The Research of the layering Method of Risk Analysis of Corporate Information Systems

摘要

The risk analysis is an important tool of risk evaluation of information system. Rational and exact risk analysis method is the key if evaluating task can carry out successfully. At present, it is widely adopted that the analysis method of invalidation mode, such as aftereffect and severity, the analysis of invalidation tree of event, and based on creditability, on topology method and so on. They are aiming at some special object. A layering method of risk analysis of corporate information systems introduced. The method bases on the corporate operation mode and layering analysis of every information processing tache of an operational flow, and adopts an entirely different mode constructing from the method of event tree. The application analysis of an example proves that a great deal of computation minished without effect of precision, and can be easily applied to large productive corporate information system.