基于风险评估指数法的信息系统安全——以广西工学院图书馆的信息化架构为例

Information System’s Security Based on the Risk Assessment Index ——Taking the Informatization Framework of the Library of Guangxi University of Technology as the Example

讨论了风险评估指数法在信息系统安全风险分析中的应用,就图书馆信息化架构建设中存在的网络安全风险、实体风险、数据安全风险、人员制度风险等进行分析,并针对这些风险所采取的技术和措施进行了探讨。

This paper discusses the application of risk assessment index in the analysis of information system security risk, analyzes the network security risk, entities risk, data security risk, and personnel system risk, etc. existing in the construction of library＇s informatization framework, and probes into the techniques and countermeasures adopted for dealing with these risks.