电力企业终端信息安全风险分析与管控

Analysis and Control of Terminal Information Security Risk in Power Enterprises

随着信息化建设的全面推广,信息安全领域面临来自于企业外部的层出不穷的入侵和攻击,也有来自内部的违规和泄漏,针对存在的诸多信息安全问题,国网黄山供电公司对市公司、变电站、供电所及所属县公司,从边界、终端、应用系统、安全监测与审计、物理安全等多个角度开展了全景安全风险分析,对发现的各类问题提出了整改及管控措施,从而减少公司信息网络中存在的各类安全风险,为信息系统正常运行、信息数据保密工作、信息安全工作正常开展提供了良好的保障。

With the comprehensive promotion of informatization construction,the information security field is faced with endless external invasion and attack,as well as internal irregularities and leakage.In view of the problems of information security,State Grid Huangshan Power Supply Company conducted panoramic safety risk analysis：including the municipal company,substations,power supply station,and affiliated county companies,and starting from the perspective of the border,terminals,application system,safety monitoring and auditing,physical security,etc.The improvement and control measures are put forward for the various problems,thus reducing different kinds of security risks in the company information network.This research provides a good guarantee for the normal operation of information system,information data secrecy,and information security work development.