A hierarchical protection-oriented information system security compliance inspection method

Abstract

The invention relates to the field of information security level protection and aims to provide a level protection-oriented information system security compliance checking method. This hierarchical protection-oriented information system security compliance inspection method includes steps: establishing an inspection index library, defining inspection tasks or inspection plans, scanning inspection objects, importing inspection results, decrypting scanning results, and encoding scanning results. Decode, judge scan results, score judgment results, and generate graded protection compliance reports. The invention makes the information system security level protection inspection work objective, standardized and fair, can greatly reduce the difficulty and complexity of the information security level protection inspection work, and greatly improve the information security level protection inspection work efficiency.

Description

technical field [0001] The invention relates to the field of information security level protection, in particular to a level protection-oriented information system security compliance checking method. Background technique [0002] Information security level protection is a kind of work that protects information and information carriers according to the level of importance. Information security graded protection evaluation work is an activity in which grade evaluation agencies inspect and evaluate the security grade protection status of non-state secret information systems in accordance with the provisions of the national information security grade protection system and in accordance with relevant management norms and technical standards. The information systems involved in the evaluation of graded protection are wide-ranging and highly sensitive. [0003] At present, both public security organs and evaluation agencies lack scientific, standardized, objective and efficient t...

AI Technical Summary

Problems solved by technology

Moreover, during the entire evaluation process, the evaluation personnel need to spend a lot of time, run different tools multiple times, manually enter commands, and configure the environment step by step for evaluation. The evaluation data and result records need to be manually confirmed.

The evaluation results are affected by the skills of the evaluation personnel, the operation process is not standardized, the efficiency is low, and there is a lack of in-depth analysis and mining of data

Images