The invention relates to the technical field of
computer network security, in particular to a
computer network information security management method and
system, which comprises the following steps: S1,
risk assessment, S2,
security policy making, S3, security protection measure implementation, S4, management measure implementation, S5, security training and propaganda, S6,
emergency response, and S7, accident handling and asset identification: comprehensively
carding network assets in an enterprise or an organization, comprise hardware equipment,
software systems, network services, data and the like, and the importance and value are determined. According to the
computer network information security management method and
system, through an
information security management method, such as a data
encryption technology, the data can be converted into a
ciphertext form for storage and transmission, and only an authorized officer with a correct key can decrypt and restore the data into
original data; therefore, abnormal user access behaviors and potential security holes can be found in time, a basis is provided for improving security measures, and the situation that a
database is stolen or leaked in the
data transmission process is effectively prevented.