基于ISO 7001的电力信息安全风险评估模型  

A Model of Information Security Risk Assessment in Power System Based on ISO 27001

作　　者：王甜[1,2] 徐晖[1,2] 魏理豪[1,2] 崔磊[1,2] 

机构地区：[1]广东电网公司信息中心,广东广州510600 [2]广东电网公司信息化评测实验室,广东广州510600

出　　处：《电力信息化》2011年第7期89-93,共5页Electric Power Information Technology

摘　　要：目前,电力信息安全风险评估逐步受到重视。文章结合广东电网公司实施信息安全风险评估的经验,提出基于ISO27001的信息安全风险评估模型。该模型依据国际通用的信息安全管理体系ISO27001,引入信息安全三元理论,能够从管理、运行、技术3个层面全面评估信息安全风险。Information security risk assessment in power system gained more attention gradually. This paper proposed an information security risk assessment model based on ISO 27001 combine with experience of information security risk assessment work in Guangdong Power Grid of CSG. This new model basis on the information security management system ISO 27001, draws trialism of information security into practice. This model could comprehensively assess the information security risk in aspect of management, operation and technology.

关 键 词：电力信息安全 风险评估 安全管理体系 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]