浅析地市级电网企业信息安全风险内控管理体系建设

Analysis of Information Security Risks Internal Control Management System of the City Level Power Grid Enterprise

在市场经济体制促进下,电网企业的信息安全管理体制迎来了新发展。文中阐述了ISO/IEC27001标准下电网企业信息安全风险内控管理需要的内容与体系,并通过某地级市的电网企业为研究对象,构建出科学合理的信息安全管理体系,对使用中出现的问题提出了合理建议。

With the promotion of the market economy system, the power grid enterprise information security manage- ment system has new developed. This paper elaborates the need contents and system in the ISO/IEC 27001 standard, and taking a city level power grid enterprise as the research object, construct scientific and reasonable information security man- agement system, and puts forward reasonable suggestions for problems in using.