縣級供電公司信息安全管理研究
發(fā)布時間：2019-03-11 11:20
【摘要】：隨著縣級供電公司信息化建設不斷加快,信息安全管理滯后帶來的影響越發(fā)明顯,在信息安全技術(shù)快速發(fā)展和信息安全形勢日益嚴峻的今天,縣級供電公司急需融合信息安全現(xiàn)狀、信息安全管理標準和企業(yè)發(fā)展需求,解決信息安全管理與信息化建設不同步造成的信息安全防護能力不足的問題。本文通過將國際信息安全管理標準ISO/IEC 27001與縣級供電公司信息安全體系建設相融合,借鑒國家電網(wǎng)公司信息安全體系結(jié)構(gòu),設計出適用于縣級供電公司信息安全建設的新體系和新方法。本文主要介紹了如何通過對縣級供電公司從管理和技術(shù)兩個方面進行全面的信息安全風險評估,識別公司面臨的信息安全風險,并與國家電網(wǎng)公司信息安全體系、ISO/IEC 27001中的信息安全管理要求相比較,查找不足,從管理角度完善縣級供電公司信息安全組織建設、運維管理建設和管理制度建設,從技術(shù)角度完善邊界安全、網(wǎng)絡安全、主機安全和應用安全建設,從而形成完整的信息安全體系,全面提升縣級供電公司信息安全防護水平,為公司生產(chǎn)、經(jīng)營和管理提供強有力的基礎保障。
[Abstract]:With the rapid development of information technology in county-level power supply companies, the lag of information security management has brought more and more obvious impact. Today, with the rapid development of information security technology and the increasingly severe situation of information security, County-level power supply companies need to integrate the current situation of information security, information security management standards and enterprise development needs, to solve the information security management and information construction caused by the lack of information security protection capacity. This paper combines the international information security management standard ISO/IEC 27001 with the construction of information security system of county-level power supply companies, and draws lessons from the information security architecture of State Power Grid Corporation. This paper designs a new system and method for information security construction of county-level power supply companies. This paper mainly introduces how to identify the information security risks faced by the county-level power supply companies from the aspects of management and technology, and how to identify the information security risks faced by the company and the information security system of the State Power Grid Corporation. Compared with the requirement of information security management in ISO/IEC 27001, we can find the deficiency, perfect the information security organization construction, operation and maintenance management construction and management system construction of county-level power supply company from the management point of view, perfect the border security and network security from the technical point of view. The construction of mainframe security and application security, thus forming a complete information security system, comprehensively improving the level of information security protection of county-level power supply companies, and providing a strong basic guarantee for the production, operation and management of the company.
【學位授予單位】：大連海事大學
【學位級別】：碩士
【學位授予年份】：2015
【分類號】：TP309;F426.61
本文編號：2438238
[Abstract]:With the rapid development of information technology in county-level power supply companies, the lag of information security management has brought more and more obvious impact. Today, with the rapid development of information security technology and the increasingly severe situation of information security, County-level power supply companies need to integrate the current situation of information security, information security management standards and enterprise development needs, to solve the information security management and information construction caused by the lack of information security protection capacity. This paper combines the international information security management standard ISO/IEC 27001 with the construction of information security system of county-level power supply companies, and draws lessons from the information security architecture of State Power Grid Corporation. This paper designs a new system and method for information security construction of county-level power supply companies. This paper mainly introduces how to identify the information security risks faced by the county-level power supply companies from the aspects of management and technology, and how to identify the information security risks faced by the company and the information security system of the State Power Grid Corporation. Compared with the requirement of information security management in ISO/IEC 27001, we can find the deficiency, perfect the information security organization construction, operation and maintenance management construction and management system construction of county-level power supply company from the management point of view, perfect the border security and network security from the technical point of view. The construction of mainframe security and application security, thus forming a complete information security system, comprehensively improving the level of information security protection of county-level power supply companies, and providing a strong basic guarantee for the production, operation and management of the company.
【學位授予單位】：大連海事大學
【學位級別】：碩士
【學位授予年份】：2015
【分類號】：TP309;F426.61
【參考文獻】
相關期刊論文 前4條
1 蔣明;吳斌;;電力營銷系統(tǒng)信息安全等級保護的研究與實踐[J];電力信息化;2009年03期
2 李巍;劉樹吉;;遼寧電力信息安全防護體系研究與實踐[J];電力信息化;2011年04期
3 李楊,聶曉偉,楊鼎才;基于BS7799標準風險評估實施性研究[J];計算機應用研究;2005年07期
4 M. Marsadek;A. Mohamed;;Risk based security assessment of power system using generalized regression neural network with feature extraction[J];Journal of Central South University;2013年02期
相關會議論文 前1條
1 高鵬;范杰;郭騫;;電力系統(tǒng)信息安全技術(shù)督查策略研究[A];2012年電力通信管理暨智能電網(wǎng)通信技術(shù)論壇論文集[C];2013年
相關博士學位論文 前1條
1 肖英;信息保障及其評價指標應用基礎研究[D];武漢大學;2006年
相關碩士學位論文 前2條
1 肖應霖;關于項目風險管理方法論在企業(yè)信息安全管理體系中的應用[D];上海交通大學;2011年
2 刁勇;增強信息安全的ASP模式研究[D];大連海事大學;2009年
，本文編號：2438238
本文鏈接：http://sikaile.net/qiyeguanlilunwen/2438238.html
