云计算服务系统安全计划.docx

云计算服务系统安全计划 云服务商名称（公章）： 填表日期： 目录 TOC \o "1-3" \h \z \uHYPERLINK \l "_Toc421690704" 1. 云计算服务概况 PAGEREF _Toc421690704 \h 1 HYPERLINK \l "_Toc421690705" 1.1平台或系统名称 PAGEREF _Toc421690705 \h 1 HYPERLINK \l "_Toc421690706" 1.2安全保护强度 PAGEREF _Toc421690706 \h 1 HYPERLINK \l "_Toc421690707" 1.3服务模式 PAGEREF _Toc421690707 \h 1 HYPERLINK \l "_Toc421690708" 1.4安全相关人员 PAGEREF _Toc421690708 \h 2 HYPERLINK \l "_Toc421690709" 1.5功能描述 PAGEREF _Toc421690709 \h 2 HYPERLINK \l "_Toc421690710" 1.6组件和边界 PAGEREF _Toc421690710 \h 2 HYPERLINK \l "_Toc421690711" 1.7网络架构 PAGEREF _Toc421690711 \h 3 HYPERLINK \l "_Toc421690712" 1.8使用者类型 PAGEREF _Toc421690712 \h 3 HYPERLINK \l "_Toc421690713" 1.9与其他云服务的关系 PAGEREF _Toc421690713 \h 4 HYPERLINK \l "_Toc421690714" 2. 平台或系统的环境 PAGEREF _Toc421690714 \h 4 HYPERLINK \l "_Toc421690715" 2.1硬件清单 PAGEREF _Toc421690715 \h 4 HYPERLINK \l "_Toc421690716" 2.2软件清单 PAGEREF _Toc421690716 \h 6 HYPERLINK \l "_Toc421690717" 2.3数据流 PAGEREF _Toc421690717 \h 6 HYPERLINK \l "_Toc421690718" 2.4端口、协议、服务 PAGEREF _Toc421690718 \h 6 HYPERLINK \l "_Toc421690719" 3. 平台或系统连接 PAGEREF _Toc421690719 \h 7 HYPERLINK \l "_Toc421690720" 4. 《云计算服务安全能力要求》的实现情况 PAGEREF _Toc421690720 \h 7 HYPERLINK \l "_Toc421690721" 4.1系统开发与供应链安全 PAGEREF _Toc421690721 \h 7 HYPERLINK \l "_Toc421690722" 4.1.1策略与规程 PAGEREF _Toc421690722 \h 7 HYPERLINK \l "_Toc421690723" 4.1.2资源分配 PAGEREF _Toc421690723 \h 8 HYPERLINK \l "_Toc421690724" 4.1.3系统生命周期 PAGEREF _Toc421690724 \h 8 HYPERLINK \l "_Toc421690725" 4.1.4采购过程 PAGEREF _Toc421690725 \h 9 HYPERLINK \l "_Toc421690726" 4.1.5系统文档 PAGEREF _Toc421690726 \h 11 HYPERLINK \l "_Toc421690727" 4.1.6安全工程原则 PAGEREF _Toc421690727 \h 12 HYPERLINK \l "_Toc421690728" 4.1.7关键性分析 PAGEREF _Toc421690728 \h 13 HYPERLINK \l "_Toc421690729" 4.1.8外部信息系统服务及相关服务 PAGEREF _Toc421690729 \h 13 HYPERLINK \l "_Toc421690730" 4.1.9开发商安全体系架构 PAGEREF _Toc421690730 \h 15 HYPERLINK \l "_Toc421690731" 4.1.10开发过程、标准和工具 PAGEREF _Toc421690731 \h