Information Security Management System of IDC Based on ISO27001
Cao Mu-heng · Information Security and Communications Privacy · 2009
In this essay,the serial processes for building Information Security Management System are proposed,including asset identification,asset evaluation,risk evaluation,compiling of management system file,and implementation,monitoring and improvement of ISMS.Thereby China Telecom Shenzhen Branch,based on ISO27001 ISMS,focuses on risk management and applies technical measures to build the comprehensive ISMS of IDC and effec-tively safeguard information asset security and business continuity.