| Since the 21 st century,the banking industry has been keenly grasping the "time" and "momentum" of the information age,and with the technological innovation of information technology,commercial banks have provided more high-quality and convenient financial services.As a large joint-stock bank,the informationization process of X Bank has been gradually improved.In recent years,with the advancement of informationization process,it has opened up new channels for business development on the one hand,and brought new challenges to the organization’s information security work on the other hand,so it is important to take effective measures to optimize information security management and build a more perfect information security management regulation.This paper combines the current situation of information security management of X Bank and strives to optimize,maintain and consolidate information security management through various methods.Firstly,the concepts of information security and information security management are introduced,and the theories related to information security management ISO27001,COBIT control model and the regulatory content related to information security in the banking industry are sorted out;combined with the actual situation of X Bank,the current situation of information security management of X is analyzed in terms of system management,asset management,emergency management,etc.through literature analysis and interview research.We analyze the problems and causes in the current situation of information security management of X Bank in terms of system management,asset management and emergency management.Then,in the process of information security management optimization,the objectives and principles of information security management optimization were clarified based on information security standards and banking industry regulatory requirements,and optimization plans were proposed in three aspects such as system construction,IOT technology,emergency disposal.Finally,the implementation plan of information security management optimization of X Bank is formulated,as well as the related safeguards.In summary,based on ISO27001 standard,this paper uses interview research analysis method,PDCA model and other related knowledge to optimize the information security management of X bank from three aspects and build a more perfect information security management protocol.The optimization results of X bank’s information security management,in addition to its own information security management level,have reference significance to the information security management practice of other commercial banks. |
