为应对日益复杂的网络安全形势,最大限度地减少网络安全事件带来的危害和损失,保护国家和公众利益,2016年美国针对网络安全应急工作紧锣密鼓地出台了一系列战略指南、行动计划和协调规程,从国家顶层设计层面进一步提升对网络安全应急的重视程度,动员政府、企业乃至全社会力量来应对重大网络安全事件,持续细化、完善应急组织架构和部门协调机制,规范风险/事件的研判分级,进一步丰富、细化、明确了对应急响应过程的具体要求,推动美国网络安全应急管理迈上新的台阶。
<<To cope with the increasingly complexity of cyber threat,minimize the losses and harms of cyber incident and protect interests of the country and the people,in 2016 the United States has been responding vigorously by introducing a series of strategic guidelines,plans of action and coordination procedures concerning the issue,thus raising the level of interest and awareness of cyber incident response from an angle of the nation’s top-level design. By mobilizing the whole-of-government and whole-of-nation forces to deal with significant cyber incident,continuously refining the strategic framework for organizational roles,responsibilities,adopting a common schema for describing the severity of cyber incidents and setting specific requirements on how to prepare for,respond to,and begin to coordinate recovery from a cyber incident,the US government aims to promote cyber incident coordination to a new level.
<<Keywords: | Cyber IncidentThreat ResponseCyber Incident CoordinationSignificant Cyber IncidentCyber Incident Severity SchemaCore Capabilities |