《InformationSecurityAwareness资讯安全认知》由会员分享,可在线阅读,更多相关《InformationSecurityAwareness资讯安全认知(12页珍藏版)》请在金锄头文库上搜索。
1、1Information Security Awareness資訊安全認知資訊安全認知锁镍卿挥旷男次跑蝗孪臼爪郴穿否惑拴滨励洋拧奔印匹钢聘腻礁炙揖瘸揭Information Security Awareness资讯安全认知Information Security Awareness资讯安全认知22Elicitation of Research TopicsInformation SecurityAwarenessNational InformationSecurity ProjectING InformationSecurity Project容孝凛噶谱致类锭挺盂唬菌挽整惨豪恃矢芬日酱所牺押魂
2、窃间关或很坦护Information Security Awareness资讯安全认知Information Security Awareness资讯安全认知33Information Security PlatformInformation Technology, Learning, and Performance Journal 价唆镑映晾花厩疯诌驶斟谤花志糊舀哲僧畸好悠滁怜跪搜摔渠匙如洒兆仗Information Security Awareness资讯安全认知Information Security Awareness资讯安全认知44ProblemsWhy ING needs the
3、information security platform ?What are the differences between e-learning and information security platform ?贸典膝漫拷吭丧铆血涉柬鸣纽旁玖揽萝酶把齿册苫仍终和仇粘哆舜蜂镊丧Information Security Awareness资讯安全认知Information Security Awareness资讯安全认知55Systems Development inInformation Systems ResearchJAY F. NUNAMAKER, JR., MINDER CHEN
4、, and TITUS D. M. PURDINJournal of Management Information Systems I Winter 1990-91, Vol. 7, No, 3, pp. 89-106.缨除欧悼剥僳反浸待惑鹤抗蔑齐矫淡弊烙蔓阿界漾挠梦也妊砷辖祟你死宗Information Security Awareness资讯安全认知Information Security Awareness资讯安全认知66The Integrated Framework of Information Security AwarenessInformation Security Aware
5、ness PlatformEvaluation of OrganizationalInformation Security Awareness Materials and Methods for Information Security Awareness艺瀑徐怒赘乓蜕矽晶园哇煤蝎衍录舰尾躇煮帅饰琶构殴仓沮李臃步锈瞩酸Information Security Awareness资讯安全认知Information Security Awareness资讯安全认知77Situation Awareness 決策行為成效情 境 認 知 未來預測 Level 3 現況了解 Level 2元素知覺Lev
6、el 1系統功能介面設計壓力/工作負荷複雜度自動化目標預期環境狀況 能力 經驗 訓練個人因素作業或系統 因素 長期記憶自動性資訊處理機制Endsley, M.R. and Garland D.J (Eds.) (2000)Situation Awareness Analysis and Measurement. Mahwah , NJ:Lawrence Erlbaum Associates, 昭握巾滋狂暮抄痹谱启珍腮或舆昌寸旭铃凝崭球冈价恩汗的诫偷皂禾站廊Information Security Awareness资讯安全认知Information Security Awareness资讯安全
7、认知88Research DesignWhat is your opinion?丸露探敝煽绩磨蛇帖宽彦愧创嗅掏己岭姓而耕钢汀眠恬焚嘻再牵剿聪寐冶Information Security Awareness资讯安全认知Information Security Awareness资讯安全认知99The Evaluation Form of Information Security Awareness PART I: Laws and Regulations1.1 Laws and Regulations 1.1.1 I understand the meaning of the basic pol
8、icy structure for IT security in the Federal government in the concept of Laws and Regulations.1.2 Policies and Procedures1.2.1 I understand the meaning of IT security safeguards are intended to achieve specific control objectives in the concept of Policies and Procedures.1.2.2 I understand the mean
9、ing of procedures define the technical and procedural safeguards that have been implemented to enforce the specified policies in the concept of Policies and Procedures.挨摄恭年蜕呛着攀名默搪攫戈糕绣抿陶八薄全滁肝敖摈者把焰螺赎锰鸯郑Information Security Awareness资讯安全认知Information Security Awareness资讯安全认知1010NIST SP800-16ABCs OF INF
10、ORMATION TECHNOLOGY SECURITYAAssets Something of value requiring protection (hardware, software, data, reputation)BBackup The three most important safeguards backup, backup, backupCCountermeasures and Controls Prevent, detect, and recover from security incidentsDDAA and Other Officials Manage and ac
11、cept risk and authorize the system to operateEEthics The body of rules that governs an individuals behavior.FFirewalls and Separation of Duties Minimize the potential for “incident encroachment”GGoals Confidentiality, Integrity, and Availability (CIA)皱粕括牢九版刁仰徒萎厅褒陈瞎漠夯俺呕挖酿貉端体秒肿淘鳖积套渐集值Information Secur
12、ity Awareness资讯安全认知Information Security Awareness资讯安全认知1111Research DesignWhat is your opinion?垫旺驹懂哮映姓好引践冷翰釉瓢惶奴气近霸疗雷为摘栋见房眩锨糜察座铱Information Security Awareness资讯安全认知Information Security Awareness资讯安全认知1212ConclusionResearch topics elicited from projects.Extended to a integrated framework.Referred to other research fields.Be skillful at research methodologies.筷审辜揪捧酿之弘壳揖欢阂调猛密廊躺摊录闸球嚣您晾还磷翟悲默徒絮氧Information Security Awareness资讯安全认知Information Security Awareness资讯安全认知