期刊名称：Annals of the University of Oradea : Economic Science
印刷版ISSN：1222-569X
电子版ISSN：1582-5450
出版年度：2005
卷号：XIV
页码：785-789
出版社：University of Oradea
摘要：A security policy framework is necessary to support the security infrastructure
required for the secure movement of sensitive information across and within national boundaries. To
ensure the secure operation of this kind of infrastructure, it is necessary to have some well-founded
practice for the identification of security risks (as well as the application of appropriate controls to
manage risks). To be truly beneficial, the risk analysis framework must be granular enough to
produce a customisable roadmap of which problems exist, and to rank them in order of severity,
which facilitates making decisions about which ones to deal with first.
