This article analyzes the characteristics of the telecommunications enterprises

the problems and challenges in information security management

and builds information security compliance management system

on the idea of GRC to effectively enhance telecommunications enterprise information security management and control ability. The article describes in detail the core mechanism of the information security and compliance management system and elements

as well as compliance management platform construction ideas

pointing out the value of information security and compliance management system and the future directiont.