Developing the Critical Success Factors of Petrochemical Industry for implementing BS7799 Information Security Management

碩士 === 國立中正大學 === 資訊管理學系 === 91 === For the prosperity of electronic commerce, maintaining information security in order to protect information assets is a key concern for most enterprise today. BS7799, a comprehensive plan for implementing effective Internet security, lead approach to best practice...

Full description

Bibliographic Details
Main Authors: Keng-Hung Su, 蘇耿弘
Other Authors: Jack, S.M. Huang
Format: Others
Language:zh-TW
Published: 2003
Online Access:http://ndltd.ncl.edu.tw/handle/53049728286783138802
Description
Summary:碩士 === 國立中正大學 === 資訊管理學系 === 91 === For the prosperity of electronic commerce, maintaining information security in order to protect information assets is a key concern for most enterprise today. BS7799, a comprehensive plan for implementing effective Internet security, lead approach to best practices for information security management, which first published by British Standards Institute (BSI) in 1995. By gaining BS7799 certification, the company will assure customers and partners that their data, kept on enterprise networks, is secure and that the overall security of the enterprise is trustworthy. Petrochemical manufacture is the main business in Taiwan Industry. Many petrochemical companies try to minimize the cost and better their gross profit margin by building e-commerce and applying vendors'''''''' supply chain management technology. Using the network, control interfere and data acquisition system to monitor and control the production and marketing supply is an effective and efficient way, however, it takes risk by the information security. Not only for it own profits but also for the society safety, it’s very important for a petrochemical company to develop an information security management system. The purposes of this study are as below: (1) to find out the differences of the information security systems between petrochemical companies in Taiwan and in which status they have had. The results can be provided to the government, the information technology companies and the Universities that can promote the mechanism of establishing the information security management. (2) to determine the critical success factors of the implement of information security management. It could help the petrochemical industry in Taiwan reach the international certification standard of the information security quickly and effectively.