A Case Study on Risk Management of Enterprise Information Security

Based on a case for constructing information security system in an inorganic materials manufacturing enterprise, this paper discusses the concepts of information security, information security management and information security risk management. The framework of information security system and the construction procedure of information security risk management system are introduced. In the work process of risk appraising, all risk factors are sorted by using comparison matrix. So, the risk handling scheme is designed to implement in two stages according to the order of priority. The practice has proved that it is necessary to take active and effective measures in risk recognizing and risk controlling. Only in this way enterprise can effectively reduce the risk probability, or decrease the loss once risk occurs.