| The rapid development of modern information technology, and critical information infrastructure of the people’s livelihood are becoming ever larger and increasingly complex network structure, gradually highlighted the issue of information security, network security incident after another. To avoid separated from the information security requirements and security solutions, in recent years,in order to enhance the efficiency of network and information security management in China vigorously strengthen the information system security assessment of the risk assessment as the core, to be guaranteed by the regulations, standards means gradually so that the risk development of assessment work to institutionalize routine.Risk assessment is the traditional risk theory and methods in the use of information systems, scientific analysis and understanding of the risks faced by information and information systems in the confidentiality, integrity, availability, and reduce the risk transfer and circumvent and other decision-making process between risk control methods. Conduct a comprehensive assessment of the science, work activities in accordance with the relevant national policies, regulations and standards, information systems and processing, transmission and storage of the confidentiality, integrity and availability of information security attributes. According to the vulnerability of the system, the threats and the vulnerability of the actual negative impact on threatened resource use to identify information systems security risks.This paper analyzes the technology needs of the telecom companies on risk assessment and network security work, and applicable to telecom companies, network security and direction of the assessment program designed for the needs of a detailed implementation process, as well as all aspects of processthe specific implementation of the method, a detailed description of how to use tools for application software, operating systems, databases, network security and risk assessment. Finally, according to the results of the scan on the effectiveness of the program is verified, and safety recommendations. |
