{"id":17386,"date":"2025-04-28T13:04:52","date_gmt":"2025-04-28T10:04:52","guid":{"rendered":"https:\/\/espadabilisim.com\/lostar\/?page_id=17386"},"modified":"2025-08-08T21:33:04","modified_gmt":"2025-08-08T18:33:04","slug":"bddk-sizma-testi","status":"publish","type":"page","link":"https:\/\/espadabilisim.com\/lostar\/bddk-sizma-testi\/","title":{"rendered":"BDDK S\u0131zma Testi"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"17386\" class=\"elementor elementor-17386\">\n\t\t\t\t<div class=\"elementor-element elementor-element-1c29e69 e-flex e-con-boxed e-con e-parent\" data-id=\"1c29e69\" data-element_type=\"container\" data-settings=\"{&quot;wcf_enable_cursor_hover_effect_text&quot;:&quot;View&quot;,&quot;background_background&quot;:&quot;classic&quot;,&quot;wcf-animation&quot;:&quot;none&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-0c08bc5 wcf-t-animation-none elementor-widget elementor-widget-wcf--title\" data-id=\"0c08bc5\" data-element_type=\"widget\" data-settings=\"{&quot;wcf-animation&quot;:&quot;fade&quot;,&quot;data-duration&quot;:0.75,&quot;fade-offset&quot;:40,&quot;wcf_text_animation&quot;:&quot;none&quot;,&quot;delay&quot;:0.15,&quot;fade-from&quot;:&quot;bottom&quot;,&quot;ease&quot;:&quot;power2.out&quot;}\" data-widget_type=\"wcf--title.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"wcf--title\">BDDK S\u0131zma Testi<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-74b6f67 e-flex e-con-boxed e-con e-parent\" data-id=\"74b6f67\" data-element_type=\"container\" data-settings=\"{&quot;wcf_enable_cursor_hover_effect_text&quot;:&quot;View&quot;,&quot;wcf-animation&quot;:&quot;none&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-81a5fe3 e-con-full e-flex e-con e-child\" data-id=\"81a5fe3\" data-element_type=\"container\" data-settings=\"{&quot;wcf_enable_cursor_hover_effect_text&quot;:&quot;View&quot;,&quot;wcf-animation&quot;:&quot;none&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-bf975c2 wcf-t-animation-none elementor-widget elementor-widget-text-editor\" data-id=\"bf975c2\" data-element_type=\"widget\" data-settings=\"{&quot;wcf_text_animation&quot;:&quot;none&quot;,&quot;wcf-animation&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>BDDK taraf\u0131ndan yay\u0131mlanan 24.07.2012 tarih, B.02.1.BDK.0.77.00.00\/010.06.02-1 say\u0131l\u0131 \u201cBankalarda Bilgi Sistemleri Y\u00f6netiminde Esas Al\u0131nacak \u0130lkelere \u0130li\u015fkin Tebli\u011f\u201d (Tebli\u011f) ile banka bilgi sistemlerinin maruz kalabilece\u011fi risklerin ve g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131n y\u00f6netimini de kapsayacak \u015fekilde, bankalar\u0131n faaliyetlerinin ifas\u0131nda kulland\u0131klar\u0131 bilgi sistemlerinin y\u00f6netiminde esas al\u0131nacak asgari usul ve esaslar d\u00fczenlenmi\u015ftir.<\/p><p>\u00a0<\/p><p>Tebli\u011f\u2019in \u201cBilgi Sistemlerine \u0130li\u015fkin Risk Y\u00f6netimi\u201d ba\u015fl\u0131kl\u0131 ikinci k\u0131s\u0131m birinci b\u00f6l\u00fcm\u00fcn\u00fcn \u201cG\u00fcvenlik kontrol s\u00fcrecinin tesis edilmesi ve y\u00f6netilmesi\u201d ba\u015fl\u0131kl\u0131 7. maddesinin \u00fc\u00e7\u00fcnc\u00fc f\u0131kras\u0131 (\u00e7) bendinde ifade edilen \u201cBilgi sistemlerinin g\u00fcvenilirli\u011finin ve tutarl\u0131l\u0131\u011f\u0131n\u0131n d\u00fczenli olarak incelenmesini sa\u011flayacak s\u00fcre\u00e7ler tesis edilir. Bu \u00e7er\u00e7evede g\u00fcvenlik ile ilgili h\u00fck\u00fcmlerin gereklerinin yerine getirilmesi hususunda herhangi bir icra g\u00f6revi bulunmayan ba\u011f\u0131ms\u0131z ekiplere d\u00fczenli aral\u0131klarla s\u0131zma testleri yapt\u0131r\u0131l\u0131r. G\u00fcvenlik alan\u0131ndaki g\u00fcncel geli\u015fmeler ve yeni a\u00e7\u0131klar takip edilir, gerekli yaz\u0131l\u0131m g\u00fcncellemeleri yap\u0131l\u0131r, gerekli yamalar uygulan\u0131r.\u201d h\u00fckm\u00fc ile s\u0131zma testleri bankac\u0131l\u0131k sekt\u00f6r\u00fc i\u00e7in zorunlu hale getirilmi\u015ftir.<\/p><p>\u00a0<\/p><p>Bilgi sistemlerine y\u00f6nelik olarak elektronik ortamda ger\u00e7ekle\u015ftirilebilecek sald\u0131r\u0131 t\u00fcrlerinin de h\u0131zl\u0131 bir de\u011fi\u015fim ve geli\u015fim g\u00f6stermesi nedeniyle 27.01.2011 tarih ve 4022 say\u0131l\u0131 Bankac\u0131l\u0131k D\u00fczenleme ve Denetleme Kurulu Karar\u0131 ile Tebli\u011f\u2019in s\u00f6z konusu 7 nci maddesinin \u00fc\u00e7\u00fcnc\u00fc f\u0131kras\u0131n\u0131n (\u00e7) bendinde yer alan h\u00fck\u00fcm ile zorunlu k\u0131l\u0131nan ve d\u00fczenli aral\u0131klarla yap\u0131lmas\u0131 istenilen s\u0131zma testinin s\u0131kl\u0131\u011f\u0131n\u0131n y\u0131lda en az bir defa yap\u0131lmas\u0131 \u015feklinde belirlenmesine karar verilmi\u015ftir.<\/p><p>\u00a0<\/p><h2><strong>BDDK S\u0131zma Testi<\/strong>, en az a\u015fa\u011f\u0131daki ba\u015fl\u0131klar\u0131\u00a0<strong>i\u00e7ermektedir:<\/strong><\/h2><p>\u00a0<\/p><p>\u2022 \u0130leti\u015fim Altyap\u0131s\u0131 ve Aktif Cihazlar<br \/>\u2022 DNS Servisleri<br \/>\u2022 Etki Alan\u0131 ve Kullan\u0131c\u0131 Bilgisayarlar\u0131<br \/>\u2022 E-posta Servisleri<br \/>\u2022 Veritaban\u0131 Sistemleri<br \/>\u2022 Web Uygulamalar\u0131<br \/>\u2022 Mobil Uygulamalar<br \/>\u2022 Kablosuz A\u011f Sistemleri<br \/>\u2022 ATM Sistemleri<br \/>\u2022 Da\u011f\u0131t\u0131k Servis D\u0131\u015f\u0131 B\u0131rakma Testleri<br \/>\u2022 Kod Analizi<br \/>\u2022 Sosyal M\u00fchendislik<br \/>\u2022 \u0130\u00e7 Penetrasyon Testi (Intranet Security Checkup)<\/p><p>\u00a0<\/p><p>\u00c7al\u0131\u015fma zamanlar\u0131 \u00f6nceden bildirilmeyecektir. Yap\u0131lacak \u00e7al\u0131\u015fma i\u00e7in kesin bir takvim verilmeyecektir. Ancak testlere dair anla\u015fma ve i\u015f emrinin imzalanmas\u0131, iletilmesinin ard\u0131ndan resmi hesap a\u00e7ma i\u015flemleri yap\u0131lacakt\u0131r. Hesap a\u00e7\u0131l\u0131\u015f i\u015flemlerinin tamamlanmas\u0131n\u0131n ard\u0131ndan 30 g\u00fcn i\u00e7inde \u00e7al\u0131\u015fma tamamlanacak ve\u00a0<strong>BDDK S\u0131zma Testleri<\/strong>\u00a0veya Security Checkup raporu haz\u0131rlanacakt\u0131r.<\/p><p>\u00a0<\/p><p><strong>S\u0131zma testleri<\/strong>, banka i\u00e7erisinden bilgi edinimi k\u0131s\u0131tl\u0131 bir sald\u0131rgan\u0131n uygulayaca\u011f\u0131 y\u00f6ntemler kullan\u0131larak kara kutu y\u00f6ntemi (black box testing) ile ger\u00e7ekle\u015ftirilecektir.<\/p><p>\u00a0<\/p><p>S\u0131zma testlerinin sa\u011fl\u0131kl\u0131 bir \u015fekilde ger\u00e7ekle\u015ftirilebilmesi ve ger\u00e7ek hayata uygun olmas\u0131 i\u00e7in, yukar\u0131da tan\u0131mlanan eri\u015fim noktalar\u0131na bu ortamlar\u0131n do\u011fas\u0131na uyacak \u015fekilde a\u015fa\u011f\u0131daki kullan\u0131c\u0131 profilleri ile s\u0131zma testleri ger\u00e7ekle\u015ftirilir.<\/p><p>\u00a0<\/p><p>Temel s\u0131zma testleri, bir\u00e7ok sald\u0131rgan\u0131n s\u0131zman\u0131n ilk ad\u0131m\u0131 olarak ger\u00e7ekle\u015ftirdi\u011fi ke\u015fif ve zay\u0131fl\u0131k belirleme ad\u0131mlar\u0131n\u0131 i\u00e7erir. Temel s\u0131zma testleri a\u015fa\u011f\u0131da tan\u0131mlanan sistem tespiti, servis tespiti ve a\u00e7\u0131kl\u0131k taramas\u0131\/ara\u015ft\u0131rmas\u0131 ad\u0131mlar\u0131 ile ba\u015flar, t\u00fcm bilgi sistemi varl\u0131klar\u0131na uygulan\u0131r.\u00a0Detayl\u0131 s\u0131zma testleri, \u00f6nceki ad\u0131mlarda elde edilen bilgilerin birle\u015ftirilmesi, yarat\u0131c\u0131 y\u00f6ntemlerle yeni sald\u0131r\u0131 vekt\u00f6rlerinin olu\u015fturulmas\u0131 ile sistemlere s\u0131zman\u0131n yap\u0131ld\u0131\u011f\u0131 t\u00fcm i\u015flemleri i\u00e7erir. Kurumlara \u00f6zel a\u00e7\u0131klar ile kuruma \u00f6zel baz\u0131 kombinasyonlar ve ayarlardan kaynaklanabilecek g\u00fcvenlik zafiyetleri tespit edilir.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0246845 wcf-t-animation-none elementor-widget elementor-widget-text-editor\" data-id=\"0246845\" data-element_type=\"widget\" data-settings=\"{&quot;wcf_text_animation&quot;:&quot;none&quot;,&quot;wcf-animation&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<hr \/><h3>\u00a0<\/h3><h3><span style=\"color: #000000;\">Sundu\u011fumuz hizmetler hakk\u0131nda ayr\u0131nt\u0131l\u0131 bilgi i\u00e7in <a style=\"color: #000000;\" href=\"https:\/\/lostar.com.tr\/iletisim\"><span style=\"text-decoration: underline;\">bize ula\u015f\u0131n<\/span>.<\/a><\/span><\/h3>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>BDDK S\u0131zma Testi BDDK taraf\u0131ndan yay\u0131mlanan 24.07.2012 tarih, B.02.1.BDK.0.77.00.00\/010.06.02-1 say\u0131l\u0131 \u201cBankalarda Bilgi Sistemleri Y\u00f6netiminde Esas Al\u0131nacak \u0130lkelere \u0130li\u015fkin Tebli\u011f\u201d (Tebli\u011f) ile banka bilgi sistemlerinin maruz kalabilece\u011fi risklerin ve g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131n y\u00f6netimini de kapsayacak \u015fekilde, bankalar\u0131n faaliyetlerinin ifas\u0131nda kulland\u0131klar\u0131 bilgi sistemlerinin y\u00f6netiminde esas al\u0131nacak asgari usul ve esaslar d\u00fczenlenmi\u015ftir. \u00a0 Tebli\u011f\u2019in \u201cBilgi Sistemlerine \u0130li\u015fkin Risk Y\u00f6netimi\u201d [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"elementor_header_footer","meta":{"footnotes":""},"class_list":["post-17386","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/espadabilisim.com\/lostar\/wp-json\/wp\/v2\/pages\/17386","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/espadabilisim.com\/lostar\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/espadabilisim.com\/lostar\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/espadabilisim.com\/lostar\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/espadabilisim.com\/lostar\/wp-json\/wp\/v2\/comments?post=17386"}],"version-history":[{"count":19,"href":"https:\/\/espadabilisim.com\/lostar\/wp-json\/wp\/v2\/pages\/17386\/revisions"}],"predecessor-version":[{"id":19210,"href":"https:\/\/espadabilisim.com\/lostar\/wp-json\/wp\/v2\/pages\/17386\/revisions\/19210"}],"wp:attachment":[{"href":"https:\/\/espadabilisim.com\/lostar\/wp-json\/wp\/v2\/media?parent=17386"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}