基于核电厂DCS系统信息安全管理体系研究

Construction of Information Security Management System Based on Nuclear Power Plant DCS System

中国的核安全事业进入安全高效发展的新时期,核电企业为了准确把握新时代对信息安全工作的新要求,必须深入思考和谋划信息安全工作,信息安全管理要从局部思维朝着系统性、体系化的方向发展。核电厂DCS系统信息安全管理体系从在役核电厂DCS系统信息安全现状出发,开展对国内外工控领域较成熟的信息安全标准ISO/IEC27001和GB/T22239-2019的研究,并将其中适用的内容用于指导核电厂工控系统,构建信息安全管理体系,能够解决在役核电厂及新建核电厂DCS信息安全管理方面的不足,提升DCS信息安全防范能力和应急处置能力,在构建完备的核电DCS信息安全管理体系方面具有示范、引领借鉴作用。

China's nuclear safety industry has entered a new period of safe and efficient development.In order to accurately grasp the new requirements for information security in the new era,nuclear power enterprises must deeply think and plan information security work,and information security management should develop from local thinking to systematic and systematic.The information security management system of nuclear power plant DCS system starts from the current situation of information security of DCS system of nuclear power plant in service,carries out the research on the more mature information security standards ISO/IEC27001and GB/T 22239-2019 in the field of industrial control at home and abroad,and uses the applicable contents to guide the industrial control system of nuclear power plant and build the information security management system,It can solve the deficiencies in DCS information security management of in-service nuclear power plants and new nuclear power plants,improve DCS information security prevention ability and emergency disposal ability,and play an exemplary,leading and reference role in building a complete nuclear power DCS information security management system.