摘要：摘要：企业员工的管理与控制是企业信息化建设中最为薄弱的一部分，必须从人力资本的技术和手段入手。根据术语和概念、人 力管理功能与指标、人力资本报告与指标指南、员工敬业度四大类别，对企业信息安全管理要求从宏观的视角考察人员控制，包 括人力资源管理的各个模块，吸收人力资源管理的最新研究成果，提升工作人员的信息安全管理素养，避免信息安全管理事件的 发生。
Abstract: The management and control of enterprise employees is the weakest part of the enterprise information construction, so we must start from the technology and means of human capital. According to the tern and concept, human management function and index, human capital report and index guide, employee engagement four categories, the enterprise information security management requirements from the perspective of macro personnel control, including each module of human resource management, absorb the latest research results of human resource management, improve staff information security management literacy, avoid the occurrence of information security management events.