基于企业社会责任视角的日本企业信息安全分析

Information Security of the Japanese Enterprises:An Analysis from the Perspective of Corporate Social Responsibility

日本很早就关注企业信息安全问题,并且从遵守法令和企业社会责任的角度深入展开了理论研究与实践活动。目前,以信息泄露和计算机病毒传播等为代表的信息安全问题正在困扰着日本企业。从本质来看维护信息安全也是企业社会责任的一部分,信息安全的活动不能看作是"成本",而应该作为"投资"来把握。为此,日本政府通过相关机构和政策引导企业从社会责任的角度来认识和实施信息安全对策。同时,日本企业也从对顾客负责以及社会责任的观点出发,正逐步提高对信息安全重要性的认识。但同时,从社会责任的角度看,在企业制定与实施信息安全对策过程中也暴露出一些问题。

Information security has been emphasized early in Japan. The theories and practices have developed within the context of regulation corn tion security issues in Japan mainly pliance and corporate social responsibility. Now that the corporate informainclude information leakage and the spread of computer viruses, the maintenance of information security has been essentially part of corporate social responsibility that should be viewed as investments instead of costs. On one hand, this fact has prompted the Japanese government to implement information security strategies by emphasizing corporate social responsibility; on the other hand, the,Japanese enterprises have been more aware of information security from the perspective of customer safety and corporate social responsibility. Nevertheless, there are still some problems in the Japanese information security management.