Risk assessment method, device and equipment and readable storage medium

Abstract

The invention discloses a risk assessment method. The invention discloses a device, equipment and a readable storage medium. The method is based on an information security technology. The method comprises the steps of receiving an assessment request for an IT system, obtaining a to-be-assessed time period based on the assessment request, and obtaining first information corresponding to IT system indexes of the to-be-assessed IT system, second information corresponding to service indexes and third information corresponding to compliance indexes in the to-be-assessed time period; Obtaining eachevaluation standard table from a pre-stored evaluation standard table library to obtain each risk baseline value corresponding to each index; And determining a first risk value corresponding to the first information of the IT system, a second risk value corresponding to the second information and a third risk value corresponding to the third information based on each risk baseline value. Accordingto the risk assessment method based on the information security technology, the technical problem that enterprise risk prevention and control difficulty is high due to the fact that IT system risk prevention and control cannot be accurately and timely conducted in the prior art is solved.

Description

technical field [0001] The present invention relates to the technical field of communications, and in particular to a risk assessment method, device, equipment and a readable storage medium. Background technique [0002] The risks of internal IT systems may come from various dimensions, including IT physical equipment, basic system environment, resource usage, business model, business corresponding to the operation of each product, regulatory compliance and other dimensional indicators. For group enterprises In general, how to prevent and control the risks of internal IT systems has become an urgent problem for enterprises to solve. [0003] In order to solve the problem of risk prevention and control of the IT system within the enterprise, it is necessary to evaluate the risk of the IT system within the enterprise. However, in the existing technology, the evaluation of a certain dimension index in the IT system is artificial, and there is a lack of ability to evaluate the I...

AI Technical Summary

Problems solved by technology

[0004] The main purpose of the present invention is to provide a risk assessment method, device, equipment and readable storage medium, aiming to solve the technical problems in the prior art that the prevention and control of IT system risks cannot be accurately and timely, and the risk prevention and control of enterprises is difficult

Images