8) Layer 8: authorization and audit Security 9)

Layer 9: core of security protection system: realize the comprehensive management of enterprise information security resources, i.e. eism six capabilities: early warning, protection, detection, response, recovery and counterattack WPDRRC capability model: form the framework of the macro information network security protection system structure from the three elements of personnel, technology and policy