...
首页> 外文期刊>IEEE security & privacy >Maximizing business information security's educational value
【24h】

Maximizing business information security's educational value

机译:最大化商业信息安全的教育价值

获取原文
获取原文并翻译 | 示例
           

摘要

A business information security course's goals and objectives are quite different from most traditional security courses, which focus on designing and developing new security technologies. Business information security primarily concerns the strategic, tactical, and operational management issues surrounding the planning, analysis, design, implementation, and maintenance of an organization's information security program. Core issues include asset valuation, auditing, business continuity planning, disaster recovery planning, ethics, organizational communication, policy development, project planning, risk management, security awareness education and training, and various legal issues such as liability and regulatory compliance. Because businesses can't afford to mitigate all security risks, students must learn methods to identify and justify the optimal amount of expenditures to ensure that their information assets are sufficiently protected. Students should also understand the technical components of security so they can appreciate the problems experienced by the people they manage. This paper describes my experiences in developing a business information security course that provides students the knowledge arid experience to succeed in today's competitive information-intensive corporate environment.
机译:商业信息安全课程的目的和目标与大多数传统安全课程完全不同,传统课程主要关注设计和开发新的安全技术。业务信息安全主要涉及围绕组织信息安全计划的规划,分析,设计,实施和维护的战略,战术和运营管理问题。核心问题包括资产评估,审计,业务连续性计划,灾难恢复计划,道德,组织沟通,政策制定,项目计划,风险管理,安全意识教育和培训,以及各种法律问题,例如责任和合规性。由于企业负担不起减轻所有安全风险的风险,因此学生必须学习识别和证明最佳支出额的方法,以确保其信息资产得到充分保护。学生还应该了解安全性的技术组成部分,以便他们可以体会到所管理人员遇到的问题。本文介绍了我在开发商业信息安全课程中的经验,该课程为学生提供了知识和经验,以在当今竞争激烈的信息密集型企业环境中取得成功。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号