网络安全服务成本度量标准在网络安全服务中的应用  

Application of Cyber Security Service Cost Measurement in Cyber Security Services

作　　者：潘晨 许玉娜[2] 王岩 吴迪 陈青民 方莉莉 

机构地区：[1]北京安信天行科技有限公司 [2]中国电子技术标准化研究院 [3]北京市民政局

出　　处：《信息技术与标准化》2024年第S01期107-111,124,共6页Information Technology & Standardization

摘　　要：针对服务供需双方认知偏差较大、度量标准难统一的痛点,阐述了GB/T 30283—2022《信息安全技术信息安全服务分类与代码》、GB/T 42461—2023《信息安全技术网络安全服务成本度量指南》等网络安全国家标准的应用,并结合在网络安全运维服务项目中的实践,对网络安全服务成本进行了分析和测算,为提升网络安全成本预算强化统筹、厉行节约提供了良好支撑。The article addresses the significant cognitive discrepancies between service providers and demanders,as well as the difficulty in unifying measurement standards.It elaborates on the specific implementation of national standards for cyber security,including GB/T 30283—2022"Information security technology-Information security services-Classification and code"and GB/T 42461—2023"Information security technology-Guidelines for cyber security service cost measurement".Furthermore,it combines practical experience in cyber security operation and maintenance projects to analyze and calculate the cost of cyber security services.This provides strong support for strengthening overall budgeting and practicing frugality in order to enhance cyber security cost-effectiveness.

关 键 词：网络安全服务 成本度量 GB/T 30283—2022 GB/T 42461—2023 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]