基于“管理、技术、人才”三引擎的信息安全管理平台

为应对新技术、新业务给原有安全保障体系带来的诸多新风险,解决当前信息安全工作在职能管理、态势感知、人才培养方面的问题,本文创新性地将“管理、技术、人才”组合为安全保障体系三引擎。管理引擎实现了日常安全工作的高效闭环管理和常态化开展;技术引擎实现对公司内部合规、外部威胁安全指标数据的统一采集、统一分析、统一展现;人才引擎优化了安全技能培训,构建安全人才培养机制。

Based on three engine of management,technology, talent to build a more perfect information security system

In order to cope with the new technology and new business to bring the original security system many new risks, solve the current information security in the "management", "situational awareness", and "talent" problems. In this paper, the innovation of the "technology, management, personnel" combination for the security system of the "three engine". The construction and management of engine to achieve efficient closed-loop management daily work safety and carry out normalization; construction technology engine to achieve internal compliance and external threats to the security of data acquisition, analysis, unified show; talent engine construction optimization skills training, broaden the occupation development, so as to construct safety personnel training mechanism, to build an information security professionals.