This paper first introduces nowadays information system security certification and accreditation( C& A) process of American and our country.

• 该文首先简要介绍了美国的信息系统认证与认可过程和我国现阶段的信息系统测评认证的现状。