摘要
随着企业信息化水平的不断提升,企业数据涉及种类趋多、应用面趋广、数据交互趋于复杂。加之,数据是企业信息化发展的基石,从企业义务和职责层面均须全力以赴,提升数据安全管控能力。国网陕西省电力公司依据《中华人民共和国网络安全法》、《信息安全技术信息系统安全等级保护基本要求》(GB-T 22239-2008)等法律、法规及制度要求,有序健全"技术支撑、管理提升、目标导向"工作机制,持续且系统地分析企业数据安全管理需求及目标,并总结形成"多层次、多维度、多技措实现"的数据安全综合实践,提升企业数据安全综合管理能力。
With the continuous improvement of the level of enterprise informatization,the types of enterprise data are more and more involved,the applications are more and more extensive,and the data interaction is more and more complex.In addition,data is the cornerstone of the development of enterprise informationization.From the level of corporate obligations and responsibilities,all efforts should be made to improve the ability of data security management and control.State Grid Shaanxi Electric Power Company in accordance with the Law of the People's Republic of China on Network Security and the Basic Requirements for Security Level Protection of Information Security Technologies and Information Systems(GB-T 22239-2008)and other laws,regulations and institutional requirements,has orderly and sound working mechanism of“technical support,management promotion and goal orientatio”,and continuously and systematically analyzed enterprise data security,and summarize the formation of“multi-level,multi-dimensional,multi-technical measures to achieve”comprehensive practice of data security,improve the ability of integrated management of enterprise data security.
作者
杨海文
高宇
张虹
YANG Haiwen;GAO Yu;ZHANG Hong(State Grid Shaanxi Electric Power Company,Xi’an 710048,China;State Grid Shaanxi Electric Power Company,Electric Power Research Institute,Xi’an 710100,China)
出处
《现代信息科技》
2019年第2期102-105,共4页
Modern Information Technology
关键词
数据安全
等级保护
信息安全技术
网络安全
data security
hierarchical protection
information security technology
network security
