基于SPM方法的S石化公司信息安全管理策略的研究

发布时间：2018-06-24 02:58

  本文选题：信息安全 + SPM　； 参考：《上海交通大学》2015年硕士论文

【摘要】：云计算、大数据和新型社交网络等信息爆炸发展的时代,在为人们生活带来便利的同时,一方面为企业的发展带来了机遇,信息数据的海量存储、管理和分析可以协助企业更好地经营发展;另一方面也为企业带来了新的挑战,如何更加安全有效地使用和管理这些信息数据是企业需要思考的问题。本文将以S石化公司为例,根据公司发展发现公司在信息安全管理方面现存在的问题,并借助于安全全球的信息安全评估和规划SMP方法对公司进行全面分析和诊断,最后分别从组织人员、信息安全管理和信息安全技术层面对S石化公司作出速盈整改建议策略,希望对公司的整体长期发展具有一定的指导意义。首先本文将对S石化公司的现状进行介绍,同时主要从风险值、成熟度评分和差异分析等维度对S石化公司的信息安全现状进行介绍。然后文章在SPM分析法框架的支撑和约束下,对公司的信息安全管控进行详细的信息安全现状分析找出公司存在的不足,其中主要从组织人员、管理安全和技术安全等方面进行详细分析说明。基于对公司发展的充分理解,随后本论文在结合实施紧迫度,风险评估效果,实施效益以及技术可行性等角度,针对上文对S石化公司提出的问题依次提出速盈整改建议策略,目的在于帮助S石化公司解决信息安全威胁,同时更好的帮助公司建设主动式信息安全预防体系,保证信息安全工作支持IT规划目标的。最后论文总结概述S石化公司信息安全管理策略,并将结合现实操作等不可预测因素对提出的策略指出本文仍存在的不足以及下一步要做的工作。
[Abstract]:With the development of cloud computing, big data, new social network and other information explosion, it not only brings convenience to people's life, but also brings opportunities for the development of enterprises, massive storage of information data. Management and analysis can help enterprises to manage and develop better, on the other hand, it also brings new challenges to enterprises. How to use and manage these information data more safely and effectively is the problem that enterprises need to think about. In this paper, taking S Petrochemical Company as an example, according to the development of the company, we will discover the existing problems in the information security management of the company, and make a comprehensive analysis and diagnosis of the company by means of the information security assessment and planning SMP method of the global security. In the end, the author makes suggestions to S Petrochemical Company from the aspects of organization personnel, information security management and information security technology, hoping to have certain guiding significance for the overall long-term development of the company. First, this paper will introduce the present situation of S petrochemical company, and introduce the present situation of information security of S petrochemical company from the aspects of risk value, maturity score and difference analysis. Then, under the support and constraint of SPM analysis framework, the paper analyzes the current situation of information security of the company in detail, and finds out the shortcomings of the company, mainly from the organization personnel. Management safety and technical safety and other aspects of detailed analysis. Based on the full understanding of the development of the company, then this paper combines the implementation urgency, risk evaluation effect, implementation benefit and technical feasibility, and puts forward the proposed strategy of quick profit rectification for the problems raised by S Petrochemical Company. The purpose is to help S Petrochemical Company to solve the threat of information security, at the same time to help the company to build a proactive information security prevention system, to ensure that information security work supports IT planning objectives. Finally, the paper summarizes and summarizes the information security management strategy of S Petrochemical Company, and points out the shortcomings of this paper and the work to be done in the next step, combining with the unpredictable factors such as practical operation.
【学位授予单位】：上海交通大学
【学位级别】：硕士
【学位授予年份】：2015
【分类号】：F270.7;F426.72;TP309
，

本文编号：2059693