| 1. | On the contrary , this thesis presents an brand - new information system security assurance system model that should be based on the security strategy , people as the acting role , security technology as the body to support the implementation of security engineering system , safety management as a means to the relevant standards , laws and regulations as a guarantee , roundly and effectively to protect information systems security 接下来,本文具体研究了构成安全保障体系的各要素,分别分析了信息安全策略、安全组织(人) ,安全工程过程(技术) ,安全管理以及相关的标准、法律法规。尤其重点介绍了安全工程过程(技术)的保障,以及安全管理的保障。 |