企业信息安全测评中的风险分析与风险规避

Risk analysis and prevention of enterprise information security testing and evaluation

信息安全测评活动在某些因素下会导致企业信息系统宕机、甚至重要数据信息的泄露和损坏情况的发生,给企业信息安全管理工作带来负面影响.本文通过对企业测评活动中存在的各类风险进行综合分析,提出具体的应对措施,帮助企业在规避相关风险的同时,确保测评活动的顺利实施.

Information security evaluation activities under certain factors can lead to enterprise information system downtime, even important data information leakage and occurrence of damage, have a negative impact to the enterprise information safety management This paper make a comprehensive analysis of the risk of enterprise evaluation activities, give the specific measures to help enterprises to avoid risks, at the same time, to ensure the implementation of evaluation activities.