Grade-protection-oriented information system security compliance check method

Abstract

The invention relates to the field of information securitygrade protection, and aims at providing a grade-protection-oriented information system security compliance check method. The grade-protection-oriented information system security compliance check method comprises the steps that a check index library is built, a check task or a check plan is defined, a check object is scanned, a check result is guided in, a scanning result is decoded, a scanning result code is decoded, the scanning result is judged, a judgment result is graded, and a grade protection compliance report is generated. According to the method, information system security grade protection check work is objective, standard and fair, and the difficulty and complexity of the information security grade protection check work can be greatly reduced so that the efficiency of the information security grade protection check work can be greatly improved.

Description

technical field [0001] The invention relates to the field of information security level protection, in particular to a level protection-oriented information system security compliance checking method. Background technique [0002] Information security level protection is a kind of work that protects information and information carriers according to the level of importance. Information security graded protection evaluation work is an activity in which grade evaluation agencies inspect and evaluate the security grade protection status of non-state secret information systems in accordance with the provisions of the national information security grade protection system and in accordance with relevant management norms and technical standards. The information systems involved in the evaluation of graded protection are wide-ranging and highly sensitive. [0003] At present, both public security organs and evaluation agencies lack scientific, standardized, objective and efficient t...

AI Technical Summary

Problems solved by technology

Moreover, during the entire evaluation process, the evaluation personnel need to spend a lot of time, run different tools multiple times, manually enter commands, and configure the environment step by step for evaluation. The evaluation data and result records need to be manually confirmed.

The evaluation results are affected by the skills of the evaluation personnel, the operation process is not standardized, the efficiency is low, and there is a lack of in-depth analysis and mining of data

Images