我国信息安全风险评估面临的问题及对策探讨

The problems and countermeasures of Information security risk assessment in our country

在信息时代,信息是一国经济发展以及科技进步最为重要的资源,人们在享受网络信息带来便利的同时又不得不承担一定的风险。有效地对信息安全进行风险评估是规避风险的重要手段。我国在信息安全风险评估中存在着评估角色不清、责任不明、缺乏统一的评估标准、人才欠缺、评估意识淡薄等问题,需要从基础方面入手,明确评估主体的责任、确立信息安全风险评估的标准、培养及引进专门的人才、树立正确的风险评估思想对上述问题加以解决。

In the information age,information is the most important resource of a country’s economic development and scientific progress.People enjoy the convenience that network bring,at the same time,they have to bear some risks.An important means of risk aversion is the assessment information security risk effectively.Our country exists the problems in the information security risk assessment,such as assessment role is not clear,responsibility is unclear,lack of a unified evaluating standard,lack of talents, evaluation consciousness is dim.We needs to solve the above problems from basic aspects,that is,defining responsibility of main assessment body,establishing standards of information security risk assessment, training and introducing specialized talents,and establishing the correct thoughts of risk assessment.