Polisi Keselamatan Siber JPA versi 1.3

POLISI KESELAMATAN SIBER JPA Versi: 1.3 Muka Surat: i dari iii Jabatan Perkhidmatan Awam, Malaysia Tarikh Akhir Kemaskini 7 Disember 2023 KANDUNGAN SEJARAH POLISI KESELAMATAN SIBER JPA ..........................................................1 PENGENALAN ...............................................................................................................2 OBJEKTIF ......................................................................................................................2 PERNYATAAN POLISI ..................................................................................................3 SKOP ..............................................................................................................................4 PRINSIP-PRINSIP ..........................................................................................................6 PENILAIAN RISIKO KESELAMATAN ICT ....................................................................8 PELAN PENGURUSAN KESELAMATAN MAKLUMAT ...............................................9 KAWALAN 01: POLISI KESELAMATAN MAKLUMAT ..............................................12 K01/01 Pelaksanaan Dasar .......................................................................................12 K01/02 Penyebaran Dasar ........................................................................................12 K01/03 Penyelenggaraan Dasar ...............................................................................12 K01/04 Pematuhan Dasar .........................................................................................13 KAWALAN 02: ORGANISASI KESELAMATAN MAKLUMAT....................................14 K02/01 Tadbir Urus Keselamatan Maklumat ...........................................................14 K02/02 Pihak Luaran .................................................................................................32 KAWALAN 03: KESELAMATAN SUMBER MANUSIA ...............................................34 K03/01 Sebelum Perkhidmatan ................................................................................34 K03/02 Semasa Perkhidmatan .................................................................................34 K03/03 Bertukar Atau Tamat Perkhidmatan ...........................................................35 KAWALAN 04: PENGURUSAN ASET ........................................................................37 K04/01 Akauntabiliti Aset ICT ..................................................................................37 K04/02 Peminjaman dan Pemulangan Aset ICT .....................................................38 K04/03 Pengelasan Maklumat ..................................................................................39 K04/04 Pengendalian Maklumat ...............................................................................39 K04/05 Pengelasan dan Pengendalian Data Terbuka ............................................40 K04/06 Pengendalian Media .....................................................................................41 KAWALAN 05: KAWALAN CAPAIAN ........................................................................43 K05/01 Kawalan Capaian ..........................................................................................43 K05/02 Pengurusan Capaian Pengguna .................................................................43

RkJQdWJsaXNoZXIy MTc1NDAy