T公司信息系统的灾难恢复规划

【作者】 张杰；

【导师】 张成洪；

【作者基本信息】 复旦大学 ， 工商管理， 2009， 硕士

【摘要】 随着信息化程度的增强,信息系统灾难带来的损失日益增大。减少信息系统灾难对社会的危害和人民财产带来的损失,保证信息系统所支持的的关键业务能在灾害发生后及时恢复并继续运作成为信息安全领域的重要研究方向。本文的研究针对某国际物流企业T公司信息系统灾难恢复规划及实施的具体问题,以信息系统灾难恢复规划方法论体系为理论基础,对信息系统灾难恢复规划进行了深入的研究和分析。在对T公司可能遭受的灾难恢复类型和风险的充分调研的基础上,结合业务部门对信息系统灾难恢复的合理期望,并考虑到T公司现有的灾难恢复能力及成本一效益原则及技术适应性等各方面因素,对T公司的灾难恢复规划进行了方案设计,提出了包括灾备中心选址,建设模式,数据恢复,网络恢复和应用系统恢复等各方面在内的T公司灾难恢复策略;基于训练有素的人员与合理完善的恢复流程在灾难恢复计划中的重要地位,本文在人员组织和管理程序方面也进行了必要的规划和流程设计,设计了演习的流程来进行人员培训和验证灾难恢复计划的有效性并持续改进。本文在研究过程中,进行了细致的前期调查,收集了必要的信息,采用理论学习和工作实践紧密结合的方法,对信息系统灾难恢复相关问题进行了研究,所设计的规划方案已具体实施并获得国外总部审计通过及高度评价。更多还原

【Abstract】 Along with the computer technology development and the popularization, m any business units and the management structure have all established own management information system. In the information system development design process, the security performance is always put on the most important position, becomes the information system survival the key. Constructs the enterprise level information system the security system oneself becomes an important research area day by day.This paper aimed at the special issues of information systems disaster recovery planning for T Company, one of logistics enterprises. With the information systems disaster recovery planning methodology system as the theoretical basis, the in-depth research and analysis of the information systems disaster recovery planning is developed. In the company may be subject to the type of disaster recovery and risk on the basis of the full survey, combined with business information systems disaster recovery of the reasonable expectations, and taking into account the existing disaster recovery capabilities and cost - effectiveness of principles and technical adaptability, various factors, for disaster recovery planning work program designed to put forward, including disaster recovery data center location, construction mode, data recovery, network recovery and application recovery, including all aspects of disaster recovery strategies; based on well-trained staff sound and rational process in a disaster recovery plan to restore the important position of this paper, organizational and management procedures in personnel also carry out the necessary planning and process design, design process to carry out the exercise training and validation of the effectiveness of disaster recovery plan and continuous improvement.In this paper, the research process carried out detailed preliminary survey to collect the necessary information, use of theoretical study and practical work in close connection with the methods. The information systems disaster recovery-related issues have been studied, the design of programs and exercises processes have been implemented and recognized by professional risk management auditor of global headquarters.更多还原