数字图书馆信息安全风险控制

Control of Information Security Risk in Digital Libraries

根据数字图书馆自身的特点和现实需要,以ISO27002的通用准则为标准,总结适合于数字图书馆信息安全管理的控制措施,筛选出数字图书馆信息安全核心控制要素与参考控制要素,从组织控制和技术控制两个方面对数字图书馆进行风险控制。

According to characteristics and the realistic need of digital library, the paper takes the common criteria of ISO27002 as a standard, summarizes some control measures for information security management of digital library. Then it screens out the core control elements and referenced control elements about information security in digital library, and carries out risk control on digital library from organization control and technology control.