联系我们

论文查询结果	返回搜索

论文编号：	14205
作者编号：	2320213796
上传时间：	2023/12/8 11:51:30
中文题目：	B互联网公司信息安全风险识别及管理策略研究
英文题目：	B Internet Company Information Security Risks Identification And Management Strategy Research
指导老师：	李颖
中文关键字：	信息安全;风险管理;ISO27001;互联网企业;风险评估
英文关键字：	Information Security; Risk Management; ISO27001;Internet Companies; Risk Assessment
中文摘要：	近些年，随着信息技术的飞速发展，我们已进入了信息化时代。在这个时代背景下产生了大量的以信息技术为核心的互联网企业，这些企业在近年来甚至逐渐成为了商业世界的主力增长点和新型驱动力，逐渐的也在影响着传统行业和领域。信息作为一种软资产为企业创造了商业价值，同时也面临着信息安全风险隐患，近些年被曝光的一系列信息安全风险事件层出不穷，操作手法也变得更加隐蔽性难以被发现。当今几乎所有企业都在面临一个共同的挑战，那就是如何做好企业的信息保护，提升自身的信息安全水平，这对以信息为主要资产的互联网企业来说变得尤为重要。 本论文以B互联网公司作为研究对象，首先结合整体行业信息安全现状及信息安全典型案例分析、B互联网公司的信息安全管理现状，通过查阅相关内部资料、走访调研等方式，对公司的信息安全风险深入地剖析和研究。然后，通过组建风险评估专家小组，借助ISO27001信息安全风险管理体系对公司的信息资产、信息威胁和薄弱点进行定性识别与定量评估，得出信息安全风险值并形成统一结论。最后，明确风险控制的范围，为风险控制措施制定目标，提出有效的风险应对措施，以及信息安全持续改进策略，确保信息安全体系的可持续性。本论文旨在为B互联网公司及其他相关企业提供信息安全风险管理的有效参考，以应对不断演变的信息安全挑战。
英文摘要：	In recent years, with the rapid development of information technology, we have entered the era of informatization. Under this backdrop, numerous internet enterprises, with information technology at their core, have emerged. These enterprises have gradually become the main growth drivers and new forces in the business world, exerting an influence on traditional industries and sectors. Information, as a type of intangible asset, creates commercial value for enterprises, while also facing potential risks to information security. In recent years, a series of information security risk incidents have been exposed, employing increasingly covert methods that are difficult to detect. Nearly all enterprises today face a common challenge: how to enhance information protection and elevate their own level of information security, which is particularly crucial for internet enterprises where information is a primary asset. This paper takes B Internet Company as the research subject. Firstly, it combines an analysis of the overall industry's information security status and typical information security cases, as well as the current state of information security management in B Internet Company. Through consulting relevant internal materials and conducting field research, a thorough analysis and study of the company's information security risks is carried out. Next, by forming a risk assessment expert group and utilizing the ISO27001 Information Security Risk Management System, the company's information assets, threats, and vulnerabilities are qualitatively identified and quantitatively evaluated. Information security risk values are determined, leading to a unified conclusion. Finally, the scope of risk control is defined, objectives for risk control measures are established, effective risk response measures are proposed, along with strategies for continuous improvement of information security, ensuring the sustainability of the information security system. This paper aims to provide effective references for information security risk management for B Internet Company and other related enterprises to cope with evolving information security challenges.
查看全文：	预览  下载(下载需要进行登录)