基于等级保护的信息安全管理体系研究  

Infosec Management System based on Classified Protection

作　　者：高磊 李晨旸 赵章界 

机构地区：[1]北京信息安全测评中心,北京100101

出　　处：《信息安全与通信保密》2015年第5期95-98 101,101,共5页Information Security and Communications Privacy

摘　　要：构建信息安全管理体系(ISMS)是组织机构提高信息安全保障水平的重要手段。近年来,随着信息安全等级保护工作的深入开展,ISMS与等级保护两者之间的融合也越来越成为研究的热点。本文提出了一种基于等级保护的信息安全管理体系构建方式,分析和阐述了组织机构如何在等级保护的要求下持续改进、不断完善自身的信息安全管理体系。此外,还针对组织机构的风险评估工作提出了新的思路和想法。The construction of ISMS(Information Security Management System) is an important means for institutional organizations to improve their infosec level.In recent years,with the in-depth development of infosec classified protection,the fusion of ISMS and classified protection gradually becomes the hotspot of research.This paper proposes an architectural construction method of ISMS based on classified protection,analyzes and describes how to continuously improve and perfect ISMS by institutional organizations under the requirements of classified protection.In addition,aming at the risk assessment of institutional organizations,new ideas and concepts are also presented.

关 键 词：等级保护 信息安全 信息安全管理体系 风险评估 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]