COBIT在企业信息安全管理中的应用实践

随着企业运作对信息依赖性日渐增加,信息已经成为企业的一种非常重要的资产,对企业目标的实现起着关键的作用,所以信息需要妥善管理确保其安全性.目前信息安全管理仅依靠技术手段和传统的管理方式来实现,没有形成可行全面的安全管理体系,造成企业信息安全管理的效益低下.通过分析IT治理的权威标准COBIT和信息安全管理相关的控制目标,结合目前企业在信息安全管理上面临的主要问题,针对具体企业案例,研究将COBIT应用到企业信息安全管理中的实践模式.

APPLICATION PRACTICE OF COBIT IN ENTERPRISE INFORMATION SECURITY MANAGEMENT

With enterprises' ever-increasing dependence on information,the information has been regarded as a very important asset and plays critical role for enterprises in achieving their goals,which calls for proper management of the information in order to ensure its security.At present,information security management merely rely on technologies and old-fashioned management style,it has not yet formed applicable security management systems,as a result,the information security management in enterprises is inefficie...