以风险评估为基础按等级划分构建劳动保障信息系统安全体系

Using Risk Revaluation and Hierarchical Partition to Build the Security Architecture of Labor Information System

按系统等级保护的建设思想为合理构建劳动保障信息系统安全体系提供了一个基准点,在此基础上还应结合信息系统的安全风险评估方法对信息系统的风险进行科学的评估,从技术和管理两个层面实施信息系统的风险管理,这是构建劳动保障信息系统安全体系的关键点。论文以风险评估为基础,合理使用信息系统安全技术标准,分等级地建设信息系统安全体系。

To provide a basis which use the think of hierarchical protection to construct the Security architecture of Labor Information System. Besides this basis, we should use the security risk evaluation to scientifically evaluate the Information System＇ s risks. We use two ways that is the Technique and the other is management to implement the Information System＇ s risk management. These ways are the key point to construct the Security architecture of Labor Information System. This disquisition＇ s basis is the risk evaluation, use the standard of security of Information System logically, and take the hierarchical to construct the architecture of the security of Information System.