|
| |
 Statements |
| |
Information forms part of the assets of the Administration. Long-lasting operation depends on the integrity and availability of information. Adherence to information security rules can protect information from unauthorized application, revision, disclosure and damage, whether these behavior are deliberate or accidental.
Protection of information assets is one of the basic responsibilities of all employees of the Administration: |
| |
I. Ensure information assets only serve purposes approved by the management of the Administration; |
| |
II. Adhere to security rules and procedures in the information security management system of the Administration; |
| |
III. All employees shall take responsibilities for the protection of information assets. |
| |
In brief, “Everyone is duty-bound to safeguard information security”. |
| |
|
| |
Application scope |
| |
Applicable to information records, physical environments, machines and equipment, software/hardware, personnel and programs concerning the development and maintenance of the management system of traffic signals. |
| |
I. Information records |
| |
|
Data base, data files, system planning and design documents, operation handbooks, contracts, teaching materials, as well as regulations and rules of all relevant units |
| |
II. Computer system |
| |
|
Computer operation and application systems, developing tools, software packages, and utility programs, etc of all relevant units |
| |
III.
Entities |
| |
|
Entities refer to offices, equipment rooms and equipment related to information. |
| |
|
(I) Offices and equipment rooms: |
| |
|
Traffic signals department, the control room of the chief dispatcher and control office, the computer room, the power room and the technicians' room on the fourth floor of the Taiwan Railway building of the Administration. |
| |
|
(II) Equipment: |
| |
|
1. Computers: Hosts, servers, and terminals such as laptops and desk computers.
2. Communication equipment: Line concentrators, network switches, transmission lines, circuit switchers (for external communication), modems and fax machines, etc
3. Magnetic storage devices: MO, discs, CDs, identity cards and access cards, etc.
4. Other technical equipment: CD writers, printers, graph plotters, simulators, copy machines, spare power sources, uninterrupted power supply, power supply, TID matchboxes, GPS, air conditioners and access control equipments, etc |
| |
IV. Personnel
|
| |
|
(I) Internal personnel: formal and temporary employees |
| |
|
(II) External personnel: contractors, business partners and visitors |
| |
V. Operation procedures |
| |
|
Operation procedures, control and management measures and other regulations and rules, etc |
| |
|
|
|
