| 词条 | EBIOS |
| 释义 |
EBIOS (Expression des Besoins et Identification des Objectifs de Sécurité - Expression of Needs and Identification of Security Objectives) is a method for analysis, evaluation and action on risks relating to information systems. It generates a security policy adapted to the needs of an organization. The method was created in 1995 and is now maintained by the ANSSI, a department of the French Prime Minister. The five steps of the EBIOS method are:
EBIOS is primarily intended for governmental and commercial organizations working with the Defense Ministry that handle confidential or secret defense classified information. It enables well informed security actions to be undertaken. The objective is to assess and prepare for possible future situations (in the case of a newly created information system), and identify and respond to deficiencies (when the system is operating) in order to refine the security arrangements. In its first version, EBIOS was focused on “security objectives redaction”. Since 2000, DCSSI became aware of improvements in international standards (ISO in particular) and “engaged EBIOS adaptation to this criteria”. It might also be viewed as a way to avoid France’s introspective approach to information security, responding to the limitations of French methods that are not recognized abroad and are unsuited to international markets. However, the method's documentation only appears to be available in French. References
External links
1 : Risk analysis methodologies |
| 随便看 |
|
开放百科全书收录14589846条英语、德语、日语等多语种百科知识，基本涵盖了大多数领域的百科知识，是一部内容自由、开放的电子版国际百科全书。