信息安全建设和管理的生命周期

要保证信息安全,就要使所用技术措施和管理制度必须发生相应的变化和调整,指出信息安全建设是一个动态过程,要根据技术和业务的发展不断调整和完善,信息安全建设和管理的生命周期是一个闭环回路,由确定策略、安全分析、设计实施和管理教育四个阶段组成,机构的信息安全建设和管理都需要将其业务特点和其多个环节紧密结合。

Information Security Construction and Management Lifecycle

The adopted technology measures and management system must be changed and adjusted accordingly if information security is required to be guaranteed. This paper points out that the information security construction is a dynamic process and should be adjusted and perfected continuously in accordance with the development of technology and business. Information security construction and management lifecycle is a kind of closed loop, and consists of four parts, strategy decision, security analysis, design implementation and management education, etc.. Information security construction and management of organization should be combined closely in its operation features and its links.