應用失效模式與效應分析評估資訊安全管理系統之風險

Applying FMEA to Assess the Risk of Information Security Management System

韓慧林(Hui-Lin Han) ； 王貴民(Kuei-Min Wang) ； 王振陽(Chen-Yang Wang) ； 劉庭維(Ting-Wei Liu) ； 鄭曳庭(Yi-Ting Cheng)

《國防雜誌》 26卷6期 (2011/12) Pp. 107-122

https://doi.org/10.6326/NDJ.2011.26(6).7

摘要

在資訊科技爆炸時代，資訊安全管理系統風險評估已成為各企業營運或軍事部門優先考量因素；資訊安全漏洞將造成企業或國家之危機，風險發生原因及其影響也將帶來革命性的變化，為求組織永續發展及營運安全，不斷風險評估、預防管理及立即應變計畫乃必然之防範作為。本研究應用失效模式與效應分析以評估資訊安全管理系統風險為例，建立與提供一套資產風險評估與預應之啟發模式，作為國軍有效評估「國防資訊安全管理系統」之風險參考。

關鍵字

失效模式與效應分析 ； 資訊安全管理系統

並列摘要

In this exploded information technology era, the risk assessment of Information Security Management System (ISMS) has become the major concern by the business management and military department. The vulnerabilities of information security would inflict severe crisis on the enterprise or government easily that, however, the risk with its impact also brings us the revolutionary change for the sake of minimizing the risk. In order to keep the sustainable development and secured operation in organization, the continuous risk assessment, preventive management and immediate contingency plan have to be undertaken as preventive action. This paper is to use Failure Mode and Effect Analysis (FMEA) methodology to establish and provide a new risk assessment, and with heuristic model for studying ”The effective risk assessment on ISMS of MND”.

並列關鍵字

failure mode and effect analysis (FMEA) ； information security management system (ISMS)