基于TOGAF、ArchiMate、IAF和DoDAF的信息系统安全风险管理与企业架构管理集成概念模型
An Integrated Conceptual Model for Information System Security Risk Management and Enterprise Architecture Management based on TOGAF, ArchiMate, IAF and DoDAF
摘要：
风险管理是当今任何希望处理信息系统（IS）安全的组织的主要指导工具。然而，信息系统安全风险管理（ISSRM）仍然很难建立和维护，主要是在复杂和相互关联的信息系统的多法规的背景下。我们声称，与企业架构管理（EAM）的连接有助于处理这些问题。更好地集成这两个领域的第一步是定义一个集成的EAM-ISSRM概念模型。在定义这样一个集成的EAM-ISSRM概念所遵循的研究方法的步骤中，本技术报告提出了用于建模EA（基于ArchiMate，TOGAF，IAF和Docker）的概念与ISSRM领域模型的概念之间的概念对齐的整个输出（通过对齐表）。
英文摘要：
Risk management is today a major steering tool for any organization wanting to deal with Information System (IS) security. However, IS Security Risk Management (ISSRM) remains difficult to establish and maintain, mainly in a context of multi-regulations with complex and inter-connected IS. We claim that a connection with Enterprise Architecture Management (EAM) contributes to deal with these issues. A first step towards a better integration of both domains is to define an integrated EAM-ISSRM conceptual model. Among the steps of the research method followed to define such an integrated EAM-ISSRM conceptual, this technical report presents the whole outputs (through alignment tables) of the conceptual alignment between concepts used to model EA (based on ArchiMate, TOGAF, IAF and DoDAF) and concepts of the ISSRM domain model.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
