企业IT风险管理的体系构建与实现路径  

Theoretical Construction and Realization Approaches of Enterprise IT Risk Management System

作　　者：惠志斌[1] 

机构地区：[1]上海社会科学院信息研究所,上海200235

出　　处：《科技管理研究》2014年第2期194-198,共5页Science and Technology Management Research

摘　　要：通过对企业面临的IT风险的分析,指出企业IT风险管理的必要性和重要性,进而系统论述企业IT风险及其管理的相关概念;借鉴国内外IT风险管理标准和金融企业IT风险实施经验,研究适合现代企业的IT风险管理体系框架,并提出系统、全面、可操作的IT风险管理实现路径的建议。After the analysis of the information technology risks facing enterprises, the article points out the necessity and importance of enterprises IT risks management. Then systematically discusses the concepts of enterprise IT risk and its management. Meanwhile, the article introduces the standards and experiences of enterprises IT risks management at home and abroad. Based on this, the article builds the framework of IT risk management fitting for modern enterprise develop- ment, and brings forward the systematic and operable approaches to the implementation of enterprises IT risk management.

关 键 词：信息安全 信息系统 IT风险 IT风险管理 IT风险评估 

分 类 号：F270.7[经济管理—企业管理]