浅谈信息安全测评项目中的测评分析

Evaluation Analysis in Information Security Evaluation Project

现阶段随着国际上对信息系统安全的重视和关注,中国各行各业的等级保护工作的也在迅速的开展中,而各单位本身也对自身系统的安全越来越重视,如何通过等级保护测评来细致的分析结果,得出切实可行的防护方案就成为了文中探讨的重点。文中运用项目管理的思想和方法,将等级保护测评方法和项目风险管理的理论相结合,完善在测评中的分析方法,以期达到提高测评项目的成功率和测评结果的准确率。

With the international attention and concern the security on information systems at this stage,the classified protection of various organizations is rapidly unfolded,and various units are also rapidly carried out,the units are more and more attention to the safety of their own systems,thus how to evaluate the analysis results via classified protection test and achieve practicable protection scheme becomes the focus of discussion. With the ideas and methods of project management,an d in combination of the evaluation method of classified protection and the theory of project risk management,the analysis method in the evaluation is perfected,thus to achieve greater success and accuracy of the evaluation results in the evaluation project.