摘要
针对外包信息系统脆弱性评价问题,从技术脆弱性和管理脆弱性两个方面提出了信息系统脆弱评价指标体系。在此基础上,给出外包信息系统脆弱性评价流程,构建基于技术脆弱性和管理脆弱性的二维评价矩阵模型。最后通过一个制造企业的电子商务外包案例说明该评价模型的科学性和有效性。
Outsourcing information systems vulnerability evaluation is an important issue in the outsourcing decision process.The paper develops an assessment index system for outsourcing information systems vulnerability from the perspective of technology and management.On this basis,a framework for outsourcing information systems vulnerability evaluation is presented,and a two-dimension matrix evaluation model is developed.A case study on a manufacture factory＇s e-commerce outsourcing is given to illustrate the availability of the proposed model.
出处
《管理评论》
CSSCI
北大核心
2011年第6期76-80,共5页
Management Review
基金
国家自然科学基金项目(70902033)
国家自然科学基金重大项目(7089008070890083)
关键词
信息系统外包
信息安全
脆弱性
评价矩阵
IT outsourcing
information security
vulnerability
evaluation matrix
