The Risk Assessment And Security Control For E-government Network

With the computer technology and communication technology as the core in the new century, the science and technology of modern communication and information marked by the network is making progress at a very fast speed, and the human society is striding into the information age at an unprecedented rate. As an important part of global information, the E-government plays an increasingly role in the improvement of the government efficiency, the expanding of democratic participation, and the strengthening of administrative efficiency. Making effective use of information technology and building effective and efficient E-government have become effective means of transforming the government functions in the world, increasing information disclosure, promoting governments cooperation, strengthening the public service and promoting social and economic development. However, the E-government system meets with a series of security problems. The E-government systems are a large and complex project, with a wide range, high confidentiality requirements, and big difficulty. There is a lot of equipment, personnel, information and other resources in the system need to be protected by security measures. Therefore, the security of E-government system is not only a technical issue, but also an information management problem.In this paper, by studying the risk assessment methods of E-government, risk problems may encounter are clearly analyzed and completely considered in the stage of designing, and corresponding security measures are taken in the stage of construction and maintenance. By analysis of the previous E-government network security incidents, the author found that even in developed countries where a very good E-government network security technology exists, most of accidents occurred due to human factors. Through the comparative analysis, especially compared with other E-government network security assessment, the risk assessment methodology of OCTAVE is put forward to apply to the risk assessment. The practical application also shows that the program are proved with characteristics of strong maneuverability and high pertinence because of the project evaluation and analysis measurement of "top down"- from the person to the substance in the organization. The implementation of Laos E-government network project has proved that there are establishment requirements for the third World and other less developed regions and they have some guidance for other E-government risk assessment projects.Different methods of risk analysis based on different requirements and characteristics of the project have a strong characteristic of application. According to the characteristics of each project, the rational measurement is required to analyze the different kinds of possible risks, to determine the reasonable security control measures, and to establish the effective security system. Making the project more safe and moer useful, which are the most important aspect of the E-government.