查詢結果分析
來源資料
頁籤選單縮合
題名 | 企業之資訊安全策略與其產業別及資訊化程度關係探討=Information Security Strategy to Businesses in Different Sectors and Computerization Levels |
---|---|
作者 | 葉桂珍; 張榮庭; | 書刊名 | 資訊管理學報 |
卷期 | 13:2 民95.04 |
頁次 | 頁113-143 |
分類號 | 312.76 |
關鍵詞 | 資訊安全; 資訊風險; 資訊安全策略; 資訊化程度; Information security; Information risk; Information security strategy; Level of computerization; |
語文 | 中文(Chinese) |
中文摘要 | 資訊系統的複雜化雖然為企業帶來可觀的效益,同時也帶來風險。有鑑於此,許多學者紛紛提出維護企業資訊安全的方法及相對因應策略(如Rainer et al.1991; Straub & Welke 1998; von Solms et al. 1994; Ølnes 1994)。這些理論與方法雖然提供企業不少資訊安全解決之道,但多數未考慮企業自身屬性,如產業別或資訊化程度等,在擬定資訊安全策略上之重要性。然而,針對企業屬性通當地制定經營策略,是企業經營上不可避免的要點。本研究目的即在探討不同產業型態及資訊化程度之企業對資訊風險的看法,包括資訊風險對目前及未來產業之可能威脅,以及這些產業所採取之相對防護策略與措施等,以暸解台灣不同產業間在擬定資訊安全策略上之適當性。 |
英文摘要 | As businesses become increasingly dependent on information systems for strategic operations, the issues of information security emerge. Many MIS researchers (e.g., Rainer et al. 1991; Straub & Welke 1998; Von Solms et al. 1994; and Ølnes 1994) have proposed theories and practices against information risks. While useful solutions were provided, seldom have considered associations of business information security strategy with the industrial sector and the computerization level. The purpose of this paper is to construct the feasible information security strategy that identify the protections required to avoid the information risks. Through comparing the perceived seriousness of the potential information risks with the degree of preparation against them, and with the perceived trend of information risk in the future, main information risks are inferred for businesses in different sectors and computerization levels. Organizations must become aware of these critical areas and ensure that the appropriate security measures are implemented to reduce the possibility of loss. |
本系統之摘要資訊系依該期刊論文摘要之資訊為主。