鉴于当前国内风险评估的案例还比较欠缺,本文将简单地以一个全面安全风险评估的案例来说明风险评估是如何进行的,以供参考。A公司信息系统包括综合业务系统和电子银行系统,部署了防火墙和IDS入侵检测系统。公司目前连接在集团公司主干网上,并与互联网连接,其目前面临的外部威胁主要来自 Given the current lack of domestic risk assessment cases, this article will simply use a comprehensive security risk assessment case to illustrate how the risk assessment is conducted for reference. A company’s information system includes integrated business systems and electronic banking systems, and deploys firewalls and IDS intrusion detection systems. The company is currently connected to the backbone of the group company and is connected to the Internet. The external threats it currently faces come mainly from