The paper makes a research on assessment of risk process based on the SSE-CMM for the electric power communication system security. First of all, it presents the importance of risk assessment on the electric power communication system due to the system's important role and safety need. Secondly, it introduces the architecture of the SSE-CMM and the method of evaluating capability level. The paper translates the security risk assessment process of the SSE-CMM into the language, which applies to electric power communication system. Then, it finds out the threats, vulnerabilities of the electric power communication system and the impacts on the system itself. The paper analyzes the security risk by using the method of fault tree, and presents safety measurements, and works out the risk assessment table. Finally, it reaches the goal of building up the model of the assessment and evaluating the capability of the specific communication organization.
|