以BS 10012為基礎評估大專校院導入個人資訊管理制度之研究

淡江大學機構典藏 > 商管學院 > 資訊管理學系暨研究所 > 學位論文 > Item 987654321/74397

jsp.display-item.identifier=請使用永久網址來引用或連結此文件: https://tkuir.lib.tku.edu.tw/dspace/handle/987654321/74397

题名:	以BS 10012為基礎評估大專校院導入個人資訊管理制度之研究
其它题名:	A study of introducing college personal information management system based on BS 10012
作者:	鄒宛璉;Tzou, Wan-Lian
贡献者:	淡江大學資訊管理學系碩士班黃明達
关键词:	電腦處理個人資料保護法;個人資料保護法;個人資訊管理制;Personal Data Protection Act;Personal Information Management System;BS 10012;PIMS
日期:	2011
上传时间:	2011-12-28 18:31:48 (UTC+8)
摘要:	根據趨勢科技於「2010上半年全球資安威脅報告」中指出，教育界在上半年所感染的惡意程式數量最多，幾乎有50%的感染出現於學校和大專院校，對擁有大量個人資料的學校而言，不僅會使校內個人資料外洩，造成校譽受損，更影響學校永續發展。因此本研究以「BS 10012：2009個人資訊管理制度」（Personal Information Management System, PIMS）之「規劃」、「實行與運作」、「監督與審查」、「改善」四構面為基礎，了解目前大專校院的個人資訊管理制度，並提出改善建議。研究發現若個人資料不慎外洩，64.6%的電算中心管理層認為校譽受損衝擊最大，56.9%考慮再加強內部稽核。而目前大專校院的個人資訊管理制度，多處於BS 10012的「規劃」和「實行與運作」構面，對於「監督與審查」和「改善」構面較缺乏控管。若依地區劃分比較，各區域的學校於四個構面無顯著的差異，僅北區學校在職員的教育訓練表現較佳；若依電算中心專任職員人數規模劃分，10人以上的學校發展較佳。最後，本研究針對大專校院在個人資訊管理制度發展中較落後的「監督與審查」和「改善」構面，提出加強建議，降低個資法所帶來的衝擊。 Trend Micro in the " Global Threat Trends, 1H 2010" pointed out that when it comes to malware infections by industry sector, the education took the lead during the first half of 2010. Almost 50 percent of all malware infections occurred within schools and colleges which hold a large amount of personal data. Malware not only leaks personal data and damages school reputation, but also affects the sustainable development of school. Therefore, this study investigated the present college personal information management system based on “Plan", "Do", "Check", "Act”, four phases of "BS 10012：2009 －personal information management system, PIMS", and presents recommendations for improvement. The study found that 64.6% of managers working at computer centers, considered college reputation damage the most serious impact in the case of personal information leaking; thus, most of them also considered strengthening internal audit to avoid this from happening. At present, the major developmental progress in college personal information management system is at the “Plan” and “Do” phase, and a lack of control for “Check” and “Act”. This study researched whether regional differences and scale of computer center would affect personal information management system among colleges. In terms of regional comparison, there is no significant difference in PDCA phrases, except that the staff information security training performed better in the northern colleges. In terms of performance difference due to number of staff, it was found that colleges with more than 10 employees were better developed. Finally, the study presents recommendations for the colleges with “Check” and “Act” phase in personal information management system.
显示于类别:	[資訊管理學系暨研究所] 學位論文

文件中的档案:

档案	大小	格式	浏览次数
index.html	0Kb	HTML	268	检视/开启

在機構典藏中所有的数据项都受到原著作权保护.

TAIR相关文章

数据加载中.....