国外军工企业信息安全管理实例分析及启示

A case study of information security management of foreign military enterprise and its reference to China

军工企业是国防工业的重要组成部分,涉及政府、企业、非营利组织等多方利益,对国防和国民经济建设有着重要的作用。文章以美国著名军火商诺斯罗普·格鲁门公司为例,通过实例分析了构成该公司信息安全管理体系的制度措施、工具措施和衍生措施。在此基础上,指出该公司以这三类措施为基石,建立了一个由内而外、层递式的全方位网络安全保护系统,希望对我国军工企业情报信息安全管理有一定的参考意义。

As the important part of the national defense industry, military enterprises are interconnected with many other parties, such as governments, enterprises and non-profit organizations, playing a pivotal role in national defense and national economic construction. Taking Northrop Grumman, a well-known American military enterprise as an example, this paper gives a detailed analysis of its information security system built by a combination of security system building, security tools and derivative measures. Then, the author points out that the company has established an all-around, layered security protection system from the inside out with these measures, aiming to shed light on the security management for China＇s military enterprises.