A design for information security risk evaluation and control platform based on audit Methodology

摘要：

A information security risk evaluation and control system is designed based on cybernetic theory, also combined with audit Methodology, Which is not only an automatic evaluation tools, but also provide a risk control aid and decision support to the organization. The design adopted a multi-level control system idea and the full information security risk evaluation life cycle process.

关键词： information security multi-level control system cybernetic theory total distributed control risk evaluation information system audit method.

作者: Zhong Wei Ming Ye

作者单位: PhD School of Economics and Management Shanghai Maritime University Shanghai, China Shanghai 30wish information security company Shanghai, China

会议类型: 国际会议

会议名称: 2007 Conference on Systems Science, Management Science and System Dynamics(第二届系统科学、管理科学与系统动力学国际会议)

会议地点: 上海

会议语种:英文

页码: 2281-2286

在线出版日期: 2007-10-19（万方平台首次上网日期，不代表论文的发表时间）