石化信息系统IT运维安全实践  

ITOperation- and- Maintenance Audit Practice based on Petrochemical Information System

作　　者：刘晓文[1] 张志海[1] 张小丽 

机构地区：[1]中国石化青岛炼油化工有限责任公司,山东青岛266000 [2]山东瑞宁信息技术股份有限公司,山东济南250100

出　　处：《信息安全与通信保密》2016年第9期102-104,共3页Information Security and Communications Privacy

摘　　要：企业IT系统承载着企业重要的业务系统,这些业务系统又是企业核心数据的载体。企业IT系统的运维实践直接关系到企业核心数据的安全,企业IT系统的运维安全问题已经成为企业IT系统运维实践中一个亟待解决的问题。中国某炼油化工有限责任公司通过分析发现,影响IT运维实践安全的因素主要包括,运维环境复杂、产品多样,运维过程不透明以及缺乏有效的访问控制策略和认证审计手段。为了解决这一问题,中国某炼油化工有限责任公司引入了运维审计管控系统,该系统采用三权分立原则,对运维实践进行事前预防、事中监控、事后审计等关键手段,在减少运维人员工作量、降低运维人员工作压力的同时,有效提高了信息化运维过程的安全性。本文主要从运维技术和企业管理的角度对IT运维的实践活动提出一些建议。The enterprise＇ s IT system carries the important business systems, and these business are the carriers of core data. Oper- ation-and- maintenance practice of the enterprise＇ s IT system is directly related to the security of the enterprise＇ s core data, and op- eration-and- maintenance security of the enterprise＇ s IT system, now becomes an urgent problem to be solved in the operation-and- maintenance practice of the enterprise＇ s IT system. Based on analysis, Sinopec Qingdao Petrochemical Limited Liability Company find that the main influence factors involve complex environment, product variety, non-transparent operation process and lack of effective strategy for access and control and effective means for certification audit. In order to solve this problem, the Sinopec Qingdao Petro- chemical Limited Liability Company introduces the operation-and-maintenance audit management system, this system adopts the prin- ciple of three-power separation that is, prevention before the event monitoring during the event, auditing after the event and other key measures in practice, thus to the workload and working pressure of operation-and-maintenance personnel while effectively improving the safety of information operation-and-maintenance process. From the angle of operation-and-maintenance technology and enterprise management this paper proposes some suggestions for the enterprise＇ s IT operation-and-maintenance practice.

关 键 词：运维审计 运维分析 自动化运维 石化系统运维 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]