1

4





(Information Communication
Technology)






()
National Institute of
Standards and Technology)
SP800-60 Volume I: Guild for
Mapping Type of Information and
Information System to Security
Categories
CNS 27001




()














() 31 CFR 800.208
(critical
infrastructure)

5



()














()








()





()

8










































Federal Information Security
Modernization Act of 2014 3554

10


11





The Directive on security
of network and information
systems





6 USC 132

(Designation of critical
infrastructure protection
program)

Executive Order 13636

12


13










































(

14
 )

15


16