BS7799风险评估的评估方法设计

Design for BS7799 Risk Assessment Method

介绍了BS7799国际标准的内容,对标准的组织结构进行了建模,并分析了BS7799标准的不足。在此基础上,提出了应用BS7799管理标准对组织进行信息安全管理风险评估的评估方法,即将层次分析法和失效树法相结合的综合评估方法,并给出了完整的计算过程。

After introducing the BS7799 standard, analyzing its merits and shortage, and modeling the framework, this paper brings forward an evaluation method that applies the BS7799 standard to make information security management risk assessment -- integrating the analytical hierarchy process with fault tree analysis process. Finally, the paper offers a complete computation course.