Risk management and control platform based on industrial control safety

Abstract

The invention discloses a risk management and control platform based on industrial control safety, a data calling module is in electrical output connection with a data asset planning module, the data asset planning module is in electrical output connection with a risk prediction module, and the risk prediction module is in electrical output connection with a risk level evaluation module. The risk prediction module and the risk grade evaluation module are in electrical input connection with a risk list database, the risk grade evaluation module is in electrical output connection with a risk management and control module, the risk management and control module is in electrical output connection with an asset safety management module and a hidden danger checking module, and the hidden danger checking module is in electrical output connection with a hidden danger summarizing module. The hidden danger checking module and the hidden danger summarizing module are both in electrical output connection with the risk list database, the risk level control condition is mastered in real time, the risk can be graded in real time, the system data assets can be clearly classified and planned, the assets can be conveniently subjected to safety control processing, and the data safety is improved.

Description

Technical Field

[0001] The present invention relates to the technical field of industrial control security risk management and control platforms, and in particular to a risk management and control platform based on industrial control security. Background Art

[0002] Big data refers to a collection of data that cannot be captured, managed, and processed by conventional software tools within a certain time frame. It is a massive, high-growth, and diversified information asset that requires a new processing model to have stronger decision-making power, insight discovery, and process optimization capabilities. At present, when managing data assets, most management and control platforms directly use a single-function management architecture system to manage data assets. However, such a management and control method makes the data source processing irregular, and it is easy to process most invalid data, which makes the processing process chaotic and wastes a lot of manpower and material resources. At the same time, data planning and processing are messy and slow, which often causes data assets to be idle, leading to inefficient decision-making, and cannot achieve rapid cleanup and control of data assets. The purpose of reducing the security risk of data asset processing systems through risk classification cannot be achieved. To this end, we propose a risk management and control platform based on industrial control security. Summary of the invention

[0003] The purpose of the present invention is to provide a risk management and control platform based on industrial control security to solve the problems raised in the above background technology.

[0004] To achieve the above-mentioned purpose, the present invention provides the following technical solutions: a risk management and control platform based on industrial control safety, including a data retrieval module, the data retrieval module is electrically connected to the data asset planning module through an output, the data asset planning module is electrically connected to the risk prediction module through an output, the risk prediction module is electrically connected to the risk level assessment module through an output, and the risk prediction module and the risk level assessment module are both electrically connected to the risk list database through an output, and the risk level assessment module is electrically connected to the risk management and control module through an output, the risk management and control module is electrically connected to the asset safety management module and the hidden danger investigation module respectively through an output, and the hidden danger investigation module is electrically connected to the hidden danger summary module through an output, and the hidden danger investigation module and the hidden danger summary module are both electrically connected to the risk list database through an output.

[0005] Preferably, the risk level assessment module includes a risk identification module, and the risk identification module is electrically connected to the risk classification management module through an output, and the risk classification management module is electrically connected to the data management module through an output.

[0006] Preferably, the risk list database is equipped with a data update unit, and the data update unit is electrically output and connected to the storage repository. The storage repository accumulates big data of project safety risks, so that a safety risk list library containing various professional types of projects can be established. The data update unit regularly updates and maintains the safety risk list library, and gradually improves the content of the list library as data support for the hierarchical management and control of project safety risks.

[0007] Preferably, the data asset planning module includes a data architecture management unit, a data standardization unit, a dimension table standardization unit, a data indicator standardization unit, a data query path planning unit and a data asset operation and maintenance unit, and the output ends of the data architecture management unit, the data standardization unit, the dimension table standardization unit, the data indicator standardization unit and the data query path planning unit are all electrically connected to the data asset operation and maintenance unit.

[0008] Preferably, the risk prediction module reasonably divides the safety risk assessment attributes according to the actual situation of the project, carries out identification of dangerous and harmful factors and manually selects risk content from the safety risk library list in the system. The system will automatically form the level of the safety risk according to the built-in LEC risk evaluation algorithm.

[0009] Preferably, the risk management and control module conducts safety risk point inspections according to the inspection tasks assigned by the system. The corresponding inspection data can be summarized and analyzed, and targeted supervision can be carried out on safety risks at different levels. Inspection lists and plans for safety risks at all levels can be set and distributed, and the hidden danger inspection module can set corresponding inspection categories according to the different safety risk levels, and then form a hidden danger inspection plan.

[0010] Preferably, the asset security management module includes a security policy management unit, a security vulnerability checking unit, a permission application allocation unit and a data security auditing unit.

[0011] Compared with the prior art, the present invention has the following beneficial effects:

[0012] The present invention performs risk classification control based on the engineering control platform, can realize online full-process management and monitoring, grasp the risk level of control in real time, and can classify risks in real time. By establishing a risk list database and citing the contents of the risk list database during risk control, the various safety risks existing in the project can be registered online, and the safety risk levels can be automatically classified, and corresponding safety risk prevention and control measures can be provided. At the same time, combined with the division of each area, the pertinence of safety risk identification of asset data can be effectively improved, and standardized data source processing can be realized to prevent the processing of invalid data and confusion in the processing process, saving a lot of manpower and material resources. At the same time, the system data assets are clearly classified and planned, which is convenient for safety management and control of assets. BRIEF DESCRIPTION OF THE DRAWINGS

[0013] Figure 1 This is a block diagram of the working principle of the present invention;

[0014] Figure 2 This is a block diagram of the risk level assessment module of the present invention. DETAILED DESCRIPTION

[0015] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0016] See also Figure 1 and Figure 2 The present invention provides a technical solution: a risk management and control platform based on industrial control safety, including a data retrieval module, the data retrieval module is electrically connected to a data asset planning module through an output, the data asset planning module is electrically connected to a risk prediction module through an output, the risk prediction module is electrically connected to a risk level assessment module through an output, and the risk prediction module and the risk level assessment module are both electrically connected to a risk list database through an output, and the risk level assessment module is electrically connected to a risk management and control module through an output, the risk management and control module is electrically connected to an asset safety management module and a hidden danger investigation module through an output, and the hidden danger investigation module is electrically connected to a hidden danger summary module through an output, and the hidden danger investigation module and the hidden danger summary module are both electrically connected to a risk list database through an output.

[0017] The risk level assessment module includes a risk identification module, and the risk identification module is electrically connected to the risk classification management module, and the risk classification management module is electrically connected to the data management module;

[0018] The risk list database is provided with a data updating unit, which is electrically connected to the storage repository. The storage repository accumulates the big data of project safety risks, so that a safety risk list library containing various professional types of projects can be established. The data updating unit regularly updates and maintains the safety risk list library, and gradually improves the content of the list library as data support for the hierarchical management and control of project safety risks;

[0019] The data asset planning module includes a data architecture management unit, a data standardization unit, a dimension table standardization unit, a data indicator standardization unit, a data query path planning unit and a data asset operation and maintenance unit, and the output ends of the data architecture management unit, the data standardization unit, the dimension table standardization unit, the data indicator standardization unit and the data query path planning unit are electrically connected to the data asset operation and maintenance unit;

[0020] The risk prediction module reasonably divides the safety risk assessment attributes according to the actual situation of the project, carries out the identification of dangerous and harmful factors, and manually selects the risk content from the safety risk library list in the system. The system will automatically form the level of the safety risk according to the built-in LEC risk assessment algorithm;

[0021] The risk control module carries out security risk point inspection according to the inspection tasks assigned by the system. The corresponding inspection data can be summarized and analyzed, and targeted supervision is carried out on security risks of different levels. Inspection lists and plans for security risks at all levels are set and distributed. The hidden danger inspection module can set corresponding inspection categories according to the different security risk levels, and then form a hidden danger inspection plan;

[0022] The asset security management module includes a security policy management unit, a security vulnerability checking unit, a permission application allocation unit and a data security audit unit;

[0023] Working principle: Based on the data retrieval module of the engineering management and control platform, the data collection and reception of access data is completed. The data asset planning module performs data architecture management, data standardization, dimension table standardization and data query path planning, thereby completing the functional planning and processing of the data. The risk prediction module performs risk classification prediction and control. When risk management is performed, the contents of the risk list library are referenced. Various types of safety risks in the project can be registered online, and the risk level of management can be grasped in real time. Risks can be graded and processed in real time. By establishing a risk list database, asset data can be automatically divided into safety risk levels, and data risk assessment can be completed, so that the risk management module can provide corresponding safety risk prevention and control measures. Safety risk point inspections are carried out according to the inspection tasks assigned by the system. The corresponding inspection data can be summarized and analyzed for unsafe conditions. Targeted supervision is carried out on security risks of the same level, and inspection lists and plans for security risks at all levels are set up and distributed. The hidden danger inspection module can set corresponding inspection categories according to the different security risk levels, and then form a hidden danger inspection plan. At the same time, the asset security management module can effectively improve the targeted identification of security risks of asset data in combination with the division of each area, and can realize standardized data source processing, prevent the processing of invalid data and confusion in the processing process, saving a lot of manpower and material resources. At the same time, the system data assets are clearly classified and planned for processing, which is convenient for the security management and control of assets. The hidden danger summary module can collect and classify the hidden danger types when the asset data risk level is divided, and count them together to facilitate the update of the database, and provide risk level division data basis for subsequent asset data security.

[0024] Although embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is defined by the appended claims and their equivalents.

Claims

1. A risk management and control platform based on industrial control security, characterized by: It includes a data retrieval module, the data retrieval module output is electrically connected to the data asset planning module, the data asset planning module output is electrically connected to the risk prediction module, the risk prediction module output is electrically connected to the risk level assessment module, and the risk prediction module and the risk level assessment module are both electrically connected to the risk list database, and the risk level assessment module output is electrically connected to the risk management module, the risk management module outputs are electrically connected to the asset safety management module and the hidden danger investigation module respectively, and the hidden danger investigation module output is electrically connected to the hidden danger summary module, and the hidden danger investigation module and the hidden danger summary module are both electrically connected to the risk list database.

2. According to claim 1, a risk management and control platform based on industrial control security is characterized in that: The risk level assessment module includes a risk identification module, and the risk identification module is electrically connected to the risk classification management module through an output, and the risk classification management module is electrically connected to the data management module through an output.

3. The risk management and control platform based on industrial control security according to claim 1 is characterized by: The risk list database is equipped with a data update unit, and the data update unit is electrically output and connected to the storage repository. The storage repository accumulates big data of project safety risks, so that a safety risk list library containing various professional types of projects can be established. The data update unit regularly updates and maintains the safety risk list library, and gradually improves the content of the list library as data support for the hierarchical management and control of project safety risks.

4. The risk management and control platform based on industrial control security according to claim 1 is characterized by: The data asset planning module includes a data architecture management unit, a data standardization unit, a dimension table standardization unit, a data indicator standardization unit, a data query path planning unit and a data asset operation and maintenance unit, and the output ends of the data architecture management unit, the data standardization unit, the dimension table standardization unit, the data indicator standardization unit and the data query path planning unit are all electrically connected to the data asset operation and maintenance unit.

5. The risk management and control platform based on industrial control security according to claim 1 is characterized by: The risk prediction module reasonably divides the safety risk assessment attributes according to the actual situation of the project, identifies dangerous and harmful factors, and manually selects risk content from the safety risk library list in the system. The system will automatically form the level of the safety risk according to the built-in LEC risk evaluation algorithm.

6. The risk management and control platform based on industrial control security according to claim 1 is characterized by: The risk management and control module conducts safety risk point inspections based on the inspection tasks assigned by the system. The corresponding inspection data can be summarized and analyzed, and targeted supervision can be carried out on safety risks at different levels. Inspection lists and plans for safety risks at all levels can be set up and distributed. The hidden danger inspection module can set corresponding inspection categories according to the different safety risk levels, and then form a hidden danger inspection plan.

7. The risk management and control platform based on industrial control security according to claim 1 is characterized by: The asset security management module includes a security policy management unit, a security vulnerability checking unit, a permission application allocation unit and a data security auditing unit.

Images