TÜV Informationstechnik GmbH  Member of TÜV NORD Group TSI: Trusted Site Infrastructure The certification program for data...
AGENDA Certification Process TSI Criteria TSI Certification Benefits Introduction to TUV Cost
TÜV´s in Germany TÜV Rheinland / Berlin-Brandenburg TÜV Süddeutschland TÜV Rheinland / Berlin-Brandenburg TÜV Saarland
TÜV NORD Group
TÜV NORD in Europe Grandvilliers Croydon Best Essen Madrid Mailand Athen Istanbul Katowice Prag Bratislava Novi Sad Slavon...
TÜV NORD worldwide San José Clifton Buenos Aires Rio de Janeiro Dammam Abu Dhabi Teheran Mumbai Barat Bangkok Shanghai Hon...
Qualified personnel provide the basis  for high-level services 70% of all employees work in the technical domain. More tha...
TÜViT  Our Principles TÜViT  -  The Trust Provider for  Quality  and  Security  in Information Technology works TÜViT  is ...
TÜViT  Our Vision in the field of Information Technology and Telecommunication
Quality  And Security IT and Telecom-munication IT and Telecom-munication IT and Telecom-munication TÜVit  Our Mission
TÜViT   Topics Company Systems Components Project
Information Technology on all Layers Company Systems Components Project Evaluation of IT Security Optimization of IT Quali...
Information Technology Methods Company Systems Components Project IT Security IT Quality quid! / ULD ISO 27001 / ISO 17799...
IT-Security Accreditations Company Systems Components Project ISO 17799 / BS7799-2 GSM SAS / TU.4 quid! / ULD Baseline Pro...
IT-Security Knowledge Company Systems Components Project <ul><ul><li>Security Policy </li></ul></ul><ul><ul><li>Security M...
Trusted site infrastructure Trusted site  infrastructure for  Data Center
Trusted site infrastructure Functional security based on three columns Informational technical Organizational Physical FUN...
Trusted site infrastructure <ul><li>盜竊 </li></ul><ul><li>破壞 </li></ul><ul><li>損毀 </li></ul><ul><li>攻擊 </li></ul><ul><li>火災...
Trusted site infrastructure Environment Criteria, e.g.  ( 地理環境) The building surrounds the information technology which ha...
 
Structural aspects e.g.  ( 建築結構) Trusted site infrastructure Walls (VdS 2334), windows and doors must offer protection aga...
 
Upcoming SlideShare
Loading in …5
×

德國TSI公司簡報-1

955 views
854 views

Published on

德國TSI公司委託設計

Published in: Business
0 Comments
1 Like
Statistics
Notes
  • Be the first to comment

No Downloads
Views
Total views
955
On SlideShare
0
From Embeds
0
Number of Embeds
1
Actions
Shares
0
Downloads
0
Comments
0
Likes
1
Embeds 0
No embeds

No notes for slide

德國TSI公司簡報-1

  1. 1. TÜV Informationstechnik GmbH Member of TÜV NORD Group TSI: Trusted Site Infrastructure The certification program for data center - more than availability health checks
  2. 2. AGENDA Certification Process TSI Criteria TSI Certification Benefits Introduction to TUV Cost
  3. 3. TÜV´s in Germany TÜV Rheinland / Berlin-Brandenburg TÜV Süddeutschland TÜV Rheinland / Berlin-Brandenburg TÜV Saarland
  4. 4. TÜV NORD Group
  5. 5. TÜV NORD in Europe Grandvilliers Croydon Best Essen Madrid Mailand Athen Istanbul Katowice Prag Bratislava Novi Sad Slavonski Brod Moskau Plovdiv Tallin Kolding Hannover Hamburg Espoo Bologna Riga Wilna Bukarest Göteborg Ankara Donezk Budapest
  6. 6. TÜV NORD worldwide San José Clifton Buenos Aires Rio de Janeiro Dammam Abu Dhabi Teheran Mumbai Barat Bangkok Shanghai Hong Kong Tokyo Seoul Taipeh Almaty
  7. 7. Qualified personnel provide the basis for high-level services 70% of all employees work in the technical domain. More than 2/3 of these are graduate engineers, and the rest are master craftsmen or technicians <ul><li>Civilengineers </li></ul><ul><li>Biologists </li></ul><ul><li>Chemists </li></ul><ul><li>Electrical engineers </li></ul><ul><li>Geologists </li></ul><ul><li>Geographers </li></ul><ul><li>Informatics specialists </li></ul><ul><li>Automotive engineers </li></ul><ul><li>Aerospace engineers </li></ul><ul><li>Mechanical engineers </li></ul><ul><li>Meteorologists </li></ul><ul><li>Medical specialists </li></ul><ul><li>Psychologists </li></ul><ul><li>Physicists </li></ul><ul><li>Process engineers </li></ul><ul><li>Material engineers </li></ul><ul><li>Economists </li></ul>
  8. 8. TÜViT Our Principles TÜViT - The Trust Provider for Quality and Security in Information Technology works TÜViT is a private company and does not develop, sell or integrate any products ! Manufacturers <ul><ul><ul><li>Vendors </li></ul></ul></ul><ul><ul><ul><li>Integrators </li></ul></ul></ul><ul><ul><ul><li>Operators </li></ul></ul></ul>Special interest groups Branches S hare holders/members Government Independent from unbiased impartial
  9. 9. TÜViT Our Vision in the field of Information Technology and Telecommunication
  10. 10. Quality And Security IT and Telecom-munication IT and Telecom-munication IT and Telecom-munication TÜVit Our Mission
  11. 11. TÜViT Topics Company Systems Components Project
  12. 12. Information Technology on all Layers Company Systems Components Project Evaluation of IT Security Optimization of IT Quality Privacy Security Management Quality Management Service Management Physical Security Network Security Secure e-Business Usability Content Quality Monitoring Reliability Document Management Evaluation of Security Software Security Hardware Functional Tests Improvement of Processes Models Project Management
  13. 13. Information Technology Methods Company Systems Components Project IT Security IT Quality quid! / ULD ISO 27001 / ISO 17799 GSM SAS / TU4 Baseline Protection ISO 9000 ITIL <ul><li>- Infrastructure </li></ul><ul><li>- Security Qualification (SQ)® </li></ul><ul><li>Privacy </li></ul><ul><li>Check of CA’s acc. SigG </li></ul><ul><li>- Usability </li></ul><ul><li>Quality </li></ul><ul><li>PK-DML </li></ul>CMMI SPICE V-Model RUP IEEE 1233 ISO 12119 ISO 9241 Common Criteria / ITSEC FIPS 140 ZKA-Criteria Trust Site Hardware Laboratory
  14. 14. IT-Security Accreditations Company Systems Components Project ISO 17799 / BS7799-2 GSM SAS / TU.4 quid! / ULD Baseline Protection Common Criteria / ITSEC FIPS 140-1/-2 ZKA-Criteria Trusted Site Check of CA’s acc. SigG - Infrastructure - Security Qualification (SQ) ® - Privacy
  15. 15. IT-Security Knowledge Company Systems Components Project <ul><ul><li>Security Policy </li></ul></ul><ul><ul><li>Security Management </li></ul></ul><ul><ul><li>Risk Analyses </li></ul></ul><ul><ul><li>Training </li></ul></ul><ul><ul><li>eBusiness / eGovernment </li></ul></ul><ul><ul><li>Public Key Infrastructures </li></ul></ul><ul><ul><li>Cryptography </li></ul></ul><ul><ul><li>Network Security </li></ul></ul><ul><ul><li>Firewall Systems </li></ul></ul><ul><ul><li>Firewall Products </li></ul></ul><ul><ul><li>OS / Databases </li></ul></ul><ul><ul><li>Viruses / Trojans </li></ul></ul><ul><ul><li>digital Signatures </li></ul></ul><ul><ul><li>Authentication Methods </li></ul></ul><ul><ul><li>Biometrics </li></ul></ul><ul><ul><li>Random Numbers </li></ul></ul><ul><ul><li>Time Stamps </li></ul></ul><ul><ul><li>Smart Cards </li></ul></ul>ISO 27001 / ISO 17799 GSM SAS / TU.4 quid! / ULD Baseline Protection Trusted Site Check of CA’s acc. SigG - Infrastructure - Security Qualification (SQ) ® - Privacy Common Criteria / ITSEC FIPS 140 ZKA-Criteria
  16. 16. Trusted site infrastructure Trusted site infrastructure for Data Center
  17. 17. Trusted site infrastructure Functional security based on three columns Informational technical Organizational Physical FUNCTIONAL SECURITY
  18. 18. Trusted site infrastructure <ul><li>盜竊 </li></ul><ul><li>破壞 </li></ul><ul><li>損毀 </li></ul><ul><li>攻擊 </li></ul><ul><li>火災 </li></ul><ul><li>水災 </li></ul><ul><li>化學氣體 </li></ul><ul><li>爆炸 </li></ul><ul><li>雷擊 </li></ul><ul><li>地震 </li></ul><ul><li>電力中斷 </li></ul><ul><ul><li>電力切換 </li></ul></ul><ul><ul><li>超過負載 </li></ul></ul><ul><li>空調失靈 </li></ul><ul><li>通信失效 </li></ul><ul><li>警報系統失效 </li></ul><ul><li>電磁效應 </li></ul><ul><li>無線電波 </li></ul>風險來源
  19. 19. Trusted site infrastructure Environment Criteria, e.g. ( 地理環境) The building surrounds the information technology which has been installed and offers external protection. The location of the building plays a role with regard to the surrounding hazard potentials, as does the actual position of the security area within the building. If these factors are taken into consideration, potential sources of hazard can be prevented from the very beginning. Environmental hazards originating from water, explosions, ruins and debris, vibration and shaking and hazardous substances should definitely be avoided. In the same way, traffic routes which carry hazardous substances should be avoided, in order to prevent possible direct negative effects and also indirect effects, such as for example blocked access. 資料機房的座落地點: 水災,爆炸,暴動,震動,危險物質,交通狀況 Environment Criteria
  20. 21. Structural aspects e.g. ( 建築結構) Trusted site infrastructure Walls (VdS 2334), windows and doors must offer protection against unauthorized access (DIN V ENV 1627) and fire and smoke (DIN 18095). In the same way, it must be ensured that no sections of the building are under threat from water (VdS 2007), EM/RF interference fields (EN 50147 Part 1) or close proximity to dangerous production processes. The building must be provided with external protection against lightning strike (DIN VDE 0185 Part 3) and must allow the security area to be located in a separate fire protection area (DIN 4102). The supply lines have to be laid in protective structures. EN 1047-2 specifies that in order to ensure the functioning of the IT systems and the data media in case of fire, the items requiring protection may only be exposed to defined maximum temperature and humidity limits. 資料機房的座落地點:防盜,防火,雷擊,溫濕度承受度 Structural aspects

×