对信息系统管理中信息安全风险评估研究

Risk assessment of information security in information system management

随着信息技术的发展,信息系统面对的安全问题越来越突出,这引起了社会的广泛关注。而对信息系统安全的风险进行评价,是对信息系统安全保护的重要体现。首先对信息系统安全风险评估涉及到的4个基本因素进行了阐发。虽然针对风险评估的方法有很多种,但这里在构建信息系统安全风险评估指标的基础上,运用层次分析法(AHP)和模糊综合评判对风险进行了有效评估,为信息系统安全风险的管理决策提供了科学依据。

With the development of information technology,the security issues of information system become more and more serious,which have aroused widespread concern. Therefore,it is necessary to take risk assessment of information security. The 4 basic elements in risk assessment of information system security are analyzed. The risks are effectively assessed using analytic hierarchy process（AHP）and fuzzy comprehensive evaluation based on risk assessment index of information system security. It provides scientific basis for information system security management.