【摘要】 在组织内部,信息安全管理度量为组织的安全管理状态提供了一个客观、全面的指标。文中提到的度量技术是一种基于情况评估的技术并可以模拟组织的环境。现进一步具体分析了对情况和商业目标的评估。更多还原

【Abstract】 ISMM(Information security management metrics) in an organization provides an objective and comprehensive indicator for the state of organization’s security management.Metrics techniques mentioned in this paper are based on assessment of scenario and allow modeling the organization’s context.The paper analyzes assessment of scenario and business objects in a detailed manner.更多还原