A Study On Information Security Management System For A Telecom Operation Enterprise Network

As development of society, information has become more and more important. Problems like the following are frequently encountered during the implementation of information security policies: How to employ effective strategies to improve information security technologies and management? Based on what model the information security technologies are integrated with information security management?In this thesis, we studied the status of one domestic large-scale telecom operator, examined its information security policies and strategy, running risks, and proposed betterment policies based on information area theory. Furthermore, we established an applicable model for information security management founded on the improved policies for information security which we proposed. The tools used in analysis in this study are the world-widely prevalent criteria of information security and relative theories. We introduced the results after application of the improved policies and management model for information security. In the end, both the policies and model we proposed have been adopted by the telecom operator which we investigated and have achieved expected effect.The author took part in planning of the information collection, analysis of status quo and betterment policies, establishing information security management system in this project. The mostly assume the work of taking networks into layers and area, and analyzing of the security policy by using the security area theory.