摘要
基于对ISO/IEC27004:2009《信息技术-安全技术-信息安全管理测量》的研究,分析如何测量信息安全管理体系的有效性,确保其控制措施的有效和安全需求的满足。
Base on the analysis of ISO/IEC 27004:2009 Information Technology-Security Techniques-Information Security Management Measurement, the approach to measure the effectiveness of an information security management system is presented to ensure the effectiveness of the control measures and the security requirements being satisfied.
出处
《电子产品可靠性与环境试验》
2010年第3期53-58,共6页
Electronic Product Reliability and Environmental Testing
关键词
信息安全管理体系
有效性
测量
Information Security Management System
effectiveness
measurement