基于灵敏度分析和综合权衡的信息安全管理系统评估

INFORMATION SECURITY MANAGEMENT SYSTEM EVALUATION BASED ON SENSITIVITY ANALYSIS AND TRADEOFF ANALYSIS

采用灵敏度分析和综合权衡分析方法,研究信息安全管理系统的评估问题。构建一个包括整体评估、性能指标灵敏度分析和系统优化三个层面的信息安全管理系统评估框架,提出了包含综合权衡方法和灵敏度分析方法的用于信息安全管理系统的评估方法。

This study applies the tradeoff analysis and sensitivity analysis to evaluate the Information Security Management System （ISMS）. It constructs an available framework for ISMS evaluation. This framework includes the holistic evaluation,the sensitivity analysis of quality attribute and the system optimization. It presents an effective methodology for ISMS evaluation. The methodology includes tradeoff analysis and sensitivity analysis. This study can summarize some interrelated theory and methodology for ISMS evaluation on the one hand, and can help the construction of the ISMS of our country on the other hand.