The Design And Implementation Of Comprehensive Risk Management And Internal Control Anformation System For State Grid Corporation Of China

With the continuous advancement of the 13th Five-Year Plan for Risk Control and the in-depth development of financial intensification,in order to achieve the State Grid strategic goals and operational decisions,the State Grid has put forward higher requirements for comprehensive risk management and internal control information management.And it needs to further innovate y70y-p management means,fully utilizes the process control and results monitoring functions of information systems,improves the speed of risk response,grasps development opportunities,and reduces various potential risks in the company's development.To this end,the design and implementation of the State Grid comprehensive risk management and internal control information system is proposed.In terms of architecture,the system adopts multi-layer B/S architecture,adopts SG-UAP as the development platform,and uses Ajax,JQuery 2.1.3,HTML/HTML5,JSP/Servlet,Spring3.2.6,Hibemate3.2.3 and other technologies for development.The server development technology selects the Java route,and the related files and data of Java code,client component,data serialization and the like are uniformly UTF-8 encoded.The technical architecture is divided into a presentation layer,a data interaction layer,a business logic layer,and a persistence layer.The presentation layer displays the functions of each module through the browser,the data interaction layer is the interaction between the presentation layer and the business logic layer,and the persistence layer is to implement the addition,deletion and change operation of the database,and the system uses the relational database to operate the data.The State Grid's comprehensive risk management and internal control information system closely focuses on the company's strategic objectives,implements the requirements of the rule of law enterprise construction,adheres to the principle of full participation,comprehensive coverage,and full-scale control,the construction and implementation of the comprehensive risk management and internal control system is integrated.The system proposes the implementation of core functions in risk monitoring,scanning scheduling and job management.The risk monitoring module is the realization of risk warning,compliance management,risk control performance,and data management functions.The scan scheduling module is used to implement rule management,suspected scan,and result statistics.The job management module can realize the function's display and processing of personal work area,project task,risk assessment,internal control evaluation,management improvement,statistical report,and internal control construction.The application of this system can strengthen the three-line defense operation of business leading,risk control and auditing supervision,promote the integration of risk control management into the company's various business activities,promote the group management,standardization and informatization of risk control management,and rationally balance the risk control management and efficiency benefit,effectively prevent and resolve various risks,further enhance the company's risk response capabilities and core competitiveness,and ensure the company's safe,healthy and sustainable development.