摘要
介绍了基于信息资产的信息安全风险评估方法,并设计了风险评估工具。通过使用该工具,可以完成对系统的资产、威胁、脆弱点等风险识别以及后续处置措施的跟踪,并能输出风险评估报表和统计风险发生趋势。该方法可以保证风险评估的全面性和完整性,能够有效发现、评估信息风险并加以处置。
This article introduced the risk assessment method based on information assets and designed the risk assessment tool. By using the tool, we can implement the assessment of information assets, threat and vulnerabilities. Also, the risk assessment report can be presented and the risk trend can be counted and forecasted. This method can guarantee the integrity and comprehensiveness of the risk assessment, and it can find out the risk to deal with effectively.
出处
《信息技术与标准化》
2014年第6期15-19,共5页
Information Technology & Standardization
关键词
信息安全
信息资产
风险评估
弱点
威胁
information security
information assets
risk assessment
vulnerability
threat
