Study Of Information Security Management In The Large State-owned Enterprise Based On Fuzzy Comprehensive Evaluation

With the rapid development of computer technology and network technology, and the continuous progress of the business information, many large state-owned enterprises increasing dependence on information and information technology, information has became a new assets of the enterprise and played a crucial role. How to protect corporate information security as well as to give their assessment of current information security management work, are the problems of all companies need to solve together. Evaluation of the large state-owned enterprise information security management is a dynamic process, it should consider various factors on the basis of building objective and feasible evaluation index system, it also should use scientific evaluation models and methods to get realistic results of the evaluation. Finally, give the corresponding counter-measures and suggestions.This paper bases on the literature research, expert interviews and analysis of the large state-owned enterprise information security management status, from a management perspective to build a evaluation system including the safety management, technology management, risk management, personnel management, and system management as first indicators, and contains a total of16secondary indicators below the first indicators to be specific evaluation. Then, choices of the analytic hierarchy process as a method to determine the index weight and fuzzy comprehensive evaluation method to establish evaluation model. Though the actual data obtained of case studies, gets the result of the evaluation. At last, gives companies need to further strengthen attention in technology innovation, risk assessment, staff security awareness training, and security system management.This paper has built evaluation index system is from the management thinking, the evaluation index includes not only the technical indicators, but also considers the factors of corporate management. Although information security management of enterprise includes a lot of fuzzy information, and some of them are difficult to determine, the paper finds a good way to solve these data as qualitative process, provides a scientific basis for the evaluation of information security management of large state-owned enterprises.