对我国信息系统认证与认可过程的探讨

Investigation to our Country's Information System Security Certification and Accreditation Process

该文首先简要介绍了美国的信息系统认证与认可过程和我国现阶段的信息系统测评认证的现状。通过我国与美国的信息系统认证与认可过程的比较,分析了我国现阶段信息系统测评认证过程特点,并对今后信息系统测评认证的发展给出了相关建议。

This paper first introduces nowadays information system security certification and accreditation(C&A)process of American and our country.Through the comparation to the two process,the characteristics of the C&A process in our country are analyzed,and some suggestions are presented for the development of our country's C&A process.