基于信息安全风险评估的档案信息安全保障体系构架与构建流程

我国要求采用等级保护制度下开展风险评估的方式构建国家信息安全保障体系,档案信息安全保障体系构建必须符合国家信息安全保障的政策和要求。本文研究了基于等级保护和风险评估的档案信息安全保障体系构成,介绍了在档案信息系统生命周期中的不同阶段如何实施档案信息安全风险评估,提出了基于信息安全风险评估的档案信息安全保障体系构建流程。

The construction of national information security assurance requires the use of classified security protection in the way of risk evaluation in our country.The construction of archive information security assurance system must be accord with national information security policies and requirements.This paper puts forward construction of archive information security assurance system based on classified security protection and risk evaluation.It also introduces how to implement risk evaluation of archive information security at the various stages in the life cycle of archive information system and proposes construction process of archive information security assurance system based on information security risk evaluation.