Government Configuration Baseline


緣 由:

依中華民國107年6月6日公布之"資通安全管理法",與中華民國108年8月26日修正之"資通安全責任等級分級辦法"內"附表三 資通安全責任等級B級之公務機關應辦事項"之"技術面 \ 政府組態基準 \ 初次受核定或等級變更後之一年內,依主管機關公告之項目,完成政府組態基準導入作業,並持續維運。"


政府組態基準 ( Government Configuration Baseline,以下簡稱 GCB ) 目的在於規範資通訊終端設備 ( 如:個人電腦 ) 的一致性安全設定 ( 如:密碼長度、更新期限等 ),以降低成為駭客入侵管道,進而引發資安事件之疑慮。


本校將參考主管機關:行政院所公告之 GCB 範本,針對校內電腦作業環境提供一致性安全基準與實作指引,建立安全組態提升資安防護能力。


Reason:

According to the "Cyber Security Management Act" promulgated on June 6, 2018 and the "Regulations on Classification of Cyber Security Responsibility Levels" amended on August 26, 2019, "Technical aspect \ Government configuration standard" of "Schedule 3: Matters to be conducted by the government agency of cyber security responsibility Level-B", within one year of receipt of initial approval or change of levels, the government agency shall complete the import operation of government configuration standards for the items publicized by the competent authority and shall continue the maintenance and operation thereof.

The Government Configuration Baseline ( GCB ) aims to regulate the consistent security settings ( such as password length, update period, etc. ) of telecommunication terminal equipment (such as personal computers), so as to reduce the risk of becoming a hacking pipeline, which raises concerns about information security incidents.

Our school will refer to the GCB template announced by the Executive Yuan to provide consistent safety benchmarks and implementation guidelines for the computer operating environment on campus, and establish a security configuration to improve the ability of security protection.



本校施行進度、相關資料與連結:

The school's implementation progress, related information and links:

施行對象:( 配合 VANS 計畫施行)

Target : ( To be implemented in conjunction with the VANS plan )

  • Cooperate with the subjects and units of the Ministry of Education's "Cyber Security Technical Audit Operation of Educational Institutions", which are divided into the following four items:

    • Information unit

    • Administrative unit

    • Academics unit

    • Planning unit


安裝限制:

  1. 僅安裝於 Win10/Win11 電腦。( 若有作業系統 Win10 以前電腦 ,請先完成 Win10 升級後,再行安裝 )

  2. 安裝前, Win10、Chrome、Firefox 請先完成更新至最新版本。( **檢查與升級教學 )

  3. "Windows 7 已於 2020 年 1 月 14 日終止支援",為強化校內資訊安全,請各單位盡量安排更新。

Installation restrictions:

1. Only Install on Win10/Win11 computer. ( If you have a computer with an operating system before Win10, please complete the upgrade of Win10 before installation. )

2. Please update to the latest version of Win10, Chrome, and Firefox before installing. ( **Check and Upgrade Instruction )

3. "Windows 7 has ended support on January 14, 2020". In order to strengthen the information security on campus, all units are requested to arrange updates as much as possible.



手動 GPO 安裝教學:

Manual GPO installation instructions:


C/S架構 GPO 安裝說明:安裝教學

C/S architecture GPO installation instructions: Installation Instruction





Government Configuration Baseline TWGCB-ID Instruction