论文部分内容阅读
为进一步消除企业信息安全隐患,避免信息化建设“重功能、轻安全、轻性能”的不良发展模式,国网浙江省电力公司在全省范围内开展了信息通信“管理规范年”专项工作,全面排查、治理该公司的信息安全隐患,规范信息安全管理制度标准,切实做好信息化建设规划、设计、实施、上线运行等各阶段的全生命周期安全管控。文章对“管理规范年”专项工作的整个历程进行了阐述,详细介绍了信息系统全生命周期安全管控的技巧、方法、新模式以及经验总结。
In order to further eliminate hidden dangers of enterprise information and avoid the bad development mode of “re-function, light safety and light performance” of informatization construction, State Grid Zhejiang Power Company has carried out information communication in the whole province. “Special work, a comprehensive investigation and management of the company’s information security risks, standardize the information security management system standards and effectively do a good job of information construction planning, design, implementation, on-line operation and other stages of the entire life-cycle safety control. The article elaborates the entire course of the special work of ”Management Specification Year", introduces in detail the techniques, methods, new models and experiences of the information system life cycle safety management.