数字资源保存安全风险评估体系构建及实证研究

Construction and Empirical Study of Security Risk Assessment System for Digital Resource Preservation

文章依据《信息安全技术信息安全风险管理指南》,参考OCTAVE风险管理方法,从指标创建、范围界定、威胁识别、分析处置四个阶段构建数字资源保存安全风险评估体系,并在医学数字资源保存环境中开展实证研究,以期为我国数字资源保存过程中的安全风险管理提供理论和实践参考。

On the basis of“The Information Security Technology Information Security Risk Management Guide”,referring to OCTAVE risk management method,the article builds digital resource save security risk assessment system from four stages of the index creation,scope definition,threat identification,analysis and disposal.Empirical research in medical digital resource preservation environment is carried out in order to provide theoretical and practical reference for security risk management in the process of digital resource preservation in China.