供应链信息安全体系构建

构建供应链信息安全管理体系可以有效保证供应链企业的信息安全。以ISO27000、ISO28000体系为基础的构建方法能够建立起较好的供应链信息安全体系。构建的过程包括定义环境、建立信息安全方针、风险识别、风险评估以及风险处置。构建信息安全体系的过程中应该注意由供应链的特点所引起的一些问题。

The Construction of Information Security System of Supply Chain

The construction of information security system of supply chain can effectively ensure the information security of supply chain enterprises. The construction method based on ISO 27000 and ISO 28000 can establish the better information security system of supply chain. The construction process includes the definition of environment, the establishment of information security policy, the risk identification, risk assessment and risk management. In the construction process of information security system, should pay attention to some problems caused by the characteristics of the supply chain.