信息系统的安全性管理

解决信息安全问题离不开信息安全技术和产品。但技术在整个信息安全保障体系中并不是最重要的。科学的信息安全管理是建立有效的信息安全保障体系的基础。在我国核心技术和关键设备还相对落后的情况下,更要充分发挥我们的制度优势,通过科学管理来弥补技术上的不足。要从建立信息安全等级保护框架、信息安全管理策略框架、等级化信息安全管理体系等方面入手,制定适合国情、与国际接轨、具有可操作性的信息安全管理标准,从而建立起适合我国国情的信息安全管理体系。

Security Management of the Information System

The problem of information security cannot be solved without the technology and products of the information security. But the technology is not the most important thing in building an effective system of guaranteeing information security while the scientific management is its base. Because the core technologies and the key equipments are relatively falling behind in our country, we should make full use of the advantages of our society system and make up our disadvantages by scientific management. By setting up the framework of information security grade, the framework of information security management strategy, and the system information security, we can establish the information security management standard that is accord with internationalism and suitable to the situation of our country and very feasible. In this way, we can build our own information security management system.