![](\"https:\/\/i0.wp.com\/2.bp.blogspot.com\/-by-bqbg0RQg\/U5hRDICRdcI\/AAAAAAAAAo4\/kty3aS94vv4\/s1600\/1png.png?resize=400%2C108\")
<\/div>\n
<\/span>
<\/span>Nihai hedef belli, peki i\u015fletmede teknoloji hangi ama\u00e7larla kullan\u0131l\u0131yor ve bize getirileri nelerdir?<\/span><\/div>\n
<\/span><\/div>\n\n
![](\"https:\/\/i0.wp.com\/3.bp.blogspot.com\/-rJz41W2FtI4\/U5hRL3dzTUI\/AAAAAAAAApo\/OyqQUIcHQWI\/s1600\/2.png?resize=640%2C386\")
<\/div>\n
<\/span><\/div>\n<\/div>\n
\n
<\/span>Hangi ama\u00e7 i\u00e7in kullan\u0131yoruz?<\/span><\/span><\/h4>\n<\/div>\n\n
\n- H\u0131zl\u0131 ileti\u015fim, h\u0131zl\u0131 yan\u0131t almak<\/span><\/li>\n
- Daha kontroll\u00fc ve do\u011fru sonu\u00e7lar elde etmek, daha fazla i\u015f ile ba\u015fa \u00e7\u0131kabilmek<\/span><\/li>\n
- Zaman ba\u011f\u0131ms\u0131z \u00e7al\u0131\u015fmak, esnek \u00e7al\u0131\u015fma saatleri olu\u015fturmak<\/span><\/li>\n
- Mekan ba\u011f\u0131ms\u0131z \u00e7al\u0131\u015fmak, mobil verimlilikten faydalanmak, zamandan tasarruf<\/span><\/li>\n
- Bilgiyi kolay payla\u015fmak, anl\u0131k veya s\u00fcrekli bilgi payla\u015f\u0131m\u0131<\/span><\/li>\n
- Daha geni\u015f kitlelere eri\u015fmek, mesafelerden etkilenmeksizin daha fazla al\u0131c\u0131ya ula\u015fabilmek<\/span><\/li>\n
- 7\/24 tan\u0131t\u0131m yapabilmek, \u00fcr\u00fcn ve hizmet bilgisini s\u00fcrekli eri\u015filebilir tutmak<\/span><\/li>\n
- Veri toplamak, ge\u00e7mi\u015f i\u015flerden gelecekte faydal\u0131 bilgi elde edinmek<\/span><\/li>\n<\/ul>\n<\/div>\n
<\/span><\/div>\n\n
![](\"https:\/\/i0.wp.com\/3.bp.blogspot.com\/-4M5Ek1w2EpY\/U5hRMA8S97I\/AAAAAAAAApU\/MjkuVptRAPU\/s1600\/3.png?resize=640%2C378\")
<\/div>\n
<\/span><\/div>\n<\/div>\n
Temel kullan\u0131m sebepleri olduk\u00e7a tan\u0131d\u0131k, bunlar genellikle ortak sebepler. Peki getirilerinin yan\u0131 s\u0131ra i\u015fletmenin teknolojiyi kullanarak ald\u0131\u011f\u0131 ek sorumluluklar nelerdir?<\/span><\/div>\n
<\/span><\/div>\n\n
![](\"https:\/\/i0.wp.com\/4.bp.blogspot.com\/-kcqdzgOfNCM\/U5hRMnItMLI\/AAAAAAAAAp8\/q4lc6UeSXC0\/s1600\/4.png?resize=640%2C392\")
<\/div>\n
<\/div>\n
\u2028Bu soruya yan\u0131t vermek i\u00e7in \u00f6ncelikle teknolojiyi nas\u0131l kullan\u0131yoruz sorusunu irdelemek gerekli.<\/span><\/div>\n
<\/span><\/div>\n\n
<\/span>Bir i\u015fletme teknolojiyi nas\u0131l kullan\u0131yor?<\/span><\/span><\/h4>\n<\/div>\n\n
\n- H\u0131zl\u0131 ileti\u015fime elveri\u015fli olan e-posta yaz\u0131\u015fma program ve\/veya altyap\u0131lar\u0131 olu\u015fturarak<\/span><\/li>\n
- E-posta yaz\u0131\u015fmalar\u0131n\u0131 saklayarak ve her yerden eri\u015filebilir platformlar kullanarak<\/span><\/li>\n
- Ge\u00e7mi\u015f verilerden faydalanmak i\u00e7in onlara h\u0131zl\u0131ca ula\u015fmak amac\u0131yla her t\u00fcrl\u00fc \u015firket verisini elektronik ortamda saklayarak<\/span><\/li>\n
- Saklad\u0131\u011f\u0131 verilere zaman s\u0131n\u0131r\u0131 olmaks\u0131z\u0131n eri\u015fim sa\u011flayarak<\/span><\/li>\n
- Ta\u015f\u0131nabilir cihazlar ile ofis-bina d\u0131\u015far\u0131s\u0131nda da ba\u011flant\u0131 kurarak dosyalara eri\u015ferek ve\/veya \u00e7al\u0131\u015fmay\u0131 s\u00fcrd\u00fcrerek<\/span><\/li>\n<\/ul>\n<\/div>\n
<\/span>Bilgisayarlar, tablet pc’ler, telefonlar gibi cihazlar eri\u015fim ve i\u015flem kolayl\u0131\u011f\u0131 sa\u011flarken bu bile\u015fenlerden olu\u015fan i\u015fyeri a\u011flar\u0131 d\u0131\u015f eri\u015fime sahip cihazlar\u0131n getirdi\u011fi riskleri de i\u015fyeri a\u011f\u0131 i\u00e7erisine ta\u015f\u0131maktad\u0131r.<\/span><\/div>\n
<\/span><\/div>\n\n
![](\"https:\/\/i0.wp.com\/1.bp.blogspot.com\/-aF36ft2nUrw\/U5hRNbNRrYI\/AAAAAAAAAqM\/3CK3-aOYLT4\/s1600\/5.png?resize=640%2C386\")
<\/div>\n
<\/span><\/div>\n<\/div>\n
S\u0131kla\u015fan, artan elektronik ortam kullan\u0131m\u0131, artan riski de beraberinde getirmekte ve bu do\u011frultuda \u015firketin kontrol etmesi gereken yeni alanlar ortaya \u00e7\u0131kmaktad\u0131r.<\/span><\/p>\n<\/div>\n\n
![](\"https:\/\/i0.wp.com\/4.bp.blogspot.com\/-v9mJQX-d1v8\/U5hROUHJSpI\/AAAAAAAAAqI\/TrpBSoEnQdE\/s1600\/6.png?resize=640%2C386\")
<\/div>\n
<\/span><\/div>\nPek \u00e7ok firma gizli herhangi bir bilgisi olmad\u0131\u011f\u0131, yapmakta oldu\u011fu faaliyetlerin rutin faaliyetler oldu\u011funu belirtmektedir.<\/span><\/div>\n
<\/span><\/div>\nFakat yine de bu firmalar bilgilerini sadece ilgili ki\u015filerin g\u00f6rmesi ve ilgili firmalar ile kontrol\u00fc dahilinde payla\u015f\u0131lmas\u0131n\u0131 istemektedir.<\/span><\/div>\n
<\/span><\/div>\n\u00c7a\u011f\u0131m\u0131zda bir \u015firketin g\u00fcndelik operasyonlar\u0131n\u0131n kesintisiz s\u00fcrmesi, ticari de\u011ferlerinin ve kazan\u00e7lar\u0131n\u0131n gerekli gizlilik \u00f6l\u00e7\u00fcs\u00fcnde saklanmas\u0131 ve korunabilmesinin \u015firketin varl\u0131\u011f\u0131n\u0131 s\u00fcrd\u00fcrebilmesi i\u00e7in gereklilik ta\u015f\u0131d\u0131\u011f\u0131 olduk\u00e7a a\u00e7\u0131k durumdad\u0131r.<\/span><\/div>\n<\/p>\n
![](\"https:\/\/i0.wp.com\/2.bp.blogspot.com\/-90AIj5f_xlE\/U5hROkU2JLI\/AAAAAAAAAqQ\/X_WgZWYW1Uw\/s1600\/7.png?resize=640%2C386\")
<\/div>\n
<\/div>\n
\u0130stenmeyen trafi\u011fe ba\u011fl\u0131 geli\u015fen bu risk g\u00f6z ard\u0131 edildi\u011fi takdirde sonu\u00e7 tahmin edilemez, bilinmez derecede sak\u0131ncal\u0131 olabilmektedir.<\/span><\/div>\n
<\/span>![](\"https:\/\/i0.wp.com\/1.bp.blogspot.com\/-1QvLniunX4I\/U5hRQhjXCjI\/AAAAAAAAAqU\/db2j4li0F28\/s1600\/broken-hard-drive_229x128.jpg?resize=200%2C132\")
<\/span><\/div>\nBaz\u0131 \u015firketler i\u00e7in bilgi gizlili\u011fi de\u011ferli bulunmaz iken bilgi kayb\u0131n\u0131n telafi edilemez derecede \u00f6nemli oldu\u011fu maalesef kay\u0131p ya\u015fand\u0131ktan sonra fark edilmektedir.<\/span><\/div>\n
<\/span><\/div>\nBilgi g\u00fcvenli\u011fi yaln\u0131zca gizlili\u011fi i\u00e7ermemektedir; bilgi kayb\u0131, bilginin yetkisiz ve sehven eri\u015fimi, de\u011fi\u015ftirilmesi, b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fcn bozulmas\u0131 gibi etkenleri de bilgi g\u00fcvenli\u011fi konusunda dikkate al\u0131nmaktad\u0131r.<\/span><\/p>\n<\/span><\/div>\n<\/span><\/div>\n<\/p>\n
![](\"https:\/\/i0.wp.com\/1.bp.blogspot.com\/-liF0slM5A-c\/U5hRPYwEc_I\/AAAAAAAAAp0\/8OdUqAeIIGY\/s1600\/8.png?resize=640%2C386\")
<\/div>\n<\/div>\n
\n
<\/span>\u00c7\u00f6z\u00fcm bilgisayarlar aras\u0131ndaki ba\u011f\u0131 ya da \u0130nternet’i kesmek de\u011fil!<\/span><\/span><\/h3>\n<\/div>\nGetirilerini inceledi\u011fimizde \u0130nternet ba\u011flant\u0131s\u0131 bir \u015firket i\u00e7in vazge\u00e7ilemez bir avantaj; kurumsal ve bireysel ya\u015fant\u0131da teknolojinin ya\u015famas\u0131nda en \u00f6nemli altyap\u0131 noktalar\u0131ndan birisi.<\/span><\/div>\n
<\/span><\/div>\nTehlikelerini bilmek ve \u00f6nlemlerini alarak bu risklerden korunmak ise tek \u00e7\u00f6z\u00fcm.<\/span><\/div>\n<\/div>\n
\n
<\/span>A\u011f\u0131n\u0131zda Sizi Bekleyen Tehlikeler ve Risk Analizi<\/span><\/span><\/h2>\n<\/div>\n\n
<\/span>G\u00fcvenlik bir \u00fcr\u00fcn de\u011fil, s\u00fcre\u00e7tir (Bruce Schneier<\/i><\/span>)<\/span><\/span><\/h3>\n<\/div>\nBilgilerinizin ve a\u011f\u0131n\u0131z\u0131n g\u00fcvenli\u011fi i\u00e7in bir cihaz veya bir hizmet sat\u0131n almak ve t\u00fcm sorununuzu \u00e7\u00f6zmesini beklemek malesef ger\u00e7ek\u00e7i ve uygulanabilir de\u011fil.<\/span><\/div>\n
<\/span><\/div>\n\u00c7\u00fcnk\u00fc bilgileriniz ve a\u011f\u0131n\u0131z s\u00fcrekli geli\u015fen, kendini yenileyen, ya\u015fayan varl\u0131klar. Bu varl\u0131klar\u0131 korumak i\u00e7in ya\u015fam d\u00f6ng\u00fclerini periyodik olarak takip etmeli ve ihtiya\u00e7lar\u0131n\u0131 tespit etmeliyiz. Bu tespitlerde ortaya \u00e7\u0131kan bulgular\u0131 de\u011ferlendirerek, gerekli tedavileri, iyile\u015ftirmeleri elbette b\u00fct\u00e7emiz \u00e7er\u00e7evesinde ger\u00e7ekle\u015ftirmeli, kurumumuzun ama\u00e7lar\u0131na y\u00f6nelik kuruma \u00f6zg\u00fc \u00f6nlemleri almal\u0131 ve t\u00fcm bu s\u00fcre\u00e7leri kurumsal ekibimizin tamam\u0131nda uygulayabilmeliyiz.<\/span><\/div>\n
<\/span><\/div>\nT\u0131pk\u0131 v\u00fccudumuzun sa\u011fl\u0131\u011f\u0131 gibi bilgi ve a\u011f g\u00fcvenli\u011finin de sa\u011fl\u0131\u011f\u0131, sa\u011fl\u0131kl\u0131 \u00e7al\u0131\u015f\u0131rl\u0131\u011f\u0131 belirli periyodlarda g\u00f6zden ge\u00e7irilmeli.<\/span><\/div>\n
<\/span><\/div>\nPeriyodik kontroller ile desteklenen sistemlerin daha g\u00fcvenli, sa\u011fl\u0131kl\u0131 ve dolay\u0131s\u0131yla verimli \u00e7al\u0131\u015fmas\u0131 s\u00f6z konusudur.<\/span><\/div>\n
<\/span><\/p>\n![](\"https:\/\/i0.wp.com\/3.bp.blogspot.com\/-RXpxP85pUmA\/U5hRQDCrEQI\/AAAAAAAAAqY\/x_iDg365MEY\/s1600\/9.png?resize=640%2C488\")
<\/div>\n
<\/span><\/p>\n
<\/span><\/h3>\n<\/span>Nereden ba\u015flayaca\u011f\u0131z?<\/span><\/span><\/h3>\nG\u00fcvenlik, pek \u00e7ok bile\u015fene sahip bir yap\u0131, bir sistemdir. G\u00fcvenlik sisteminiz ihtiyac\u0131n\u0131z do\u011frultusunda uzmanlar taraf\u0131ndan yap\u0131lan tespite ve b\u00fct\u00e7enize g\u00f6re dizayn edilir.<\/span>
<\/span>Bu sistemin \u00e7ok k\u00fc\u00e7\u00fck bir b\u00f6l\u00fcm\u00fcn\u00fc olu\u015ftursa da ihtiya\u00e7 duyulan pek \u00e7ok bile\u015fenden akla gelen ilk \u00e7\u00f6z\u00fcm hem fiyat hem de uygulama yayg\u0131nl\u0131\u011f\u0131 a\u00e7\u0131s\u0131nda g\u00fcvenlik duvarlar\u0131d\u0131r.<\/span>
<\/span>
<\/span><\/div>\n![](\"https:\/\/i0.wp.com\/3.bp.blogspot.com\/-nMDStvem0D4\/U5hRLHGDqNI\/AAAAAAAAApI\/YPGRFXQG2jk\/s1600\/10.png?resize=200%2C200\")
<\/span>
<\/span><\/div>\nD\u0131\u015f d\u00fcnya ile aran\u0131za bir g\u00fcvenlik duvar\u0131 (Firewall) konumland\u0131rd\u0131n\u0131z. Bu duvar g\u00fcvenlik ilgili t\u00fcm ihtiya\u00e7lar\u0131n\u0131z\u0131 \u00e7\u00f6zemeyecek fakat yine de internete kar\u015f\u0131 tamamen korunmas\u0131z olman\u0131z\u0131 \u00f6nleyecektir.<\/span>
<\/span>Peki en temel yap\u0131 olan bu duvar (firewall) sa\u011fl\u0131kl\u0131 durumda m\u0131, duvar\u0131n\u0131z zafiyet i\u00e7eriyor mu?<\/span>
<\/span>
<\/span>
<\/span>
<\/span>
![](\"https:\/\/i0.wp.com\/2.bp.blogspot.com\/-Dd14GrhuLm8\/U5hRLE18e5I\/AAAAAAAAApc\/qdBYSof2mZo\/s1600\/11.png?resize=200%2C200\")
<\/p>\nAlm\u0131\u015f oldu\u011funuz \u00f6nlemler geli\u015fen teknoloji, de\u011fi\u015fen ihtiya\u00e7lar ve kullan\u0131m al\u0131\u015fkanl\u0131klar\u0131 do\u011frultusunda zafiyet (zay\u0131fl\u0131k, eksiklik) i\u00e7erebilir.<\/span>
<\/span>Bu durumu kontrol etmez isek korundu\u011fumuzu d\u00fc\u015f\u00fcn\u00fcrken oysa risklere a\u00e7\u0131k \u015fekilde sistemimizi kullanmaya devam ediyoruz demektir. <\/span>
<\/span><\/p>\n<\/span>Kurumunuzda kullan\u0131lmas\u0131 gereken g\u00fcvenlik \u00e7\u00f6z\u00fcmlerinin neler oldu\u011funu, ihtiya\u00e7lar\u0131 tespit etmek, yat\u0131r\u0131m\u0131n\u0131z\u0131 do\u011fru yapmak amac\u0131yla risk analizi ger\u00e7ekle\u015ftirilmesi \u00f6nerilir.<\/span>
<\/span><\/p>\n<\/span>Risk Analizi<\/span><\/span><\/h2>\n\u00c7e\u015fitli uzmanl\u0131k seviyelerinde ger\u00e7ekle\u015ftirilebilen bu kontrol (test) s\u00fcre\u00e7lerinde ilk ad\u0131m “Zafiyet Taramas\u0131”<\/b> d\u0131r. <\/span><\/div>\n
<\/span><\/div>\n