摘要： 对烟草行业信息安全需求进行了分析,并对如何构筑省一级的行业信息安全防护体系从设计思路、目标方法和方案设计方面进行了一定的思考,提出了烟草行业网络与信息安全建设的目标、方法、技术、管理和服务等几大体系的建设思路。

关键词: 安全策略, 安全审核, 风险评估, 标准与规范, 安全管理, BS7799

Abstract: Based on analysis of information and security requirements of tobacco industry, this paper gives some thoughts on designing guidelines, objectives, approaches and solution offerings on the issues of how to construct the information security safeguard system on the province level. It also addresses some construction insights on objectives, methodology, technology, management and service of the network and information security establishment of tobacco industry.

中图分类号: 

• TP393.08