|
The Security Policy Framework (or "SPF") is a set of high-level policies on security, mainly affecting the UK government and its suppliers.〔(【引用サイトリンク】accessdate=14 August 2011 )〕 The structure has changed over time. Version 11 was published in October 2013; it has 20 "Mandatory Requirements" grouped into four policy areas. Previously the SPF had as many as 70 Mandatory Requirements, which were more detailed, and which were grouped into 7 areas:〔(【引用サイトリンク】title=STREAM for the Security Policy Framework )〕 :1: Governance, Risk Management & Compliance :2: Protective Marking & Asset Control :3: Personnel Security :4: Information Security & Assurance :5: Physical Security :6: Counter-Terrorism :7: Business Continuity These mandatory requirements are a baseline which apply to all UK government departments; higher requirements may apply in some cases. Public-sector bodies are responsible for managing their own technical security risks, but can draw on expertise and guidelines provided by CESG and the Cabinet Office. The Centre for Protection of National Infrastructure also helps protect critical infrastructure. The Ministry of Defence has its own separate policies and systems. The SPF superseded the Manual of Protective Security. Part of the SPF is produced by CESG, and part by the Cabinet Office's Security Policy Division.〔(【引用サイトリンク】accessdate=14 August 2011 )〕 ==External links== * (Current SPF ) * (SPF resources on CESG's website ) * (Older copies of the SPF and MPS requested under the Freedom of Information Act ) * (Resources for the SPF ) 抄文引用元・出典: フリー百科事典『 ウィキペディア（Wikipedia）』 ■ウィキペディアで「Security Policy Framework」の詳細全文を読む スポンサード リンク
|