The Application of Risk Assessment Method in the E-mail System

• Main Authors: Chia-Ming Liu, 劉家明
• Other Authors: Huei-Chung Chu
• Format: Others
• Language: zh-TW
• Published: 2007
• Online Access: http://ndltd.ncl.edu.tw/handle/18983380196866782770

碩士 === 華梵大學 === 資訊管理學系碩士班 === 95 === Since the rising security problems, information managers can’t neglect the security issues. The topic that the managers concern most is how to achieve the balance between information security and budget. Some scholars found that the most effective ISMS is using risk assessment methodology to identify the threat and vulnerability of the system, and then evaluate the potential damage and define the security policies. It doesn’t only fulfill the integration of business objective and security policies, but also achieve the CIA. Although BS7799-3 will be the ISO 27005 standard, AS/NZS 4360 still have its function. In this research, three methodologies were evaluated and applied in the E-MAIL system. The result showed that BS7799-3 is good for identifying the components of risk, and AZ/NZS 4360 can help the user to examine the whole system risk. Both have their advantageous perspective.