论文部分内容阅读
随着信息技术的迅猛发展,信息系统被广泛应用,它正成为国家建设的关键基础设施。与此同时,信息安全问题变得日益突出,关于信息安全技术、信息安全管理等的研究已成为信息保障发展迫在眉睫、亟待解决的重要前沿课题。而对信息系统安全管理进行的有效性测量,更有助于用户了解信息安全管理过程中所采取的控制措施的有效性以及控制措施的执行情况,进而促进ISMS(Information Security Management Systems,信息安全管理体系)在组织中的运行、改进,保证组织业务的持续运行。因此,开展信息安全管理测量理论及方法研究具有极其重要的理论意义和实用价值。
With the rapid development of information technology, information system is widely used, and it is becoming the key infrastructure for nation-building. At the same time, the issue of information security has become increasingly prominent. Research on information security technology and information security management has become an urgent and pressing front issue for the development of information security. The measurement of the effectiveness of information system security management can help users understand the effectiveness of control measures taken in the process of information security management and the implementation of control measures so as to promote ISMS (Information Security Management Systems) System) in the organization’s operation, improvement, to ensure the continued operation of the organization’s business. Therefore, carrying out information security management measurement theory and method research has extremely important theoretical significance and practical value.