Information Security Awareness资讯安全认知

《Information Security Awareness资讯安全认知》由会员分享，可在线阅读，更多相关《Information Security Awareness资讯安全认知（12页珍藏版）》请在装配图网上搜索。

1、1Information Security Awareness資訊安全認知資訊安全認知22Elicitation of Research TopicsInformation SecurityAwarenessNational InformationSecurity ProjectING InformationSecurity Project33Information Security PlatformInformation Technology,Learning,and Performance Journal 44Problems Why ING needs the information s

2、ecurity platform?What are the differences between e-learning and information security platform?55Systems Development inInformation Systems ResearchJAY F.NUNAMAKER,JR.,MINDER CHEN,and TITUS D.M.PURDINJournal of Management Information Systems I Winter 1990-91,Vol.7,No,3,pp.89-106.66The Integrated Fram

3、ework of Information Security AwarenessInformation Security Awareness PlatformEvaluation of OrganizationalInformation Security Awareness Materials and Methods for Information Security Awareness77Situation Awareness 決策行為成效情 境 認 知 未來預測 Level 3 現況了解 Level 2元素知覺Level 1系統功能介面設計壓力/工作負荷複雜度自動化目標預期環境狀況 能力 經驗

4、 訓練個人因素作業或系統 因素 長期記憶自動性資訊處理機制Endsley,M.R.and Garland D.J(Eds.)(2000)Situation Awareness Analysis and Measurement.Mahwah,NJ：Lawrence Erlbaum Associates,88Research DesignWhat is your opinion?99The Evaluation Form of Information Security Awareness PART I:Laws and Regulations1.1 Laws and Regulations 1.1

5、.1 I understand the meaning of the basic policy structure for IT security in the Federal government in the concept of Laws and Regulations.1.2 Policies and Procedures1.2.1 I understand the meaning of IT security safeguards are intended to achieve specific control objectives in the concept of Policie

6、s and Procedures.1.2.2 I understand the meaning of procedures define the technical and procedural safeguards that have been implemented to enforce the specified policies in the concept of Policies and Procedures.1010NIST SP800-16ABCs OF INFORMATION TECHNOLOGY SECURITYAAssets Something of value requi

7、ring protection(hardware,software,data,reputation)BBackup The three most important safeguards backup,backup,backupCCountermeasures and Controls Prevent,detect,and recover from security incidentsDDAA and Other Officials Manage and accept risk and authorize the system to operateEEthics The body of rul

8、es that governs an individuals behavior.FFirewalls and Separation of Duties Minimize the potential for“incident encroachment”GGoals Confidentiality,Integrity,and Availability(CIA)1111Research DesignWhat is your opinion?1212Conclusion Research topics elicited from projects.Extended to a integrated framework.Referred to other research fields.Be skillful at research methodologies.