信息安全风险评估策略研究

风险评估是当前企事业单位信息化工作的迫切需要和客观的需求,在此结合当前风险评估发展的现状,通过构造风险评估模型,提出了一种以定量方式为主的结构化的风险评估分析方法。该方法通过分析信息资产价值、威胁值、弱点值,合理地计算出风险值后构造出一种结构化的风险评估体系,提高了信息系统的安全防护能力。

Research on strategy of information security risk assessment

Risk assessment is the current urgent need and objective requirement of the informational work in the information technology enterprises.With the current status of the development of risk assessment,a structured risk assessment analysis method based on the quantify is presented by constructing a risk assessment model.The method constructed a structured risk assessment system and improved the ability of information systems′ security by analyzing the value of information asset,threat and vulnerability after calculating risk value.