中國s銀行信息安全風險管理研究

1、西南交通大學碩士學位論文中國S銀行信息安全風險管理研究姓名：邊曉杰申請學位級別：碩士專業(yè)：工商管理指導教師：郭強20090412AbstractThedevelopmentandapplicationofinformationtechnologyhavebroughtaprofoundinfluenceonthedevelopmentofChinaSbankinrecentyearsAtthesametime，thebankisalso

2、becomingmoreandmoredependentoninformationtechnologywhichresultsinthatthesecurityreliabilityandvalidityofinformationsystemaffectthesecurityandstabilityofSBankdirectlyTheriskmanagementofSbankinformationsecurityisnowstillin

3、theinitialstageandtheexternalsecuritysituationthatwearefacingnowisverycomplexandeverchanging，SOhowtobuildanefficientbankinformationriskmanagementsystemhasbecomeanincreasinglyoutstandingproblemThemainresearchandstudyconte

4、ntsinthispaperareasfollows：1)studyedonthetheoriesofriskmangements，informationsecuritymangements；2)studyedontheinternationalregulations，standardsandnormsofinformationsecurity(suchasthenewBaselAccord，theSarbanes—OxleyActIS

5、027000seriesofstandards，IS013335，COBIT，IATF)，themethodsofPDCAandHTP，aswellastherankofprotectionsystemsinChinaandtherelevantregulationsofbankinginformationsecuritymanagementissuedbyChinaBankingRegulatoryCommission；3)resea

6、rchedonthehiddenproblemofinformationsecurityriskinSBankbymeansofdecompositionanalysisandvulnerabilityscanning；4)proposedthenewsolutionsoftheinformationsecurityriskmanagementforSBankbasedontheresultsofriskanalysisandtheab

7、overesearchresultsInthispapertheideaofriskmanagementhasbeenappliedintothepracticesofSbank’SinformationsecuritymanagementAccordingtothebestpracticesofbankindustry，themainframeworkofthebankS’Sinformationsecurityhasbeenesta

8、blishedThispaperalsoputsforwordmanymethodsasfollows：1)themethodsonhowtoestablishtheinformationsecuritypoliciesandhowtObuildtheinstitutionalframeworkofSbankincludingpolicies，regulationsandstandards，guidelinesandthedetails