Research And Practice On Information Security Management System For E-Government

With fast development of information construction in governments, information security is becoming more and more important, while the government is facing lots of security problems in its businesses. However, in a long time, people often pay more attention to technology while ignoring management in the establishment of E-government. Applications of technical methods have solved security problems in some extent. But research and practice both show that security incidents cannot be avoided even if good enough security technologies are applied. "30% technology, 70% management", information security is a comprehensive protection system, not a technical one. The capacity only upon technical control is limited, which must be supported by proper security management system. Technology and management can help each other. We must emphasize on both management and technology in information security protection, so as to safeguard security and achieve security targets.In this paper, we start from government's requirements on E-government construction, introduce the characters of E-government information security, especially correlated with our nation's security classification protection for information system, and bring out a practicable implementation process for information security management system on the basis of international system standard and best practices, providing positive guidance and reference for government who plans to establish information security management system.The implementation process mentioned in this paper has been used in 6 experimental government units and adopted by the "Guideline of ISMS for E-government in Beijing", forming a technical guideline already, aiming at guide and regulate the implementation of E-government information security management system in Beijing.