Evaluation of Information Security Management System Based on Tradeoff Analysis
YU Yan-fang · Jisuanji fangzhen · 2009
Along with the advent of information era,each organization possesses and needs more and more information.They pay great attention to the construction of the Information Security Management System(ISMS).This study applies the tradeoff analysis to evaluate the ISMS.It constructs an available framework for ISMS evaluation.This framework includes the holistic evaluation and the system optimization,and is consistent with the thought of system engineering.It presents an effective methodology set for ISMS evaluation.The methodology set is based on the tradeoff analysis,and combines the qualitative analysis with quantitative analysis,and realizes the visualization of optimization process.This study can summarize some interrelated theories and methodologies for ISMS evaluation on the one hand,and can help the construction of the ISMS of our country on the other hand.