Risk, Security, Safety, Resilience & Management Sciences的动态

"This guide is designed to promote senior executives' awareness of information #security issues and to provide information they can use to establish a management framework for more effective information security programs. Most senior federal executives, like many of their private sector counterparts, are just beginning to recognize the significance of these risks and to fully appreciate the importance of protecting their information resources. The opening segments describe the problem of weak information security at federal agencies, identify existing federal guidance, and describe the issue of information #securitymanagement in the context of other information technology management issues. The remainder of the guide describes 16 practices, organized under five management principles, that GAO identified during a study of nonfederal organizations with reputations for having good information security programs. Each of these practices contains specific examples of the techniques used by these organizations to increase their security program's effectiveness.?"

要查看或添加评论,请登录