應用OCTAVE風險評估方法建立資安政策之研究

• Main Authors: Cheng Po-Hsin, 鄭博心
• Other Authors: 劉中宇
• Format: Others
• Language: zh-TW
• Published: 2009
• Online Access: http://ndltd.ncl.edu.tw/handle/59351463610563741321

碩士 === 國防大學理工學院 === 電子工程碩士班 === 97 === The coming of Information Time makes our lives more convenient、but there’s a hazard behind it – Information Security. Sturdy Information Security must be under foundation of Information Security Policy. However、current Information Security Policy generally exists the situation of one size fits all、which usually causes the inconsistency for the demand of organization assignment. Therefore、the Main Scheme of this thesis will be the installation of 「proper」 policy、and also we hope to design an auxiliary tool to establish the Information Security Policy. This thesis utilizes OCTAVE risk assessment method to find out the Information Security risk existing in the organization、and then、as to the impact that Information Security is confronting、it’s expected that we can decrease the risk by the controls of CNS 27001、and also to establish Information Security Policy by this connection.