Design And Implementation Of Power Sector Information Security Risk Assessment System

In recent years, with the change of information security situation at home and abroad, and the country attaches great importance to information security-power two system as an important infrastructure of the country,its safety attention. Although the two "power system security protection scheme" has been promulgated and implemented for many years, but the power two system wide coverage, the environment is complex, the operation and maintenance personnel of professional security investment is low, uneven, the overall security is still the main problems of power system protection for two times, two times and power system security risk assessment as the present electric power two safety risk identification, system information found in urgent need of major means of popularity, but because of the particularity of electric power industry and the importance of network security, industry professionals, the main reason outside the industry team to the work to promote the.In this paper, evaluation standards based on the domestic and foreign information security risk, and full investigation, analysis, study of the electric power industry a typical environment, asset identification, threat to power two system evaluation and vulnerability evaluation, the establishment of the power industry scenario knowledge base, combined with simple and efficient risk matrix algorithm.the evaluation of implementation to quickly grasp the risk assessment method calculation of system risk,a more accurate; the decision of enterprise information security risk level faced an intuitive understanding of the system, provide a reference for the security protection system of investment.In this paper, according to the development of the power industry to explore the information security risk assessment system, the power two system operation and maintenance personnel or personnel evaluation system according to the guidelines and process guidance to complete the information security risk assessment activities, the realization of the two systems work effectively to carry out risk assessment standard.