信息系统安全策略在企业信息化建设过程中具有非常重要的地位。文章结合中国平煤神马集团信息安全的实际,围绕“准确分析信息安全需求,严格遵循信息安全策略建设的规范和标准,在实际工作中落实原则要求和核心内容的关键要素”3个要点,介绍了该企业在实现风险防控方面采取的相应措施。认为抓好这3个要点不仅是信息化建设的重要内容,也是保护信息化成果的迫切需要。 Information system security strategy in the process of enterprise information construction has a very important position. Based on the actual situation of information security in China Coal Pingdingshan Group, this paper focuses on “accurately analyzing information security requirements, strictly observing the norms and standards of information security policy construction, and implementing the key elements of principle and core content in practical work” Points out the corresponding measures taken by the enterprise in implementing risk prevention and control. It is not only an important part of informatization construction but also an urgent need to protect the achievements of informatization.