The Safety Risk Assessment And Strategic Research On Operation Information System Of Guangshen Railway

The railway sector is closely related to people's livelihood, and it is more and more highly depend on railway information system.Once the information security of railway information system has been destroyed,it would not only hurt the productivity of railway transport,but also cause serious social impact and consequences,so the risk management of railway information system is essencial.This article has introduced the secruity status of the information system of the GUANGSHEN Railway company and has described the principle of information security risk management,and has studied the standards and methods of Information Security Risk Assessment home and abroad .This article has primary studied the BS7799 security management standard and the quantitative risk evaluation method which based on BS7799 standard of how to use value assignment of asset and Vulnerability and threat of information system and the process of how to build Information Securitry Management System. This article has self-evaluated and analyzed the risk of the most important information system of GUANGSHEN Railway Company, has evaluated asset and Vulnerability and threat of GUANGSHEN Railway Company and has figured out the Value-at-risk of fifteen common threat .TO aim at the risk status of GUANGSHEN Railway Company ,This article has put forward an idea of how to build Information Securitry Management System of GUANGSHEN Railway Company,and has made the policy of information security management of GUANGSHEN Railway Company through researching of the eleven control point of BS7799 standard.