Research on security management and control system of information system in IT governance

In this paper, elements of security risks and their relationships in information systems are analyzed, and the three dimensional model of security management and control system ITG-PRS-ISMCS and the improved management process ITG PRS-PDCA of information systems based on risk control are built from such views as process controlling, resource protecting, and realization of security objectives according to the characteristics of information system in IT governance.