Multi-dimensional comprehensive information security assessment service platform system

Abstract

A multi-dimensional comprehensive information security assessment service platform system is composed of a nation-level grade protection assessment center service platform, a province-level grade protection assessment service platform, a city-level grade protection assessment service platform and a county-level grade protection assessment service platform. A cascade mechanism is adopted in the nation-level grade protection assessment center service platform, the province-level grade protection assessment service platform and the city-level grade protection assessment service platform for mutual access so as to establish an integrated grade protection assessment service infrastructure. In physics, the isolated and dispersed information assessment platforms are connected to form a whole. The multi-dimensional comprehensive information security assessment service platform system has the advantages that the problem that grade protection assessment work is hard to implement is effectively solved, wherein according to the general requirements of national grade protection, investigating and surveying are conducted on industry information systems, and a specific assessment index system is specially provided so as to effectively guide implementation of intra-industry information security grade protection work; assessment index evaluation results are complete and rectification and planning are performed easily, wherein overall coverage assessment is conducted on the information systems on the basis of the overall industry range, and the problems such as assessment dead angles and assessment missing can be effectively avoided.

Description

technical field [0001] The invention belongs to the field of evaluation systems, and in particular relates to a multi-dimensional comprehensive service platform system for information security evaluation based on a cascading and exchange mechanism. Background technique [0002] my country's information security is facing a very severe situation, and the task of maintaining national information security is very arduous and heavy. In recent years, under the organization and leadership of the Ministry of Public Security and relevant departments, my country's information security level protection work has made great progress, established and improved the information security level protection policy system and standard system, organized and launched a nationwide information system Important tasks such as grading and filing, safety construction rectification, graded protection evaluation system construction and graded protection evaluation, supervision and inspection have effective...

AI Technical Summary

Problems solved by technology

The basic requirements for level protection formulated at the national level are relatively macroscopic, lacking security requirements for industries and specific business systems, so it is difficult to implement in the process of industry system level evaluation

[0004] (2) The completeness of evaluation index evaluation results is poor: due to the ubiquity of testing information sharing and asset sharing of the tested system, it has caused a certain impact on the completeness of the level protection evaluation of a specific information system, and the traditional evaluation method is difficult to do this. Accurate evaluation of out-of-band information resources and out-of-band fixed assets

[0005] (3) Difficulty in sharing and merging evaluation results, lack of overall vision and response planning: the construction of evaluations in various regions is not synchronized, and the management mechanism is not unified, which makes it difficult to share and merge the evaluation results, resulting in repeated evaluation activities and a shortage of evaluation funds waste phenomenon

Moreover, due to the isolation of existing test results, it is difficult to realize the overall vision of the measured object, which will also lead to the lack of effective coping strategies and further construction planning

[0006] (4) The content and form of the evaluation results are simple, rough, and poorly readable: the evaluation results are often not further analyzed and mined, and the form is simple and the expression is rough, resulting in poor readability of the evaluation results

Images