信息安全管理中的传导风险防范方法研究  

ON PREVENTION METHOD OF TRANSMISSION RISK IN INFORMATION SECURITY MANAGEMENT

作　　者：李晓庆[1] 杨根兴[1] 蔡立志[1] 

机构地区：[1]上海市计算机软件评测重点实验室,上海201112

出　　处：《计算机应用与软件》2010年第8期97-99,122,共4页Computer Applications and Software

基　　金：国家高技术研究发展计划项目(2007AA010401)

摘　　要：风险评估和风险控制措施是信息安全管理体系(ISMS)中的重要环节,而风险控制措施的引入可能引发新的潜在风险(传导风险),对如何防范传导风险进行了阐述,提出了基于PDCA改进模型的传导风险防范策略。Risk assessment and risk control are the most important parts in Information Security Management System （ISMS）. In some conditions, the introduction of risk control measures may cause new potential risk, which is called transmission risk in the article. This paper carries out on how to avoid the transmission risk and proposed the prevention strategy for it based on a modified PDCA Model.

关 键 词：ISMS 风险评估 风险控制措施 传导风险 PDCA 残余风险 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]