基于业务流程分析的图书馆信息资源保护研究

文章证明一种关联性，即信息资源的有效保护与全方位降低图书馆信息安全风险的策略之间的关联。简要描述当今图书馆安全防护的对象和面临的主要威胁，在对图书馆业务流程分析的基础上，提出信息资源的规范化、访问权限的更新各阶段的流程图以及信息系统在信息安全总体系统中的定位模型；以方框图的方式，演示安全威胁及漏洞的处理流程，并针对信息安全风险设计出“知识元”模型。最后，提出在图书馆组织架构里面设置关于信息安全防护的关键岗位及制定相关的职责。

Research of Library Information Resource Preservation Based on Business Process Analysis

This paper proved that a correlation that was the link between effective protection of information resource and strategies of comprehensively reducing the library information security risk, and briefly described the current security protection objects, and the main threats in the library, on the basis of business process analysis, put forward the standardization of information resource and flow chart about the updating of access to information system at each stage and positioning model of information system in the overall security system, and demonstrated security threats and vulnerabilities of processing flow in the form of block diagram, and designed knowledge element model focusing on the information security risks, and finally put forward that it should set about information security protection of key positions in the library organization structure, and formulate relevant responsibilities.