Auto saved by Logseq

pages/总复习2023t1.md

@@ -2280,6 +2280,16 @@
 					- Risk management :-> Risk management as means to justify information
 					  security laws, process of listing the all the relevant factors and
 					  taking steps to control them where possible
+					- Information Security Management
+						- To effectively assess the security needs of an
+						  organization and to evaluate and choose various
+						  security products and policies
+						- Methods:
+							- Categorize information
+							- Identify legal obligations
+							- Assess vulnerabilities, threats and risks
+							- Safeguards
+							- Development of standards
 								-
 	- LATER 概率论 (隔了一个周末)
 	  collapsed:: true