關(guān)于ISO27001信息安全風險評估方法的探討.pdf

1、首都經(jīng)濟貿(mào)易大學碩士學位論文關(guān)于ISO27001信息安全風險評估方法的探討姓名：張曉銘申請學位級別：碩士專業(yè)：安全工程及技術(shù)指導(dǎo)教師：袁化臨20070401英文摘要AbstractAsawpresentationalinformationsecuritymanagementsystemstandardintheworld，ISO／IEC27001gainsrecognitionfrommoreandmorecountriesAtpres

2、enttheworkaboutconsultationofthisstandardinChinaisincreasingdaybydayhoweverbeingthekeystepaboutimplementationofconsultationofIS0，IEC27001thereisnoconcreteoperationaboutinformationsecurityriskassessmentinthisstandardthere

3、forealltheconsultationcompanytakeitsownwaythereisnotexistingauniformstandardInordertopromotethework’Sdevelopmentofinformationsecurityriskassessment，thisdissertationdiscussestheapproachofriskassessment，themethodofriskiden

4、tifying，andthemethodofriskcalculationwhichareusedinanitem，and011thebasisofabovediscussion，thisdissertationestablishesamethodofinformationsecurityriskassessmentInthismethod，theinformationsecurityriskassessmentforanorganiz

5、ationisdividedintotwoparts，oneistheassessmentaboutthewholesecuritystatus，whichadoptsthemethodofbaselineassessment，andintheoperationmainlydel把mdsonthechecklistofinformationscenritytheotheristheassessmentaboutimportantasse

6、twhichadoptsthemethodofparticularriskanalysis，andintheoperationmainlydependsonthemethodbasedonrisktreeanalysisKeywords：InformationSccurity，InformationSecurity鼬skAssessment，ISO／IEC27001，ChecklistofInformationSecurity，lUsk