Shulou(Shulou.com)06/01 Report--

At present, information security is becoming more and more important to enterprises, and the construction of information security technology system has become an important task for the development of enterprises. what kind of design goals and principles should be adhered to in the construction of information security technology system is the key problem that enterprises should consider. My center summed up the following points, hoping to help you.

I. the design goal of the information security technology system

An appropriate information security technology system solution not only needs to understand the requirements of information security management and get the maximum return with the minimum investment, but also provides an easy-to-operate platform for information security operation and maintenance management.

When implementing the information security technology system planning, the following needs to be considered:

1. Planning for the overall security of information

2. Integrate different information security functions and mechanisms to achieve the purpose of unified control and complementarity.

3. Consider the impact on other simultaneous projects

4. Start with the basic safety measures with the least negative impact

5. It is scalable in the future, so that the overall structure will not need to be changed because of capacity problems in the future.

The design and implementation of the information security technology system shall be based on the risks faced by the information assets. The design of information security measures should be based on the principle of achieving the purpose of security protection rather than the maximum investment.

II. Principles for the Construction of Information Security Technology system

According to its information system level, information security technology system can be divided into five categories: physical security technology, infrastructure security (network, host and terminal), application security technology, data security technology, identity and access management. It can correspond to the five security subsystems described in the previous enterprise security architecture, namely, access control, trust management, information flow control, audit and integrity.

The construction principle of the enterprise information security technology system is to build the enterprise information security framework corresponding to the management system. General enterprises have deployed some information security products, but the information security architecture of the enterprise has not been clearly designed, and the executive power brought by the information security management system and the information security architecture is somewhat out of line. as a result, the executive power of enterprise information security management system is not enough.

In the design of the information security technology system and the adoption of the specific information security technology system, the common information security weaknesses in the current enterprise application systems need to be taken into account. at the same time, information security reinforcement is carried out according to the detailed information security risks obtained from the information security assessment. Each information security weakness has corresponding information security technical support, aiming at the main information security weaknesses and means in the current application system of enterprises, the response to the main information technology risks of the application itself, the application host and the application bearer network will be considered in the design of the information security technology system.

The above is the summary and writing of Shandong Software Evaluation Center, the shortcomings, but also hope that the relevant experts and scholars criticize and correct.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.