关键信息基础设施ICT供应链安全风险评估指标体系研究

Research on Security Risk Assessment Index System of Critical Information Infrastructures ICT Supply Chain

随着信息通信技术(ICT)在党政部门、重点行业领域的普及应用,加强ICT产品服务供应链的安全可控保障变得至关重要。研究从指标框架、指标体系、指标释义和实施过程等方面构建了一套针对关键信息基础设施ICT供应链安全的评估指标体系,该体系主要围绕关键信息基础设施ICT供应链涉及的各个方面衡量其安全性,并输出可能的风险点,可作为评价关键信息基础设施ICT供应链安全程度的依据,进而促进关键信息基础设施ICT供应链安全的检测评估工作开展。

With the popularization and application of information and communication technology(ICT)in party,government departments and key industries,it is very important to strengthen the security and controllable guarantee of ICT product service supply chain.The risk assessment system for ICT supply chain security of critical information infrastructures from the index framework,index system,index definition and implementation process.The system mainly measures the security around all aspects of key information infrastructure of ICT supply chain,and outputs possible risk points,which can be used as the basis for evaluating the security degree of key information infrastructure ICT supply chain.Then,the system can promote the detection and evaluation of ICT supply chain security of key information infrastructure.