Sy Corporation Financial Management System Of Information Security Research

Funds are the blood for enterprise running and development, and the fund management is the core function of the financial management in the enterprises. It is a critical task for large-scale enterprise groups in China to establish positive interactions between enterprises and financial capital. To deploy an new information technology system to manage the enterprise's fund can help enterprise groups to effectively manage their funds,and to achieve their integration advantage of whole enterprise groups. In a large-scale enterprise group, the fund management information system is an important business system with a lot of security risks, therefore the information security of the system play a vital role in its security risks management.In this paper, the author studies the fund management system in SY Group,and designs an information security architecture for it. As a system method, we first analysis risks around the system, give a profile of the system security risks relative with fund management and business processes possible security threats. Based of the security risk profile,and according to domestic and international information security-related technical standards and information security models, and under the guidance of information security assurance theories, the security architecture for the fund management system in SY Group, consisted of security technical and management subsystems,.In accordance with the overall security architecture for the fund management system in SY Group, the author designs a scheme to build up the security solution for the system. The solution focus on the business security as its main subject , based on the results of security threat analysis, in the scheme, we develop the policies for system security management, security technology, security operation and maintenance, through analyzing business security and IT system security requirement closely around the requirements for the confidentiality, integrity, and availability of business operations and business information processed by the system. The scheme also proposes appropriate technical solutions on several aspects such as network security, application security, system security, and security management. The security architecture for the fund management system in SY Group discussed in this paper is sound effectiveness feasible. It not only meets the security assurance objects and future development requirements of the systems, but also have industrial characteristics with its common model, and have a good reference value for the security solution for other information systems.