等级保护测评中的风险质量定性分析研究  

Research on the qualitative analysis of the quality of the risk of testing and evaluation for classified protection

作　　者：王智[1] 王大萌[1] 刘兆东[1] 

机构地区：[1]黑龙江省电子信息产品监督检验院,哈尔滨150090

出　　处：《信息技术》2014年第10期185-187,共3页Information Technology

摘　　要：现阶段随着我国对信息系统安全的重视和关注,各行各业的等级保护测评工作也在迅速的开展中。等级保护测评工作需要测评人员以交流沟通和审计的方式取得并分析数据,那么如何控制等级保护测评中的风险,定性风险的延伸性、关联性和相似度就成为了探讨的重点。运用项目管理的思想和方法,定性分析等级保护测评方法中的风险成因,为建立快速有效的风险响应计划总结方法和风险定量分析奠定基础。With our attention and concern on the security of information system at this stage, the operation of the classified protection of all of departments is rapidly developing. Testing and evaluation for classified protection needs inspectors communicating and auditing to obtain and analyze data. How to control the risk of the testing and evaluation for classified protection, the extension and relevance and similarity of the qualitative risk were the focus of this paper. It used the ideas and methods of project management, qualitatively analyzed the causes of the risk in the method of the testing and evaluation for classified protection, laid the foundation for establishing of the rapid and effective summary of methods of risk response project and quantitative risk analysis.

关 键 词：风险分析 等级保护 信息安全 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]