Research On Information Security Management Of County Level Power Supply Company

With the information construction of county power company continues to accelerate, lagged impact of information security has brought more and more obvious.The rapid development of information security and information technology security situation increasingly grim today,county level power supply company needed integration of information security status,information security management standards and business development needs to solve the problem of information security protection capacity issues of information security management and information resulting from the construction of sync.In this paper,by international information security management standard ISO/IEC 27001 and county power company information security system integration building, learn from the State Grid Corporation of information security architecture,to design a new system and new methods applicable to county power company’s information security.This paper describes how to conduct a comprehensive county-level power supply company information security risk assessment from the management and technical aspects,identify information security risks faced by the company,and compare with the information security system of State Grid Corporation and ISO/IEC 27001,to find deficiencies,from a management point of view to improve information security organization construction,operation and maintenance management of construction and management systems construction,from a technical point of view to improve border security,network security,host security and application security construction,to form a complete information security system,to enhance the county power company information security level,for the production, operation and management to provide a strong basis for protection.