Comprehensive information-security audit method

Abstract

The invention discloses a comprehensive information-security audit method which comprises the following steps: integrating a Web Service on a comprehensive information-security audit system in advance, and creating a Web Service interface for a single-note two-list system; sending the created key information of a user to the comprehensive information-security audit system by the Web Service interface in the single-note two-list system, wherein the key information of the user includes the identifier of the user; storing the key information of the user by the comprehensive information-security audit system; sending the information and the account information of an operation and maintenance host to the comprehensive information-security audit system by the Web Service interface in the single-note two-list system when the operation and maintenance authorization needs to be applied for the user; and creating the operation and maintenance authorization of the user by the comprehensive information-security audit system. Due to the adoption of the comprehensive information-security audit method, the comprehensive information-security audit accuracy is improved, and in addition, the work load of a comprehensive information-security audit system manager is effectively reduced and the work efficiency is improved.

Description

technical field [0001] The invention relates to the field of electric power, in particular to an information security comprehensive audit method. Background technique [0002] The two tickets (operation ticket, work ticket) are important operating basis for safe production of power system. One order and two tickets system includes the management of more than 20 resource application forms, work tickets and operation tickets, and also covers duty management, inspection and defect management. Through the organic association of work tickets, operation tickets and resource application forms, information operation and maintenance personnel can understand the system changes more comprehensively, integrate inspection work, and facilitate daily operation and maintenance management. [0003] The application of the system of one order and two tickets makes the operation process of the information system more standardized. At the same time, the information security comprehensive audit...

AI Technical Summary

Problems solved by technology

[0008] First of all, after the user approves through one order and two votes, he needs to notify the administrator of the information security comprehensive audit system to perform a series of operations such as user creation, asset addition, and authorization grant; after that, the user can perform system maintenance operations, so that the information security comprehensive Excessive workload for audit system administrators

[0009] In addition, if the user enters the wrong resource application number when performing maintenance operations, the audit records in the information security comprehensive audit system will not be able to correctly link with the correct resource application, resulting in evasion of responsibility for subsequent operations

Images