The Research On Information System Emergency Resource Allocation And Sharing Mechanism Which Based On Risk Assessment

Informatization coordination construction has become the trends in the multi-level enterprise information architecture construction and planning process. In the same time, it presents a challenge on the traditional emergency management model. Single company could no longer secure the safety of information system and stability operation, and solve the issues independently; it needs the cooperation and sharing responsibility between all companies. The author of the thesis is based on the actual working situation in The Second Academy of China Aerospace Science and Industry Cooperation, proposed a set of risk calculation method which contrary to the multi-architecture information system. To guide the resource allocation based on the risk calculation results and discussed the emergency resource scheduling management model which based on the resource sharing mechanism. The accomplished work of the author as follows:(1) Risk evaluation for multi-architecture information system. Firstly, ensure the contents of risk evaluation:asset classification, asset assignment, asset value calculation, threat identification, threat assignment, vulnerability identification, vulnerability assignment, risk measurement, assessment resulting, recommended safety measurement, residual risk assessment, etc. Secondly, contrary to the actual situation of information system, collect the information such as asset information, threat information and vulnerability information through the questionnaire method. Divide the asset, threat and vulnerability through the information statistic and analyze, and then raise the principle for emergency classification. Reverse the conclusion to design the asset value and risk calculation formula which based on the matrix method. Finally, formulate relevant configuration standard for different levels of emergency event.(2) Emergency resource scheduling management based on resource sharing. Firstly, based on the risk calculation results, analyze the current issues which consist with emergency response organization architecture and management structure. Obtained conclusions which related with emergency resource sharing mechanisms and realize the construction of emergency resource sharing mechanisms should be defined by company properties which consist with centralization and decentralization research method. Then, through the four aspects:the construction of resource sharing mechanism, control and coordination of resource sharing, cultural advocacy of resource sharing, construction of incentive mechanism and construction of internal resource sharing platform. To investigate the mechanisms of emergency resource sharing, propose the emergency resource sharing mechanism should be made through interaction between outer and inner motivation. Neither could not ignore the organizational structure optimization, cultural advocacy, and the subjective promote, guide and support of resource sharing which based on technology platform, nor ignore the development of "demand traction" which produced by company actual requirements. Explicitly the academy level should play the role of coordinating and guidance and control during operation in the resource-sharing mechanism process.(3) Application achievement。On the one hand, declare and implement the supportive of technological transformation which based on the evaluation results of multi-architecture information system:risk calculation methods and classification principles. Developed a comprehensive risk analysis and evaluation system, provide a uniform security risk description and analyzing method for Second Academy. Provide a convenient method for each companies to self-assessment the classified information systems with standard and it has significant improve the efficiency and effectiveness of risk evaluation process. On the other hand, based on the research of Emergency resource scheduling mechanism, some mature research results has been applied to optimize the current emergency response management institutions and regulations. In the same time, it has selected two companies to conduct a comprehensive pilot application.In the last part of the thesis, to summarize the above work and look forward to the future, through this study, Second Academy had developed a set of the multi-architecture risk assessment system that is suitable for their own characteristics, and also established a set of information system that is suitable for all the major hospitals’assets and threat and vulnerability identification and valuation standard; therefore, unified the hierarchy principle of the emergency of the whole information system. Through the collection, carding and analysis of historical data, confirmed the risk calculation method based on matrix method principle, developed a set of principles of emergency resource allocation. Solidify the management requirement through informatization measures. To explore the emergency resource management mode based on resource sharing, then optimized the current emergency response management mechanism and the system. Through the verification by practical application, which greatly improved the efficiency of the risk assessment work, received the good application effect, achieved the expected goal.