信息安全保险核保体系的研究与设计

A study on the underwriting system of information security insurance

本文分析了信息安全保险承保环节中核保工作的操作特点与实现难点,结合我国信息安全市场状况与产业特殊性,对信息安全保险的核保体系及其技术支撑平台进行了研究。基于信息风险评估理论,对信息安全保险核保技术审核架构的具体实现环节进行了详细设计。以企业级局域网为例,对其设计的核保体系进行了可行性与有效性论证。

Based on an thorough examination of the characteristics and difficulties in the underwriting of information security insurance and reference to China＇s information security market and its particularities, this article performs a study on the underwriting system and the technical support platform of information security insurance. The authors present a detailed design of the feasible operation structure following the theory of information risk assessment. Taking the enterprise local area network as a case, this article further explains the feasibility and effectiveness of this design.