The Risk Management In The ISO27001 Consulting Projects

With the rapid development of network and information technology, the information degree in all walks of life is increasingly high. Production and operation, commercial activities of enterprises have gradually extended to Internet, so the requirements to data center that as Internet carrier are becoming more and more severe. At the same time, the adoption of new technology and new application is also facing new attack and challenge. How to realize the information security in data center, and not simply rely on security products and techniques, we need carry on standardized management on information security management.Information security management achieves risk identification, control and management through risk management, risk management is a very important link of information security management, the result of risk management directly affects the level of information security, which provides strong protection of operation environment in data center.This thesis learns and sorts out the development and current situation of risk management, also describes the risk management approach, and carries out qualitative analysis for risk combining features of data center business, it is applied to ISO27001 consulting projects, and passed the ISO27001 standard certification.