“零信任”医院数据库运维体系建设与实践

Construction and Practice on Hospital Database Operation and Maintenance System Based on"Zero Trust"Security Architecture

目的构建基于“零信任”架构的医院数据库运维体系,评估其应用效果,为医疗机构数字化转型提供数据库运维保障参考。方法对医院数据库运维行为进行流程化管理,并且通过防火墙、运行安全管理平台、安全风险预警平台进行控制与监控。结果数据库运维体系运行后,显著降低了运维故障率。当数据库月度故障时间阈值设定在30分钟时,年度达标率(达标月份数/月份数)接近75%。结论基于“零信任”架构的医院数据库运维体系,显著降低了数据库运维风险,提高了数据库运行的安全性和稳定性。

Objective To construct a hospital database operation and maintenance system based on"zero trust"architecture,evaluate its application effect,and provide reference for database operation and maintenance guarantee for digital transformation of medical institutions.Methods Hospital database operation and maintenance behavior is managed in a process,and controlled and monitored through the database(firewall,operation security management,security risk early warning)platform.Results After operation,the failure rate of database operation and maintenance system was significantly reduced.When the database monthly failure time threshold is set at 30 minutes,the annual compliance rate(number of compliant months/number of compliant months)approaches 75%.Conclusion Through the actual operation of the hospital,the failure rate of hospital database operation and maintenance is significantly reduced,the database operation and maintenance cost is controlled,and the security and stability of database operation is improved.