摘要
由于IT系统结构复杂,人员众多,系统内的审计控制作为有效管理方式,是长期困扰我国各单位机构信息科技和风险稽核部门的一个重大问题。在设计安全架构时,由于信息系统的脆弱、技术的复杂、认为操作等原因,为了预防、减少或消除潜在风险,运维管理与操作监控机制的介入,对IT信息系统进行事前防范、事中控制、事后监督和纠正的组合管理就显得十分必要了,所以本文对国内外相关审计需求发展进行了深入细致的研究,是为了提出一个完善的整体解决方案。
Because the IT system structure is complex, the number of personnel, system audit control as an effective management way,is a major problem in our country the institutions of information technology and the risk of audit department.In the design of security architecture,due to the fragile,technology information system,the complex operation and other reasons, in order to prevent,reduce or eliminate potential risks,management and operation of monitoring mechanism in the IT information system,to the prevention,portfolio management process control,supervision and correction is very necessary,so the domestic and foreign related audit demand development conducted in-depth and meticulous research,to put forward a perfect solution.
出处
《电子测试》
2013年第12S期125-126,共2页
Electronic Test
关键词
运维审查的定义
存在的问题
构建方案
研究意义
Definition of operation review
problems
construction project
research significance