A comprehensive audit method for information security

Abstract

The invention discloses an information security comprehensive audit method, comprising: pre-integrating Web Service in the information security comprehensive audit system, and creating a Web Service interface for the one-ticket-two-bill system; The key information of the user is sent to the information security comprehensive audit system; the information security comprehensive audit system stores the key information; the key information includes the user ID; when it is necessary to apply for operation and maintenance authorization for the user, through the Web Service interface, the system will The host information and account information of the operation and maintenance host are sent to the information security comprehensive audit system; the information security comprehensive audit system establishes the user's operation and maintenance authorization. The invention improves the accuracy rate of the audit in the information security comprehensive audit work, effectively reduces the workload of the administrator of the information security comprehensive audit system, and improves the work efficiency.

Description

technical field [0001] The invention relates to the field of electric power, in particular to an information security comprehensive audit method. Background technique [0002] The two tickets (operation ticket, work ticket) are important operating basis for safe production of power system. One order and two tickets system includes the management of more than 20 resource application forms, work tickets and operation tickets, and also covers duty management, inspection and defect management. Through the organic association of work tickets, operation tickets and resource application forms, information operation and maintenance personnel can understand the system changes more comprehensively, integrate inspection work, and facilitate daily operation and maintenance management. [0003] The application of the system of one order and two tickets makes the operation process of the information system more standardized. At the same time, the information security comprehensive audit...

AI Technical Summary

Problems solved by technology

[0008] First of all, after the user approves through one order and two votes, he needs to notify the administrator of the information security comprehensive audit system to perform a series of operations such as user creation, asset addition, and authorization grant; after that, the user can perform system maintenance operations, so that the information security comprehensive Excessive workload for audit system administrators

[0009] In addition, if the user enters the wrong resource application number when performing maintenance operations, the audit records in the information security comprehensive audit system will not be able to correctly link with the correct resource application, resulting in evasion of responsibility for subsequent operations

Images