A study on information security management system evaluation-assets, threat and vulnerability

摘要

The security of information system is like a chain. Its strength is affected by the weakest knot. Since we can achieve 100% Information Security Management System (ISMS) security, we must cautiously fulfill the certification and accreditation of information security. In this paper, we analyzed, studied the evaluation knowledge and skills required for auditing thecertification procedures for the three aspects of ISMS-asset, threat, and vulnerability.