数字图书馆信息安全管理的过程方法  

Study on the Process Approach for Information Security Management of Digital Libraries

作　　者：黄水清[1] 

机构地区：[1]南京农业大学信息科学技术学院

出　　处：《图书情报工作》2013年第11期5-11,共7页Library and Information Service

基　　金：国家哲学社会科学基金重点项目"数字图书馆信息安全管理标准规范研究"(项目编号:12ATQ001)研究成果之一

摘　　要：介绍与过程及过程方法相关的概念与原则,阐述信息安全与质量、信息安全管理与质量管理、信息安全管理体系与质量管理体系的关系,分析过程方法在信息安全管理及相关标准中的应用与发展情况。在此基础上,结合数字图书馆信息安全管理的实际,针对ISO 27000中的过程方法模式——PDCA,探讨数字图书馆信息安全管理体系建立与实施中的过程与过程方法问题。This paper introduces the concepts and principles that related to process and process approach, and expounds the relationships between information security and quality, information security management and quality management, and that between information security management system and quality management system. It also analyses the application and development of the process approach in information security management and the related standards. Then, in view of the reality of information security management of digital libraries, and in terms of PDCA, which is the process approach pattern in ISO 27000, the paper inquires into the issues of process and process approach in the construction and execution of information security management systems for digital libraries.

关 键 词：数字图书馆信息安全管理过程过程方法PDCA ISO 27000 

分 类 号：G251[文化科学—图书馆学]