基于ISO/IEC27001标准的高校信息安全治理  

The Information Security Governance in University based on ISO/IEC27001 Standard

作　　者：何济玲[1] 陈仕品[1] 程吉麟[1] 艾贤明 

机构地区：[1]西华师范大学教育学院,四川南充637000

出　　处：《现代教育技术》2016年第9期60-65,共6页Modern Educational Technology

基　　金：国家社科基金一般项目"高校信息化建设的机构;过程和机制研究"(项目编号:12BGL097)的阶段性研究成果

摘　　要：针对当前我国高校在信息安全方面存在的主要问题,文章根据信息安全管理的ISO/IEC27001标准,从管理层面建立了一套基于ISO/IEC27001标准的高校信息安全治理体系,提出了基于ISO/IEC27001标准的高校信息安全治理过程模型,优化了高校信息安全治理流程,完善了高校信息安全管控机制,从而有利于保障高校信息化服务长期稳定地运行,为改善我国高校的信息安全治理提供参考。Aiming at solving the main problems of information security existing in our colleges and universities, this paper established a set of information security governance system according to ISO/IEC27001 standard, and put forward the university information security governance process model based on ISO/ IEC27001 standard. The university information security management process was optimized, the university information security management control mechanism was perfected, which was conducive to the long-term stable operation of the information service and provided reference for improving information security management in universities.

关 键 词：高校信息化 ISO/IEC27001标准 信息安全治理体系 PDCA模型 

分 类 号：G40-057[文化科学—教育学原理]