Research on risk management and control system for information security K-PRS-ISMCS based on knowledge management

In this paper, according to the characteristics of organization's Information Systems (IS), knowledge resources related to IS are classified into three parts. Based on knowledge management of the three perspectives -Process Controlling, Resources Protecting and Realization of Security Objectives for IS, elements of information security risk and their relationships are analyzed, and then the three-dimensional model of security risk management and control system K-PRS-ISMCS is built; lastly the improved management and control framework K-PRS-PDCA based on perspectives of organizations' management and life cycle of Information Systems is set up.