國防資訊安全管理系統之導入專案管理模式建構

Constructing the Project Management Model for Information Security Management System of the National Defense

王貴民 ； 韓慧林 ； 陳建任 ； 李承漢 ； 陳鼎元 ； 洪全緯

《國防雜誌》 25卷6期 (2010/12) Pp. 24-36

https://doi.org/10.6326/NDJ.2010.25(6).3

摘要

網際網路盛行之今日，資訊安全議題無所不在，然欲投入資訊安全管理活動，所涉及之人力、物力、財力、專業知識及技術龐雜，單位資訊安全稍一不慎，將全功竟棄，影響國防安全甚巨。資訊安全專案管理乃藉由「規劃、組織、領導、協調、控制」企管手法，將資訊安全管理系統要求，透過「發起、規劃、執行、控制與結束」流程之專案管理，以達成資訊安全管理目標。本研究目的：（1）學習ISO27001資訊安全管理系統知識；（2）提供一套ISO27001之系統作業模式；（3）建構符合ISO27001資訊安全管理系統之專案管理作業，協助國軍有效導入「國防資訊安全管理系統」。

關鍵字

資訊安全管理系統 ； 專案管理

並列摘要

Nowadays, issues regarding information security are present overwhelmingly in the context of network and internet. However, in terms of the investments necessary to create an information security management project, would require the integration of many fields such as manpower, financial, material, know-how, and technologies. If the unwillingly careless leak occurred, not only would all the investments be in vain, but also the incalculable impact would occur for the defense system. With the intention of achieving to the ultimate goal of information security management, this project aims to get through the ”Initiation, planning, executing, controlling and closing” processes and methods.The purpose of this research are: (1) Learning the knowledge of ISO27001 ISMS, (2) Providing a systematic execution model of ISO27001, and (3) Constructing the project management model being completely in accordance with ISMS of ISO27001 in helping MND with its introducing and build-up ”MND' s ISMS”.

並列關鍵字

ISO27001 ； Information Security Management System (ISMS) ； project management