{"id":1052,"date":"2024-05-21T00:02:58","date_gmt":"2024-05-20T21:02:58","guid":{"rendered":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/?p=1052"},"modified":"2026-10-06T03:13:30","modified_gmt":"2026-10-06T00:13:30","slug":"bulut-bilisim-ile-veri-guvenligini-saglamanin-5-kanitlanmis-yolu","status":"publish","type":"post","link":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/guvenlik\/bulut-bilisim-ile-veri-guvenligini-saglamanin-5-kanitlanmis-yolu\/","title":{"rendered":"Bulut Bili\u015fim ile Veri G\u00fcvenli\u011fini Sa\u011flaman\u0131n 5 Kan\u0131tlanm\u0131\u015f Yolu"},"content":{"rendered":"
\n

Bulutta veri g\u00fcvenli\u011fi tek bir \u00fcr\u00fcn veya ayardan olu\u015fmaz. \u015eifreleme, a\u011f kurallar\u0131, yedekleme, eri\u015fim y\u00f6netimi ve d\u00fczenli denetim birlikte \u00e7al\u0131\u015fmal\u0131d\u0131r. Bu be\u015f yakla\u015f\u0131m NIST ve CISA \u00e7er\u00e7evelerindeki kontrol alanlar\u0131yla ili\u015fkilidir; etkileri do\u011fru kapsam, uygulama ve do\u011frulamaya ba\u011fl\u0131d\u0131r. Hi\u00e7biri tek ba\u015f\u0131na veri kayb\u0131n\u0131 veya ihlali b\u00fct\u00fcn\u00fcyle \u00f6nledi\u011fi anlam\u0131na gelmez.<\/p>\n

\"\u015eifreleme,
Bir kontrol\u00fcn varl\u0131\u011f\u0131 yerine kapsam\u0131n\u0131n ve \u00e7al\u0131\u015fma sonucunun izlenmesi gerekir.
G\u00f6rseli b\u00fcy\u00fct \u2192<\/a><\/figcaption><\/figure>\n

1. \u015eifrelemeyi anahtar y\u00f6netimiyle birlikte planlay\u0131n<\/h2>\n

Aktar\u0131m s\u0131ras\u0131nda TLS kullan\u0131m\u0131 ile disk, veritaban\u0131 veya nesne i\u00e7eri\u011finin saklan\u0131rken \u015fifrelenmesi farkl\u0131 kontrollerdir. Hangi verinin hangi katmanda korundu\u011funu belirleyin. Bir hizmetin HTTPS sunmas\u0131, b\u00fct\u00fcn yedeklerin veya disklerin \u015fifreli oldu\u011funu g\u00f6stermez.<\/p>\n

Anahtarlar\u0131 uygulama kodunda ve herkese a\u00e7\u0131k depolarda tutmay\u0131n. Anahtara eri\u015fim, de\u011fi\u015fim, iptal ve kurtarma sorumlulu\u011funu tan\u0131mlay\u0131n. Anahtar kayb\u0131 veriye eri\u015fimi engelleyebilir; \u015fifreleme tek ba\u015f\u0131na yanl\u0131\u015f yetkilendirilmi\u015f bir uygulaman\u0131n veri okumas\u0131n\u0131 \u00f6nlemez.<\/p>\n

2. A\u011f kurallar\u0131n\u0131 izin verilen i\u015f ak\u0131\u015f\u0131na g\u00f6re daralt\u0131n<\/h2>\n

Web, uygulama ve veritaban\u0131 bile\u015fenleri aras\u0131ndaki gerekli ba\u011flant\u0131lar\u0131 \u00e7\u0131kar\u0131n. Kaynak, hedef, protokol ve port baz\u0131nda kurallar\u0131 tan\u0131mlay\u0131n; y\u00f6netim eri\u015fimini yaln\u0131z gereken a\u011f ve kimliklerle s\u0131n\u0131rland\u0131r\u0131n. Kullan\u0131lmayan servisleri internete a\u00e7\u0131k b\u0131rakmay\u0131n.<\/p>\n

De\u011fi\u015fiklikten \u00f6nce mevcut ba\u011flant\u0131lar\u0131 kaydedin, sonra hem izin verilen hem engellenmesi gereken bir ak\u0131\u015f\u0131 test edin. Firewall uygulama kimlik do\u011frulamas\u0131n\u0131n yerine ge\u00e7mez. \u00d6zel IP kullan\u0131m\u0131 da tek ba\u015f\u0131na \u015fifreleme veya g\u00fcvenli eri\u015fim kan\u0131t\u0131 de\u011fildir.<\/p>\n

3. Yede\u011fi geri y\u00fckleme sonucu ile de\u011ferlendirin<\/h2>\n

Hangi verinin ne s\u0131kl\u0131kta ve ne kadar s\u00fcreyle saklanaca\u011f\u0131n\u0131 belirleyin. RPO kabul edilebilir veri kayb\u0131 aral\u0131\u011f\u0131n\u0131, RTO ise hedeflenen geri kazan\u0131m s\u00fcresini ifade eder. Bu hedefleri ger\u00e7ek uygulama ba\u011f\u0131ml\u0131l\u0131klar\u0131yla birlikte \u00f6l\u00e7\u00fcn.<\/p>\n

\u00dcretimden ayr\u0131 eri\u015fim yetkileri ve uygun ba\u011f\u0131ms\u0131z kopyalar kullan\u0131n. D\u00fczenli geri y\u00fckleme denemesinde veritaban\u0131 tutarl\u0131l\u0131\u011f\u0131n\u0131, dosyalar\u0131 ve uygulama a\u00e7\u0131l\u0131\u015f\u0131n\u0131 do\u011frulay\u0131n. Snapshot veya ba\u015far\u0131l\u0131 yedekleme bildirimi tek ba\u015f\u0131na kullan\u0131labilir bir kurtarma sonucu g\u00f6stermez.<\/p>\n

4. Kimlik ve eri\u015fimde en az ayr\u0131cal\u0131k uygulay\u0131n<\/h2>\n

Ki\u015fisel y\u00f6netici hesaplar\u0131, g\u00f6rev bazl\u0131 yetkiler ve desteklenen alanlarda \u00e7ok fakt\u00f6rl\u00fc do\u011frulama kullan\u0131n. Ortak hesaplar i\u015flemi kimin yapt\u0131\u011f\u0131n\u0131 belirlemeyi zorla\u015ft\u0131r\u0131r. \u0130nsan hesaplar\u0131yla otomasyon kimliklerinin izin ve ya\u015fam d\u00f6ng\u00fclerini ayr\u0131 y\u00f6netin.<\/p>\n

\u0130\u015ften ayr\u0131lma, ekip de\u011fi\u015fikli\u011fi ve anahtar s\u0131z\u0131nt\u0131s\u0131 senaryolar\u0131 i\u00e7in eri\u015fim iptal s\u00fcrecini haz\u0131rlay\u0131n. Periyodik kontrolde kullan\u0131lmayan hesaplar\u0131, gereksiz y\u00f6netici rollerini ve uzun \u00f6m\u00fcrl\u00fc eri\u015fim anahtarlar\u0131n\u0131 de\u011ferlendirin. Kimlik do\u011frulama ile hangi veriye eri\u015filebilece\u011fini belirleyen yetkilendirmeyi kar\u0131\u015ft\u0131rmay\u0131n.<\/p>\n

5. Denetim ve g\u00fcncellemeyi i\u015fletim s\u00fcrecine ba\u011flay\u0131n<\/h2>\n

\u0130\u015fletim sistemi, uygulama ve ba\u011f\u0131ml\u0131l\u0131k envanterini tutun. G\u00fcvenlik duyurular\u0131n\u0131 kullan\u0131lan s\u00fcr\u00fcmlerle e\u015fle\u015ftirin; yamalar\u0131 etki ve aciliyete g\u00f6re planlay\u0131n. Uygulama \u00f6ncesinde test, de\u011fi\u015fiklik kayd\u0131 ve geri d\u00f6n\u00fc\u015f yolu haz\u0131rlay\u0131n.<\/p>\n

Kimlik, yap\u0131land\u0131rma ve veri eri\u015fimi kay\u0131tlar\u0131n\u0131 gerekli kapsamda toplay\u0131n. Bir alarm\u0131n kime gidece\u011fi ve nas\u0131l incelenece\u011fi belirli olsun. Gereksiz ki\u015fisel veri veya parola kaydetmeyin. Kay\u0131t \u00fcretmek ile olay\u0131 fark edip yan\u0131t vermek farkl\u0131 yeteneklerdir.<\/p>\n

Sorumluluklar\u0131 g\u00f6r\u00fcn\u00fcr hale getirin<\/h2>\n

Her kontrol i\u00e7in \u201ckim uygular, hangi sistemi kapsar, nas\u0131l do\u011frulan\u0131r?\u201d sorular\u0131n\u0131 yan\u0131tlay\u0131n. FibaCloud hizmetinizin teknik kapsam\u0131yla kendi i\u015fletim sistemi ve uygulama g\u00f6revlerinizi kar\u015f\u0131la\u015ft\u0131r\u0131n. Dahil oldu\u011fu do\u011frulanmam\u0131\u015f yedekleme, IAM veya g\u00fcvenlik hizmetlerini otomatik kabul etmeyin.<\/p>\n

S\u0131k sorulan sorular<\/h2>\n
\n
Bulut sa\u011flay\u0131c\u0131s\u0131 b\u00fct\u00fcn g\u00fcvenlik g\u00f6revlerini \u00fcstlenir mi?<\/strong><\/dt>\n
\n

G\u00f6rev da\u011f\u0131l\u0131m\u0131 hizmet modeline ve s\u00f6zle\u015fmeye ba\u011fl\u0131d\u0131r. Uygulama, hesaplar ve verinin kullan\u0131m\u0131 i\u00e7in m\u00fc\u015fteriye ait sorumluluklar bulunur.<\/p>\n<\/dd>\n

\u015eifrelenmi\u015f verinin ayr\u0131ca yedeklenmesi gerekir mi?<\/strong><\/dt>\n
\n

Evet. \u015eifreleme eri\u015fim riskini azaltmaya y\u00f6neliktir; yanl\u0131\u015f silme, bozulma veya anahtar kayb\u0131 i\u00e7in uygun kurtarma plan\u0131 ayr\u0131ca gerekir.<\/p>\n<\/dd>\n<\/dl>\n

Sonraki ad\u0131m<\/h2>\n

Eri\u015fim s\u0131n\u0131rlar\u0131n\u0131 VPC rehberi<\/a> ile, \u00f6deme kapsam\u0131n\u0131 PCI DSS a\u00e7\u0131klamas\u0131<\/a> ile de\u011ferlendirin.<\/p>\n

Kaynaklar<\/h2>\n
    \n
  1. NIST CSF 2.0 \u2014 Siber g\u00fcvenlik sonu\u00e7lar\u0131<\/a><\/li>\n
  2. CISA \u2014 StopRansomware Guide: korunan yedekler ve geri y\u00fckleme<\/a><\/li>\n
  3. SP 800-53 Rev. 5, Security and Privacy Controls for Information Systems and Organizations | CSRC<\/a><\/li>\n<\/ol>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

    Bulutta veri g\u00fcvenli\u011fi tek bir \u00fcr\u00fcn veya ayardan olu\u015fmaz. \u015eifreleme, a\u011f kurallar\u0131, yedekleme, eri\u015fim y\u00f6netimi ve d\u00fczenli denetim birlikte \u00e7al\u0131\u015fmal\u0131d\u0131r. Bu be\u015f yakla\u015f\u0131m NIST ve CISA \u00e7er\u00e7evelerindeki kontrol alanlar\u0131yla ili\u015fkilidir; etkileri do\u011fru kapsam, uygulama ve do\u011frulamaya ba\u011fl\u0131d\u0131r. Hi\u00e7biri tek ba\u015f\u0131na veri kayb\u0131n\u0131 veya ihlali b\u00fct\u00fcn\u00fcyle \u00f6nledi\u011fi anlam\u0131na gelmez. Bir kontrol\u00fcn varl\u0131\u011f\u0131 yerine kapsam\u0131n\u0131n ve \u00e7al\u0131\u015fma […]<\/p>\n","protected":false},"author":1,"featured_media":1422,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[31,26,24,25],"tags":[144,74,87,142],"class_list":["post-1052","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-guvenlik","category-bilgi-islem","category-bulut-danismanlik-hizmeti","category-buluta-genel-bakis","tag-bilgi-islem","tag-bulut-bilisim","tag-bulut-guvenligi","tag-veri-guvenligi"],"_links":{"self":[{"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/posts\/1052","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/comments?post=1052"}],"version-history":[{"count":15,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/posts\/1052\/revisions"}],"predecessor-version":[{"id":1071,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/posts\/1052\/revisions\/1071"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/media\/1422"}],"wp:attachment":[{"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/media?parent=1052"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/categories?post=1052"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.fibacloud.com\/tr\/kaynaklar\/wp-json\/wp\/v2\/tags?post=1052"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}