有鑑于此,我们参考了由德国资讯安全局召 集资安专家所编撰的腋IT基准安全防护手册 (IT Baseline Protection Manual, ITBPM)。分门 别类的整理出共7大类、61个模组、375项组织资 讯资产经常面临的威胁项目的检查表(Check List)。读者在风险评鑑过程中可以参考这些完 整列举的风险项目,用以对照组织内部所面临的 风险,不但避免穷举与讨论时间的浪费,更能善 用

**IT-Security** - causes a lot of expenses - is too expensive - hinders the users to do their jobs - causes much more work in the IT-administration - is only something for larger companies **

The IT Baseline Protection Manual contains standard security safeguards, implementation advice and aids for numerous IT configurations which are typically found in IT systems today. This information i

德国BPM（德国出版的IT基线防护手册）关于安全威胁的分类 Loss of personnel Failure of the IT system Lightning Fire Water Burning cables Inadmissible temperature and humidity Dust, soiling Loss of data