关基单位网络安全能力评价指标体系研究

Research on the Evaluation Index System for Cyber Security Capability of Critical Information Infrastructure Units

为定量评价党政机关、金融、交通、通信、能源等关键信息基础设施单位的网络安全能力水平,在《网络安全法》《关键信息基础设施安全保护条例》等法律法规和国家标准框架下,从技术应用与制度建设执行两个层面,构建了涵盖网络安全“技术体系、基础保障、主动防御与应急、运营规范、培训教育、技术创新”6个方面的综合评价指标体系。该指标体系有助于关键信息基础设施单位网络安全能力自查与优化提升,提供科学量化的评估与分析工具。

In order to quantitatively evaluate the cyber security capability level of critical information infrastructure units such as party and government organs,finance,transportation,communication,and energy industries,within the framework of Cybersecurity Law,Regulations on Security Protection of Critical Information Infrastructure and other laws and regulations and national standards,this paper builds a comprehensive evaluation index system covering six aspects of cyber security,including technical system,basic guarantee,active defense and emergency response,operation specification,training and education,and technological innovation based on the technical applications and policies construction and implementation.The index system can provide scientific and quantitative evaluation and analysis tools for the self-examination,evaluation,optimization and improvement of the cyber security capabilities of critical information infrastructure units.