An Information Security Risk Assessment Model for Computer Facilities in Bank

• Main Authors: YOU-CHENG CHANG, 張祐誠
• Other Authors: Tony Chiu
• Format: Others
• Language: zh-TW
• Published: 2013
• Online Access: http://ndltd.ncl.edu.tw/handle/21610995323570653988

碩士 === 世新大學 === 資訊管理學研究所(含碩專班) === 101 === With the rise of consumer awareness and the capability of enhancing the use of information, a stable and reliable system is a major key point for financial institutions to improve their competitive advantage and customer satisfaction. Because of information technology, various operations must rely on IT equipment. The way in which to prevent equipment failure in order to reduce the risk of business operations is indeed one of the operation topics for the existing businesses. However, information security incidents continue to occur in recent years. Following a set of information security management system with good standard will be an important factor for the financial institutions to implement information security. This study collected the related literature on information risks and was based on 133 controlled measures of ISO 27001 to get nine aspect factors and 56 critical success factors. This study also used reliability analysis and questionnaires for the case company to obtain 7 information security risk factors. First, propose a comprehensive information security policy. Second, the work processes and safety regulations for staff and a comprehensive educational training. Third, a check of the equipment for the information engine room. Fourth, both PC and the operating system must be protected by an impeccable defense mechanism. Fifth, the control management for the permissions must be planned completely. Sixth, the data backup mechanism and the specifications for confidential data masking operations. Last, the backup system and the procedures for emergency treatment. This thesis built an applicable evaluation model of security risks and hopes to propose risk assessment considerations for information engine rooms in financial institutions in the future.