| 摘要 |
A method for multiple sub-systems meta Security Policy (MSSMSP) including business process policies for a business organization having a meta policy server, Business-Asset-Monitors (BAM's) and security sub-systems, wherein the security sub-systems are supported by Policy Connectors and wherein the BAM's are software agents on each business asset that are responsible to monitor the organizational users' activities and report that information to the meta policy server. The method includes defining by a Chief-Security-Officer (CSO) of the organizational business assets, wherein the business assets are supported by the BAM's. The method also includes correlating by the CSO of abstract, business-oriented-parameters with technical, low-level parameters of the security sub-systems and validating the security policy relative to the user's by monitoring the users' activities against the business assets and by using the meta policy server, thereby enabling the creation, management and control of one central MSSMSP in correlation to the various security sub-system's policies.
|
