基于KPI的电力信息安全态势评价指标体系研究

Research on KPI-based Evaluation Indicator System for Electric Power Information Security Situation

为了获得电力信息安全技术保障能力所能达到的安全效能级别,验证已实施的信息安全技术保障体系能否达到设定的信息安全目标,以便于采取有效信息安全措施对电力信息安全态势进行持续改进,文章运用KPI方法构建了电力信息安全态势的关键评价指标体系,设计并实现了相应的评价系统,利用该系统对电力信息安全态势进行评价,结果表明该系统能够有效、准确、自动及主动地获取、分析与评价信息安全态势。

In order to obtain the level of security performance that power information security technology assurance capability can achieve, to verify whether the adopted information security technology assurance system can achieve the information security goal or not, and to continuously improve information security situation using effective information security measures, this paper builds a key evaluation indicator system for power information security situation evaluation using KPI method, designs and implements the corresponding evaluation system. And then, the information security situation is assessed using the system. The results show that the system can effectively, accurately, automatically and proactively collect, analyze and evaluate the information security situation.