企业信息安全管理现状与策略研究  

Research on the Status and Strategies of Enterprise Information Security Management

作　　者：张婉妮 Zhang Wanni(Sinopec Information Technology Co.,Ltd.,Beijing 100007)

机构地区：[1]石化盈科信息技术有限责任公司,北京100007

出　　处：《现代工业经济和信息化》2022年第1期123-124,127,共3页Modern Industrial Economy and Informationization

摘　　要：随着互联网、移动应用等信息化管理技术的发展与普及,企业面临的信息安全问题也日趋严峻,信息安全风险已渗透到企业经营管理的各个方面。通过对企业信息安全现状的分析,结合ISO27001信息安全管理体系模型,提出运用"技术+管理"的方法去解决企业所面临的信息安全问题,旨在为企业的信息安全管理提供帮助和指导。With the development and popularization of information management technologies such as Internet and mobile applications, the information security problems faced by enterprises are becoming more and more serious, and the information security risks have penetrated into all aspects of enterprise management. Through the analysis of the current situation of information security of enterprises, combined with ISO27001 information security management system model, we propose to use the method of "technology + management" to solve the information security problems faced by enterprises, aiming to provide help and guidance for the information security management of enterprises.

关 键 词：信息安全 ISO27001 信息安全管理体系 管理 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]