浅淡核电企业ISMS建设  

Discusses on ISMS Construction of Nuclear Power Enterprise

作　　者：何新华[1] 春增军[1] 

机构地区：[1]中科华核电技术研究院有限公司信息技术中心,广东深圳518028

出　　处：《通信技术》2011年第3期86-89,共4页Communications Technology

摘　　要：简要介绍了核安全文化的起源和特点、核安全文化与信息安全相结合、ISO27001信息安全管理体系和国际原子能机构推荐的核机构和核行业的信息安全管理体系(ISMS,Information Security Management System)体系建设最佳实践模型。并对ISMS体系建设生命周期中的现状调研阶段、资产识别与风险评估阶段、架构设计阶段、总体规划阶段、体系建立阶段、体系试运行阶段、体系认证阶段和体系维护阶段中的主要关键点进行扼要分析,供社会各组织进行ISMS体系建设时参考。The origin and character of nuclear safety culture,the nuclear safety culture combined with information security,the ISO 27001 information security management system,and the best practice moldel of ISMS construction used in the nuclear agency and unclear industry recommended by the International Atomic Energy Agency are briefly described,and the key points in the life cycle of the ISMS system consturction,including the current situation investigation phase,assets identification and risk assessment phase,architecture design phase,whole planning phase,system establish phase,system experimental phase,system authentication phase,system maintenance phase,are analyzed.These descriptions and analyses could provide a reference for social organizations in ISMS construction.

关 键 词：信息安全管理体系 内审 管理评审 脆弱性 风险评估 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]