Sinochem Group Information Security Management Research

In recent years,with the trend of informatization construction,the relationship between business and information security is more and more closely,which makes the enterprise become more emphasis on Information Security.Under the background of the country increasing the supervision to information system security,enterprises are proposing scientific and thorough demands of building information security management system,and establishing information security risk management processes which combine technological means with administration measures,to create safe production management environment for enterprises' information system.Investigate the actual situation of enterprise information security and information security management status quo,to understand their risks.Using the comparative analysis method,the paper analyzes the gap between reality information security condition of Sinochem Group and the information security management system.Combining theory and practical condition,compare the enterprise's information security management and information system security management system standards.To build a new construction blueprint for the information security management in enterprises,and put forward suggestions for improvement according to the target of construction,make a overall construction plan information security management.According to the plan,enterprise develop the information security strategy.Establish a set of more perfect information security management system,to ensure the normal production and operation of enterprises.Through the research of this paper,popularize the theory of information security management,and provide a reference case for enterprise information security management system.