信息系统安全规划框架与方法

针对企业信息化发展过程中所面临的信息安全方面的严峻考验，对信息系统安全进行全面规划的问题从意义和范围进行了阐述．指出信息系统安全规划是未来几年内如何达到企业信息化远景规划指导下的安全建设目标的一个过程。重点从三个方面对信息系统安全规划的框架和方法进行了研究，指出了信息系统安全规划应该是一个依托企业信息化战略规划，涉及物理安全、网络安全、系统安全、运营安全以及人员安全的信息系统安全的总体规划．

Framework and Measures for the Planning of Information Security Systems

In regard to the challenges of information security in corporation informatization, this article expounds the meaning and scope about the planning of information security system which forms a part of information security management to realize the objects of information security. This article investigates the planning of information security system from three aspects, pointing out information system security planning should be supported by corporation informatization stratagem, which should involving physical security, network security, system security, operation security and personnel security.