IT Business security risk management evaluation system and implementation method of control IT consignment operation partners

摘要

The present invention relates to a system and method for managing and evaluating the business security risks of control IT consignment operation partners. Specifically, the business activities of outsourced operation partners are scored in order to respond to the threat of business security of internal and external business partners and based on this, in a system that provides a service that indexes, ranks, and manages the business security threat response capability of business partners according to the standards set by the manager, An access management module to allow the input and use of business activities of consigned operation partners, a plan management module to evaluate the administrative threat response level, a service management module to evaluate the technical threat response level, and a level management module to evaluate the physical threat response level , It includes a sanctions management module that evaluates and manages the overall threat response level and threat level of the consigned operation partner based on the score calculated in each threat response module, and a dashboard module that can statistically and visualize this.