基于风险控制的大学信息安全政策体系构建——基于美国8所大学的实践分析

The Construction of University Information Security Policy System Based on Risk Control——Practical Analyses of 8 American Universities

[目的/意义]通过对美国8所大学的信息安全政策体系进行研究,为国内大学加强信息安全政策体系建设提供有益的参考。[方法/过程]采用网站调查法和案例分析法研究了美国大学的信息安全政策构建的模式和特点。[结果/结论]基于对美国大学信息安全政策体系构建特点的分析,提出了5项启示性建议。

[Purpose/Significance]The article analyzed the information security policy system based on risk control of 8universities in the United States,in order to provide useful references for strengthening the information security policy system in our country.[Method/Process]This paper adopted web survey and case analysis methods to study the model and characteristics of the information security policy system.[Result/Conclusion]Based on analyses of the characteristics of the information security policy system in American Universities,this paper put forward five suggestions.