铁路信息系统全生命周期质量与风险评估体系研究  

Quality and risk assessment system for whole life cycle of railway information system

作　　者：王瑞民 司群 雷丝萦 WANG Ruimin;SI Qun;LEI Siying(Institute of Computing Technologies,China Academy of Railways Sciences Corporation Limited,Beijing 100081,China)

机构地区：[1]中国铁道科学研究院集团有限公司电子计算技术研究所,北京100081

出　　处：《铁路计算机应用》2023年第11期1-5,共5页Railway Computer Application

基　　金：中国国家铁路集团有限公司科技研究开发计划(P2022S007)。

摘　　要：随着我国铁路业务的不断增长,铁路网络安全和信息化建设发展迅速。铁路信息系统种类繁多、数量庞大,为保证“十四五”时期铁路信息系统有序开展统型、升级、改造,必须对其进行全生命周期的质量控制,识别从立项到废止的全过程中产生的各类安全风险,从而保障铁路业务平稳运营。文章结合能力成熟度整合模型(CMMI,Capability Maturity Model Integration)和全生命周期,从生命周期、质量和风险评估过程这3个维度,构建了铁路信息系统质量与风险评估体系,分析提出铁路信息系统质量风险识别清单,可协助快速定位其安全风险点。With the continuous growth of China's railway business,railway network security and information construction have developed rapidly.There are a wide variety and a large number of railway information systems.In order to ensure the orderly development,upgrading,and transformation of railway information systems during the 14th Five Year Plan period,it is necessary to carry out quality control throughout its whole lifecycle,identify various security risks generated throughout the whole process from project approval to abolishment,and ensure the smooth operation of railway business.This paper combined the Capability Maturity Model Integration(CMMI)and the whole lifecycle to construct a railway information system quality and risk assessment system from three dimensions:lifecycle,quality,and risk assessment process,analyzed and proposed a railway information system quality risk identification checklist,which could help quickly locate its safety risk points.

关 键 词：全生命周期 质量 风险评估 体系 能力成熟度整合模型(CMMI) 

分 类 号：U29[交通运输工程—交通运输规划与管理]