar waɗanda suka kafa kamfanin ta buƙaci jagorancin tsaro mai tsari kuma mai ɗorewa domin ci gaba da samun takardun Tsaro masu sahihanci don zagayen sayayya na manyan kamfanoni, ba tare da ma'aikacin cikin gida da aka keɓe don wannan aiki ba.

Kun shirya don fara aikin tsaro?

Yawancin ayyuka suna farawa da buƙata. Raba sabis ko zangon da kake tunani; za mu tabbatar da hanyar bita, ƙarfafa tsaro ko shawara da ta dace kafin kowane mataki na biyan kuɗi.

Tsara kiran gano buƙatuDuba ayyukan tsaro