信息安全风险管理的EPDCA模型  

The Study of EPDCA Model for Risk Management of Information Security

作　　者：顾力平[1] 邹珊刚[1] 

机构地区：[1]华中科技大学管理学院,湖北武汉430074

出　　处：《工业工程与管理》2008年第2期14-18,共5页Industrial Engineering and Management

摘　　要：分析了目前几种比较典型的信息安全管理模型存在的不足,提出了信息安全风险管理模型EPDCA,论述了该模型的理论依据、模型构成和模型中的各个组成内容的主要功能。研究结果表明:该模型具有良好的动态性、循环性和可行性,能够实现信息安全风险管理的全过程控制。After analyzing the disadvantages of some representative models used for information security management, the EPDCA model for risk management of information security was developed. Hence then, the theoretical basis, model structure and main function of each parts of model were discussed. The results of this study showed that model has good performance in dynamic, recycling and availability, the whole process control of risk management of information security can be realized with this model.

关 键 词：信息安全 风险管理 模型EPDCA 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]