Research And Improvement Of Information Security Management Of A Company

With the rapid development of enterprises' informationization construction, more and more enterprises base their business operations on the information systems with platforms supported through information technology. The applications of information technology have greatly helped enterprises to improve their productivity and to reduce operating costs, bringing huge economic benefit. However, information security risks caused by such incidents as unauthorized access, leakage of business data, program defect, server paralysis and vulnerability attack are exposed to enterprises in the course of informationization, and these information security risks will no doubt, finally turn to enterprises'business risks through the risk transmission. Therefore, it has become a critical problem for enterprises to study and resolve how to eliminate and reduce the threats to them caused by such information security risks.The A enterprise is a manufacturing enterprise which takes a remarkable market share in the intensely competitive environment by massive manufacturing to reduce production cost achieving delivery of high quality products with lower price. The A enterprise has already based its main core business and the business operation on the information systems, which has become an indispensable platform of the A enterprise. Therefore, it is a big challenge for the A enterprise to design and establish a complete and sustainable information security management systems. This thesis is to help the A enterprise to establish a customized and sustainable information security management systems by offering an effective improvement solution after studying and analyzing the existing main management problems of the A enterprise by exercising and referring information security management theories and relevant international information security standards.As these information security problems facing by the A enterprise can easily be found in a company, the research result of this thesis can be applicable to those enterprises of similar type as well.