浅谈企业信息安全保障体系建设

该文简要论述了构建企业信息安全保障体系的必要性,明确了信息安全保障体系建设的目标。从信息安全保障体系建设的指导思想入手,分析了企业信息系统面临的各种安全风险;从安全策略、安全管理和安全技术三个方面讨论了如何实现企业信息安全保障体系的建设目标。

Construction of Information Security System

In today's interconnected marketplace and global economy, information assets of enterprises are at greater risk than ever. In this paper, the importance of information security systems is stressed, as well as the objectives of these systems. Start from this point, it describes a variety of potential risks that the IT infrastructure may face, and also provides ideas on how to construct information security systems by means of an international recognized theory in terms of security strategy, management and technology.