安全事件应急管理标准在中山政务云上的应用

Application of Security Incident Emergency Management Standard on Zhongshan Government Cloud

针对政务应用信息系统高安全性要求,以中山市政务云信息安全事件管理和应急响应能力建设为研究对象,对照相应国家标准,从组织架构、技术体系、管理制度、方案预案、工作流程、考核审计等环节,积极推动安全等保、安全管理、安全运维、安全技术等方面的信息安全国家标准的应用和推广,探讨建立一套涵盖监测预警、分析处置、总结整改的应急响应工作机制,有效防范和减轻了网络与信息安全事件的危害,验证了相关标准在保障政务云网络安全、安全事件管理和安全应急响应中发挥的引领作用。

In view of the high security requirements of government application information system,taking Zhongshan government cloud information security event management and emergency response capacity construction as the research object,and referring to the corresponding national standards,actively promote the application and promotion of national information security standards in terms of security,security management,security operation and maintenance and security technology from the aspects of organizational structure,technical system,management system,scheme plan,workflow,assessment and audit,Explore the establishment of a set of emergency response mechanism covering monitoring and early warning,analysis and disposal,summary and rectification,effectively prevent and reduce the harm of network and information security events,and verify the leading role of relevant standards in ensuring government cloud network security,security event management and security emergency response.