创建铁路信息安全管理及其标准体系的探讨

Discussion on Creating Railway Information Security Management and the Standard System

信息安全管理正成为当前全球的热门话题,建立和健全信息安全管理及其标准体系对铁路运输生产安全管理工作具有十分重要的意义,尤其是对我国重载、高速铁路的迅猛发展将发挥关键性作用。为此,从我国铁路信息安全管理现状入手,在阐述和分析国内外信息安全标准化情况的基础上,提出包括策划准备、范围确定、调查评估、框架建立、文件编写、运行改进和体系审核等内容的铁路信息安全管理及其标准体系的创建思路。

Information security management is becoming a hot topic in the current world.Establishing and improving standards of information security management and the standards system is also of great significance to railway transport safety management,and is especially vital to rapid development of heavy haul railway and high-speed railway in China.On the basis of the current situation of railway information security management and expounding and analyzing the standardization of information security at home and abroad,the author gives the route of creating railway information security management and the standardization,including planning preparation,scope identification,investigation assessment,framework construction,document preparation,operation improvement and system audit,etc.