基于管理因素的企业信息安全事故分析

在借鉴国内外研究成果的基础上,结合事故致因理论提出企业信息安全事故模型,以事故机理研究为基础,以管理因素研究为核心,对信息安全事故致因因素进行整理归纳,将其分为环境因素、人员因素、技术因素、设备因素等四类,分析各因素对信息安全事故的影响,构建信息安全事故致因因素鱼刺图,最后提出针对性的防范措施。

Based on the international and domestic researches and the accident-causing theory, a model of enterprise information security accidents was constructed. Then, by taking accident mechanism as the study basis and management factors as the study core, we divide the accident-causing factors into 4 parts： environmental factor, personnel factor, technical factor and equipment factor. And, factors for enterprise information security accidents were analyzed and a fishbone chart about causal factors of enterprise information security accidents was constructed. Finally, preventive measures of enterprise information security ac- cidents were proposed on the basis of the four factors.