ScholarWorks@중앙대학교

초록

In an environment where converged and new threats are continuously increasing, security level classification for protecting valuable assets constitutes the first and core activity of security policy. However, studies focusing on the classification of information itself are scarce, and most remain at the stage of presenting policy objectives or general guidelines. In this study, an actual security classification was conducted on the R&D information of Research Institute A, and indicators appropriate to the institute were extracted in the process. Subsequently, through factor analysis and AHP analysis, a classification model was designed and an application method was derived. In particular, the distinctive feature of this study lies in the adoption of a stepwise classification approach for each indicator rather than applying average values of the derived indicator evaluations. The significance of this study lies in its potential to provide a classification method that not only aligns with diverse business characteristics and organizational goals but is also practically applicable.

키워드