Information security evaluation and service cloud platform

Abstract

The invention discloses an information security evaluation and service cloud platform, and belongs to the technical field of information safety. The information security evaluation and service cloud platform comprises a cloud platform, a server and a control side. The server is in acting connection with the control side. The cloud platform is in acting connection with an operation security unit, a network information security unit, a database security unit, a financial management security unit, a marketing system security unit, a production management security unit, a bidding security unit and a human resource security unit. A statistical analysis unit is arranged on the cloud platform. A display unit is arranged on the statistical analysis unit. The statistical analysis unit and the display unit are jointly connected with the server. The control side and the security units form feedback connection through the server. Measurement is performed on information system security risk through multiple dimensions, the accuracy and credibility threating judgment are improved, meanwhile, the core problem of information system risk quantification is solved, a user can more conveniently and objectively know information system operation risk conditions, and the information system security risk can be sensed.

Description

technical field [0001] The invention belongs to the technical field of information security, and relates to an information security evaluation and service cloud platform. Background technique [0002] With the rapid development of IT technology, the development of the entire national economy is inseparable from the operation and support of information systems. How to ensure the safe operation of these information systems has become a top priority; according to the requirements of the "2006-2020 National Informatization Development Strategy", Comprehensively strengthening the construction of the national information security guarantee system requires all organizations to adhere to active defense and comprehensive prevention, explore and grasp the inherent laws of informatization and information security, and actively respond to information security challenges. [0003] In order to realize the initiative of information security, the key is to solve how to evaluate the informat...

AI Technical Summary

Problems solved by technology

[0005] The existing risk evaluation system has major flaws and deficiencies. Its evaluation indicators either rely on a single factor or are too complex to reflect the real risk situation. In addition, the current evaluation system often only focuses on risk threats, vulnerabilities and assets. value, but often overlooks the very important link of remedial measures, which is actually an important factor in risk control

Images