安全级DCS供应商信息安全管理体系构建

Establishment of Security Management System of Safety DCS Supplier

随着计算机技术在安全级数字化控制系统(DCS)的发展与应用,对于信息安全威胁和信息安全事件的关注日渐增长。在国内核电信息安全相关标准建立和完善之前,开展对国外工控领域较成熟的信息安全标准IEC 62443的研究,并将其中适用的内容用于指导安全级DCS供应商构建信息安全管理体系是迅速且有效的方法。本文介绍了ISO/IEC信息安全标准的基本情况,根据安全级DCS生命周期的特点,对IEC 62443-2-4进行适用性分析,提出了一套适用于安全级DCS供应商的信息安全管理体系,为安全级DCS供应商的信息安全管理体系构建提供参考。

With the development and application of computer technology in safety DCS of nuclear power plant,concern for security threats and security incidents are increasing day by day.Before the establishment and improvement of domestic nuclear power security standards,it is a quick and effective method to carry out research on IEC 62443,a relatively mature standard in the field of international industrial control,and use the applicable content in it to guide safety DCS suppliers to build security management system.This paper introduces the basic situation of ISO/IEC security standard,analyzes the applicability of IEC 62443-2-4 standard against the characteristics of the life cycle of safety DCS,proposes a set of security management system suitable for safety DCS suppliers,and provides a suggestion for the construction of security management system of safety DCS suppliers.