Grade-protection-oriented information system security compliance check method

Abstract

The invention relates to the field of information securitygrade protection, and aims at providing a grade-protection-oriented information system security compliance check method. The grade-protection-oriented information system security compliance check method comprises the steps that a check index library is built, a check task or a check plan is defined, a check object is scanned, a check result is guided in, a scanning result is decoded, a scanning result code is decoded, the scanning result is judged, a judgment result is graded, and a grade protection compliance report is generated. According to the method, information system security grade protection check work is objective, standard and fair, and the difficulty and complexity of the information security grade protection check work can be greatly reduced so that the efficiency of the information security grade protection check work can be greatly improved.

Description

technical field

[0001] The invention relates to the field of information security level protection, in particular to a level protection-oriented information system security compliance checking method. Background technique

[0002] Information security level protection is a kind of work that protects information and information carriers according to the level of importance. Information security graded protection evaluation work is an activity in which grade evaluation agencies inspect and evaluate the security grade protection status of non-state secret information systems in accordance with the provisions of the national information security grade protection system and in accordance with relevant management norms and technical standards. The information systems involved in the evaluation of graded protection are wide-ranging and highly sensitive.

[0003] At present, both public security organs and evaluation agencies lack scientific, standardized, objective and efficient t...

Images