基于COSO理论的数字档案信息安全风险管理模型构建  

Construction of Digital Archival Information Security Risk Management Model Based on COSO Theory

作　　者：宋梓莹 张坤铭 Song Ziying;Zhang Kunming

机构地区：[1]黑龙江大学信息管理学院

出　　处：《兰台世界》2024年第10期33-37,共5页Lantai World

基　　金：黑龙江省大学生创新训练项目“数字档案信息安全风险评估与预防机制构建研究”(项目编号:s202310212020)。

摘　　要：COSO理论是有效管理风险、健全维护内部控制体系的组织框架,在风险管理方面具有先天优势。结合数字档案管理条例,阐释了COSO理论在风险管理推进中的可拓展性,构建数字档案信息安全风险管理模型,在分析数字档案管理各环节风险点的基础上,梳理风险评估指标体系,探索全流程风险管理实践路径,以期降低风险、提升数字档案治理效能,助力数字档案建设实现高质量发展。COSO theory is an organizational framework for effective risk management and sound maintenance of internal control system,and has inherent advantages in risk management.Combined with digital archives management regulations,this paper explains the extensibility of COsO theory in the promotion of risk management,builds a digital archives information security risk management model,and on the basis of analyzing the risk points of each link of digital archives management,combs the risk assessment index system and explores the practice path of whole-process risk management,so as to reduce risks and improve the efficiency of digital archives management,and help the high-quality development of digital archives construction.

关 键 词：数字档案 COSO理论 风险管理 档案管理 

分 类 号：G273.3[文化科学—档案学]