官网系统整改及信息安全等级测评实践——以上海鲁迅纪念馆官网等级测评为例  

Practice of Rectification of Official Website System and Evaluation of Information Security Level

作　　者：孙阳 SUN Yang(Shanghai Luxun Museum,Shanghai 200081)

机构地区：[1]上海鲁迅纪念馆,上海200081

出　　处：《现代工程科技》2023年第6期49-52,共4页Modern Engineering Technology

摘　　要：信息安全等级测评是对照《网络安全法》所体现的标牌式安全要求,没有网络安全测评证书意味着没有在公共网络上出现的权利,特别对于事业单位,其官网信息安全尤为重要.结合上海鲁迅纪念馆官网等级测评项目,首先分析了官网系统的安全需求,并按照需求设计安全整改方案,然后结合公安部门检查要求进行相关软硬件及条例台账的修正,最后顺利取得了网络安全等级测评2级的相关资格,为上海鲁迅纪念馆可持续发展助力.The evaluation of information security level is based on the signage style security requirements reflected in the Network Security Law.Without a network security evaluation certificate,it means that there is no right to appear on the public network.Especially for public institutions,the importance of information security on their official websites is self-evident.This article first analyzes the security requirements of the official website system of the Shanghai Luxun Museum,designs a security rectification plan,and then makes relevant revisions to the software,hardware,and regulations ledger in accordance with the inspection requirements of the public security department.Finally,it successfully obtained the relevant qualification for the network security level evaluation level 2.This paper is to provide assistance for relevant practitioners.

关 键 词：安全整改 系统安全 等级测评 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]