信息安全制度设计原则的初步探讨

Discuss of Information Security Policies Design Principals

本文从个体行为和组织行为的角度,探讨了信息安全制度设计的几个基本原则,其中包括制度中处罚确定性、严厉性和及时性的确定。

From individual behavior and organizational behavior perspectives, especially Deterrence Theory （DT）, we discussed several principles should been observed in design of information security policies, including sanction certainty, sanction severity and sanction celerity.