The Whole Process of E-commerce Security Management System: Design and Implementation

Description

​This book systematically and integrally introduces the new security management theories and methods in the e-commerce environment. Based on the perspective of dynamic governance of the whole process, starting from the theoretical framework, this book analyzes the gap between the current situation and requirements of security management, defines its nature, function, object and system, and designs and constructs the whole process security management organization and operation system of e-commerce. It focuses on the core and most prominent risk control links (i.e. security impact factors) in e-commerce security, including e-commerce information and network security risk, e-commerce transaction risk, e-commerce credit risk, e-commerce personnel risk, etc. Then, the tools and methods for identifying and controlling various risks are described in detail, at the same time, management decision-making and coordination are integrated into the risk management. Finally, a closed loop of self-optimization is established by a continuous optimization evolution path of e-commerce security management. Contents 1 Introduction 1.1 E-commerce and E-commerce Security 1.1.1 E-commerce from the Perspective of Security 1.1.2 E-commerce Security and Its Importance 1.2 E-commerce Security Requirements 1.2.1 E-commerce Security Elements 1.2.2 Logical Hierarchy of E-commerce and Its Security Requirements 1.3 Content of E-commerce Security Management 1.3.1 Connotation of E-commerce Security Management 1.3.2 E-commerce Security Management Means Reference 2 E-commerce Security Management Plan 2.1 Basic Concepts 2.2 Elements and Types of E-commerce Security Management Plan 2.2.1 Elements of E-commerce Security Management Plan 2.2.2 Types of E-commerce Security Management Plans 2.3 Preparation and Optimization of E-commerce Security Management Plan 2.3.1 Preparation of E-commerce Security Management Plan 2.3.2 Optimization of E-commerce Security Management Plan 2.4 E-commerce Safety Management Emergency Plan 2.4.1 Overview of E-commerce Security Management Emergency Plan 2.4.2 Formulation of ERP for E-commerce Security Management 2.4.3 Formulation of DRP for E-commerce Security Management 2.4.4 Formulation of BCP for E-commerce Security Management Reference 3 E-commerce Security Management Resources and Organization 3.1 Meaning and Relationship of E-commerce Security Management Resources and Organizations 3.1.1 Meaning of E-commerce Security Management Resources and Organization 3.1.2 Relationship Between E-commerce Security Management Resources and Organization 3.2 E-commerce Security Management Resources 3.2.1 Composition and Limitation of E-commerce Security Management Resources 3.2.2 Configuration of E-commerce Security Management Resources 3.3 E-commerce Security Management Organization 3.3.1 Establishment of E-commerce Security Management Organization 3.3.2 Operation of E-commerce Security Management Organization 3.3.3 Transformation of E-commerce Security Management Organization References 4 Controlling Information Risk in E-commerce 4.1 E-commerce Information Security Risk Management Process, Participants, and Responsibilities 4.1.1 Information Security Risk Management Process 4.1.2 Participants in Information Security Risk Management and Their Responsibilities 4.2 E-commerce Information Security Risk Assessment and Decision-Making 4.2.1 Information Security Risk Assessment 4.2.2 Information Security Risk Disposal Decision 4.3 Implementation of E-commerce Information Security Risk Control 4.3.1 Overview of Risk Control 4.3.2 Technical Measures 4.3.3 Normative Measures References 5 Controlling Network Risk in E-commerce 5.1 E-commerce Network Security Threats and Risk Identification 5.1.1 Security Threats to E-commerce Networks 5.1.2 E-commerce Network Security Risk Identification 5.2 E-commerce Network Security Risk Assessment 5.2.1 Elements of E-commerce Network Security Risk Assessment 5.2.2 E-commerce Network Security Risk Assessment Process 5.3 Implementation of E-commerce Network Security Risk Control 5.3.1 Network Security Model 5.3.2 Technical Measures 5.3.3 Regulatory Measures References 6 Controlling Transaction Risk in E-commerce 6.1 Risk Identification of E-commerce Transactions 6.1.1 Pre-transaction of E-commerce Risks 6.1.2 Risk in E-commerce Transactions 6.1.3 Post-transaction Risk of E-commerce 6.2 Risk Assessment and Decision-Making of E-commerce Transactions 6.2.1 The Angle of E-commerce Transaction Risk Assessment Insurance 6.2.2 Evaluation Index System of E-commerce Transaction Risk 6.2.3 Risk Control Decision of E-commerce Transaction 6.3 Implementation of Risk Control of E-commerce Transactions 6.3.1 Concepts and Properties of the Specification 6.3.2 Compliance Transactions of the Participants in E-commerce Transactions 6.3.3 Market Regulation 6.3.4 Industry Self-Discipline and Social Supervision 7 Controlling Credit Risk in E-commerce 7.1 E-commerce Credit Risk Identification 7.1.1 Concepts of E-commerce Credit Risk Related 7.1.2 Impact Factors and Origin of E-commerce Credit Risk 7.1.3 Performance of E-commerce Credit Risk 7.2 E-commerce Credit Risk Assessment and Decision-Making 7.2.1 Overview of Credit Evaluation 7.2.2 Credit Risk Evaluation Process 7.2.3 Credit Risk Control Decision-Making 7.3 Implementation of E-commerce Credit Risk Control 7.3.1 Guiding Ideology and Basic Principles 7.3.2 Credit Risk Control Mechanism 7.3.3 Regulations, System, and Integrity Construction 8 Controlling Risk of E-commerce Personnel 8.1 Risk Analysis of E-commerce Personnel 8.1.1 Necessity of Risk Management for E-commerce Personnel 8.1.2 Risk Causes and Types of E-commerce Personnel 8.2 Risk Identification, Assessment, and Decision-Making of E-commerce Personnel 8.2.1 Risk Identification of E-commerce Personnel 8.2.2 Risk Assessment for E-commerce Personnel 8.2.3 Risk Control Decision of E-commerce Personnel 8.3 Implementation of Risk Control for E-commerce Personnel 8.3.1 Personnel Management System 8.3.2 Safety Education and Training 8.3.3 Enhance Safety Awareness 8.3.4 Honesty Education and the Construction of Integrity Culture 8.3.5 Improve the Personnel Training Mechanism 9 Supervision and Optimization Mechanism of E-commerce Security Management 9.1 Supervision Mechanism of E-commerce Safety Management 9.1.1 The Dynamic Mechanism of E-commerce Safety Management and Supervision 9.1.2 Formation of E-commerce Safety Management and Supervision Mechanism 9.2 Optimization Mechanism of E-commerce Security Management 9.2.1 Management Optimization and E-commerce Security Management Optimization 9.2.2 Significance and Objectives of Continuous Optimization of E-commerce Security Management 9.2.3 Realization of E-commerce Security Management Optimization References