软件信息化风险管理研究

IT系统建设普遍具有投入高、业务影响广、安全要求高等特点,系统建设的不确定因素比较多,具有很强的风险性,加强软件项目的信息化风险管理,对于提高软件系统建设的成功率具有重要意义。本文结合公司软件项目实施,对公司软件项目的信息化风险管理进行了研究与分析,构建了公司软件项目全面风险管理体系,体系由八个相互关联的模块组成,分别是风险管理环境,风险管理目标与政策设定,风险监测与识别,风险评估,风险定价与处置,内部控制,风险信息处理和报告,风险持续改进。

Research on software information risk managemant

IT systems generally have high investment, big impact on business, high security requirements. So IT systems have more and more uncertainties and strong risk. It has significance to strengthen risk management of software projects to improve the success ratio of software systems. Combined with the company＇s software project, implementation, this paper studies and analyzes the information risk management, and constructs the comprehensive risk mangement system. The system is composed of eight related modules ; environment of risk management, objectives and policies set of risk management, risk monitoring and identification, fish assessment, risk pricing and disposed, internal control, risk information processing and report, and risk continuous improvement.