摘要
本文针对地质调查行业信息化建设现状和业务系统的特点,从综合开发、部署、运维3个层面提出了一整套关于应用系统安全治理的方案,详细阐述了应用系统安全建设的现状、风险分析、治理实践等内容,重点介绍了业务系统的安全治理实践流程,为提升地质环境信息系统的服务能力起到了重要作用。
According to the current status of informatization construction and system characteristics in the geological survey industry,this paper proposes a set of security management solutions for application systems at three levels:comprehensive development,deployment,and operation and maintenance.This plan elaborates the current situation of application system security construction,risk analysis,governance practices,etc.,and focuses on the security governance practice process of business systems,which plays an important role in improving the service capabilities of geological environment information systems.
作者
杨淑云
殷铭
武建飞
杨飞
韩明伟
孙美琴
YANG Shuyun;YIN Ming;WU Jianfei;YANG Fei;HAN Mingwei;SUN Meiqin(China Institute of Geological Environment Monitoring,Beijing 100081,China;Information Center of Ministry of Natural Resources,Beijing 100830,China;Wuhan Zhibo Chuangxiang Technology Co.,Ltd.,Wuhan 430074,China)
出处
《国土资源信息化》
2020年第2期60-64,共5页
Land and Resources Informatization
基金
地质调查项目“水文地质及环境地质调查数据集成与应用”(DD20190431)。
关键词
地质环境
信息系统
安全风险评估
上线安全检测
安全风险转移
geo-environment
information system
security risk assessment
online security testing
security risk transfer
