Enterprise supplier information security management method and system

Abstract

The invention discloses an enterprise supplier information security management method and system, and relates to the technical field of information security management, the system realizes automatic integration with a supplier system through a supplier information acquisition module, acquires key data and logs in real time, stores the key data and logs in a database, ensures the timeliness and accuracy of the data, and improves the safety of the supplier system. And a basis is provided for subsequent safety analysis. The preliminary safety analysis module and the compliance and data protection analysis module generate a safety score through a related safety algorithm by using the collected data, calculate a supplier comprehensive safety score Stot through the comprehensive analysis module, compare and evaluate the supplier comprehensive safety score Stot with a safety threshold S, identify a safety short board and generate an improvement suggestion. And through a problem tracking and rectification suggestion module, the system monitors the improvement condition of the supplier in real time, outputs an improvement effectiveness score Eimp and a safety capability improvement score, and automatically executes score deduction or further rectification prompt.

Description

Technical Field

[0001] The present invention relates to the technical field of information security management, and in particular to an enterprise supplier information security management method and system. Background Art

[0002] The enterprise supplier information security management system belongs to the field of information security management, which aims to ensure the confidentiality, integrity and availability of internal and external information of the enterprise, especially in transactions and data processing related to the supply chain. As supply chain management plays an increasingly important role in global enterprise operations, the importance of information security in the supply chain is becoming increasingly prominent. In this specific field, suppliers share access rights to sensitive data or key systems with enterprises, which makes the security of suppliers directly affect the overall security of the enterprise. Therefore, the information security management of suppliers has become an important part of enterprise risk management.

[0003] A significant problem facing enterprises at this stage is the lack of effective tools to continuously evaluate and monitor the security capabilities of suppliers. Traditional supplier security assessments mostly remain at the initial review and static inspection before the contract is signed, and lack monitoring of the supplier's dynamic performance. As the complexity of the supply chain increases, the dependence on suppliers is getting higher and higher, but enterprises often lack real-time means to track suppliers' compliance, security incident response, data protection measures, etc. This static assessment model not only makes it difficult for enterprises to discover potential security risks in a timely manner, but also ignores the dynamic nature of supplier security management, resulting in the accumulation of serious security risks, further threatening the information security of enterprises. Summary of the invention

[0004] In view of the deficiencies in the prior art, the present invention provides an enterprise supplier information security management method and system, which solves the problems mentioned in the background technology.

[0005] To achieve the above objectives, the present invention is implemented through the following technical solutions: including a supplier information collection module, a preliminary security analysis module, a compliance and data protection analysis module, a comprehensive analysis module and a problem tracking and rectification suggestion module; The supplier information collection module is used to set up the API application program interface to integrate with the supplier end and the supplier system log, collect supplier information data and log data in real time, and build a database to store the collected supplier information data and log data in the database; The preliminary security analysis module is used to construct the response capability algorithm formula and the log management capability algorithm formula, and extract the supplier information data and log data in the database, input them into the response capability algorithm formula and the log management capability algorithm formula, and output the response capability score Sres and the log management capability score Slog; The compliance and data protection analysis module is used to construct the compliance deviation rate algorithm formula and the data processing security algorithm formula, and then extract the supplier information data and log data in the database, input them into the compliance deviation rate algorithm formula and the data processing security algorithm formula to calculate and output the compliance score Scom and the data processing security score Sadt; The comprehensive analysis module is used to comprehensively calculate the response capability score Sres, log management capability score Slog, compliance score Scom and data processing security score Sadt, output the supplier comprehensive security score Stot, and perform preliminary comparative evaluation with the preset security threshold S and the obtained supplier comprehensive security score Stot, and generate evaluation results and improvement suggestions; The problem tracking and rectification suggestion module is used to construct the improvement effectiveness algorithm formula, output the improvement effectiveness score Eimp, and set up a secondary evaluation. It combines the improvement effectiveness score Eimp and the supplier's comprehensive safety score Stot to calculate and output the safety capability improvement score Sfin, and conducts a secondary evaluation with the safety threshold S, and executes the deduction plan based on the evaluation results.

[0006] Preferably, the supplier information collection module includes a data collection unit and a data storage unit; The data collection unit integrates with the supplier end and the supplier system log by using the API application program interface provided by the supplier to collect supplier information data and log data in real time; Supplier information data includes data processing security indicator DPP, upstream supplier dependency indicator VDR, compliance deviation rate CDP, data encryption capability indicator Eenc, data storage security capability indicator Esto and external data risk factor Rext; Log data includes the security incident response time TTR, supplier log retention time SLR, incident recurrence probability IRP and authority management capability indicator Eacc; The data processing security indicator DPP is obtained by integrating automated scanning tools to conduct security checks on supplier systems and verify the effectiveness of their security measures; The upstream supplier dependency indicator VDR is collected after obtaining the supplier dependency analysis through a third-party supply chain risk management tool; Compliance Deviation Rate CDP automatically checks the compliance of suppliers by integrating third-party compliance tools, and collects data after calculating the deviation rate; The data encryption capability indicator Eenc obtains detailed information about encryption logs or encryption algorithms through the vendor's security management tools; The data storage security capability indicator Esto reads the supplier's data storage system log to check whether it has adopted data backup and redundancy mechanisms and whether the stored data is encrypted; External data risk factor Rext connects to the supplier's external data interface through API to detect the security of its transmission and potential threats of external connections; The response time (TTR) of security incidents is obtained through statistical analysis of the average response time provided by the vendor based on its internal data, especially the statistical data within a specific time period in the past; Supplier log retention time SLR is connected to the supplier log management system through API, and the system can automatically obtain the relevant configuration of log retention time; The event recurrence probability (IRP) is obtained by automatically reading the supplier's historical event records in the supplier's system and calculating the frequency of similar events. Permission management capability indicator Eacc conducts in-depth scanning and verification through the supplier's network access logs and permission management policies to ensure that the user's permissions are correct and comply with security policies; The data storage unit is used to build a NoSQL database and set a write port and a write-out port. The collected supplier information data and log data are written into the storage table in the database through the write port. The storage table includes a supplier information table and a log retention table. The supplier information table is used to store supplier information data, and the log retention table is used to store log data. The supplier information data and log data are then extracted in real time through the write-out port.

[0007] Preferably, the preliminary security analysis module includes a security incident response capability analysis unit and a log management capability analysis unit; The security incident response capability analysis unit is used to construct a response capability algorithm formula, and then extract the response time TTR of the security incident in the log data through the write port of the database, input it into the response capability algorithm formula, and calculate and output the response capability score Sres; The responsiveness score Sres is calculated by the following responsiveness algorithm formula; ; In the formula, It represents the adjustment factor, which is used to indicate the impact of response time differences. Tideal represents the ideal response time required by the enterprise. The specific value is set by the user. e represents the exponential function.

[0008] Preferably, the log management capability analysis unit is used to construct a log management capability algorithm formula, and then extract the supplier log retention time SLR and the upstream supplier dependency index VDR in the supplier information data and log data through the write port of the database, input them into the log management capability algorithm formula, and calculate and output the log management capability score Slog; The log management capability score Slog is calculated using the following log management capability algorithm formula: ; In the formula, log represents the logarithmic function, Indicates the weight value of the upstream supplier's dependency indicator, and its specific value is set by the user.

[0009] Preferably, the compliance and data protection analysis module includes a compliance deviation rate analysis unit and a data processing security analysis unit; The compliance deviation rate analysis unit is used to construct a compliance deviation rate algorithm formula, and then extract the compliance deviation rate CDP from the supplier information data through the write port of the database, input it into the compliance deviation rate algorithm formula, and calculate and output the compliance score Scom; The compliance score Scom is calculated using the following compliance deviation rate algorithm formula; ; In the formula, n represents the total number of compliance standards, wi represents the weight value of the i-th standard, and CDPi represents the compliance deviation rate CDP of the i-th standard.

[0010] Preferably, the data processing security analysis unit is used to construct a data processing security algorithm formula, extract supplier information data and log data through the write port of the database and input them into the data processing security algorithm formula, and calculate and output the data processing security score Sadt; The data processing security score Sadt is calculated using the following data processing security algorithm formula: ; In the formula, a1, a2 and a3 represent the weight values ​​of the data encryption capability index Eenc, the authority management capability index Eacc and the data storage security capability index Esto respectively. The specific values ​​are set by the user to adjust the importance of each data processing link in the overall security. Represents the adjustment parameter used to control the rate of change of the data processing security algorithm formula. Represents the external data risk coefficient, reflecting the data processing security risk when the supplier interacts with the external system. The larger the value, the higher the risk.

[0011] Preferably, the comprehensive analysis module includes a comprehensive analysis unit and a comprehensive evaluation unit; The comprehensive analysis unit is used to comprehensively calculate the acquired response capability score Sres, log management capability score Slog, compliance score Scom and data processing security score Sadt, and output the supplier comprehensive security score Stot through comprehensive calculation; The supplier's comprehensive safety score Stot is calculated using the following algorithm formula: ; In the formula, represents the supply chain dependency risk score, b1, b2, b3 and b4 represent the preset weight values ​​of the response capability score Sres, the log management capability score Slog, the compliance score Scom and the data processing security score Sadt respectively, b5 represents the weight value of the supply chain dependency risk score, and its specific value is set by the user, and b1+b2+b3+b4+b5=1; The comprehensive assessment unit sets the security threshold S based on the ISO27001 standard in the field of enterprise information security, and then conducts a preliminary comparative assessment with the obtained supplier comprehensive security score Stot, analyzes the results of the supplier comprehensive security score in the supplier information security management system, and generates improvement tips based on the assessment results. The specific assessment contents are as follows; When the supplier's comprehensive security score Stot ≥ security threshold S, it means that the supplier's comprehensive security capabilities meet the security standards set by the enterprise, and real-time security monitoring will continue; When the supplier's comprehensive safety score Stot is less than the safety threshold S, it means that the supplier's comprehensive safety capabilities do not meet the safety standards set by the enterprise. At this time, a rectification prompt is generated to prompt the supplier to make rectifications in accordance with the safety management process.

[0012] Preferably, the problem tracking and rectification suggestion module includes an improvement effect analysis unit and a final analysis unit; The improvement effect analysis unit is used to trigger when the supplier's comprehensive security capabilities are initially assessed to be inconsistent with the security standards set by the enterprise. By constructing an improvement effectiveness algorithm formula, it calculates and outputs the improvement effectiveness score Eimp; The improved effectiveness score Eimp is calculated and obtained by the following improved effectiveness algorithm formula; ;; In the formula, S total-new Indicates the supplier’s latest comprehensive security score, S total-old Indicates the supplier's last comprehensive security score, time improvement Indicates the rectification time.

[0013] Preferably, the final analysis unit includes a supplier final scoring analysis unit and a secondary evaluation unit; The final scoring analysis unit is used to monitor the supplier's information security changes in real time, build the supplier's final scoring formula, and calculate the supplier's information security every 24 hours in combination with the improvement effectiveness score Eimp to output the security capability improvement score Sfin; ; In the formula, Indicates the preset weight value of the improvement effect, Indicates the deduction coefficient for newly discovered security risks. New-risks indicates the newly discovered security risk score, which is a new problem detected by the system through the vendor's security assessment, especially through automated tools or audit processes; The secondary evaluation unit is used to conduct a secondary evaluation based on the obtained security capability improvement score Sfin and the security threshold S, analyze the improved security capability and rectification performance of the supplier, and generate a corresponding deduction mechanism. The specific evaluation contents are as follows; When the security capability improvement score Sfin ≥ the security threshold S, it means that the supplier's security capability and rectification performance are normal. In this case, cooperation should continue and monitoring and re-evaluation should be carried out every 24 hours. When the safety capability improvement score Sfin is less than the safety threshold S, it means that the supplier's safety capability and rectification performance are abnormal. At this time, a deduction mechanism is generated and rectification is prompted again; The deduction mechanism is as follows: When the safety capability improvement score Sfin is less than 10% of the safety threshold S, 2 points will be deducted; When the safety capability improvement score Sfin is less than 30% of the safety threshold S, 5 points will be deducted; When the safety capability improvement score Sfin is less than 80% of the safety threshold S, 15 points will be deducted; When the safety capability improvement score Sfin is less than 100% of the safety threshold S, the remaining score will be deducted and the supplier cooperation will be automatically terminated; The supplier's initial score is set at 20 points, and the supplier cooperation will be automatically terminated after the score is deducted.

[0014] An enterprise supplier information security management method comprises the following steps: S1. Set up an API application program interface to integrate with the supplier side and the supplier system log, collect supplier information data and log data in real time, and build a database to store the collected supplier information data and log data in the database; S2. By constructing a response capability algorithm formula and a log management capability algorithm formula, extracting supplier information data and log data from the database, inputting them into the response capability algorithm formula and the log management capability algorithm formula, and outputting a response capability score Sres and a log management capability score Slog; S3. By constructing a compliance deviation rate algorithm formula and a data processing security algorithm formula, extracting supplier information data and log data from the database, and inputting them into the compliance deviation rate algorithm formula and the data processing security algorithm formula to calculate and output the compliance score Scom and the data processing security score Sadt; S4. Comprehensively calculate the response capability score Sres, log management capability score Slog, compliance score Scom and data processing security score Sadt, output the supplier comprehensive security score Stot, and perform preliminary comparative evaluation with the preset security threshold S and the obtained supplier comprehensive security score Stot, and generate evaluation results and improvement suggestions; S5. Construct the improvement effectiveness algorithm formula, output the improvement effectiveness score Eimp, and set up a secondary evaluation. Combine the improvement effectiveness score Eimp and the supplier's comprehensive safety score Stot to calculate the output safety capability improvement score Sfin, and conduct a secondary evaluation with the safety threshold S. Implement the deduction mechanism based on the evaluation results.

[0015] The present invention provides a method and system for enterprise supplier information security management, which has the following beneficial effects: (1) The system integrates with the log of the supplier system by setting up an API interface to realize the real-time collection of supplier information data and log data, and stores these data in the database. This integration method greatly improves the automation level of supplier data collection and solves the shortcomings of traditional data collection methods that rely on manual labor and have strong lags. Enterprises can accurately understand the security performance of suppliers through automatically collected key data (such as data processing security indicators DPP, upstream supplier dependency indicators VDR, security incident response time TTR, log retention time SLR, etc.), reducing the risk of information distortion or omission. This real-time data collection and storage mechanism ensures that enterprises can monitor the security status of suppliers at any time and improve the overall control of supply chain information security.

[0016] (2) The system can comprehensively analyze the supplier's security performance through a series of algorithmic formulas. The system can conduct a comprehensive assessment based on the supplier's response capability score Sres, log management capability score Slog, compliance score Scom and data processing security score Sadt, and generate a comprehensive supplier security score Stot. By setting the security threshold S, the system can automatically compare the supplier's security score, find out whether there are any security risks, and give corresponding improvement suggestions. This mechanism can not only help enterprises conduct comprehensive and accurate security assessments of suppliers, but also ensure that suppliers continue to meet the security standards set by the enterprise and improve the overall security of the supply chain.

[0017] (3) The system constructs an improvement effectiveness algorithm formula, which can conduct continuous secondary evaluation based on the supplier's comprehensive security score and improvement effect score. When the initial assessment shows that the supplier's security capabilities are insufficient, the system will automatically generate rectification suggestions and conduct a quantitative evaluation of the effectiveness of the rectification Eimp. The system calculates the supplier's rectification time and security capability improvement to generate a security capability improvement score SfinS, and conducts a secondary comparative evaluation with the security threshold S. If the supplier's rectification effect is not good, the system will automatically implement a deduction mechanism and ultimately decide whether to continue to cooperate with the supplier based on the scoring results. Through this automated problem tracking and improvement evaluation, enterprises can effectively track the supplier's rectification progress, significantly improve the supplier's rectification efficiency, and reduce the company's long-term security risks to suppliers. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] Figure 1 This is a flow chart of an enterprise supplier information security management system of the present invention; Figure 2 The present invention is a schematic diagram of the steps of an enterprise supplier information security management method. DETAILED DESCRIPTION

[0019] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0020] Example 1 See also Figure 1 , the present invention provides an enterprise supplier information security management system. To achieve the above purpose, the present invention is implemented through the following technical solutions: including a supplier information collection module, a preliminary security analysis module, a compliance and data protection analysis module, a comprehensive analysis module and a problem tracking and rectification suggestion module; The supplier information collection module is used to set up the API application program interface to integrate with the supplier end and the supplier system log, collect supplier information data and log data in real time, and build a database to store the collected supplier information data and log data in the database; The preliminary security analysis module is used to construct the response capability algorithm formula and the log management capability algorithm formula, and extract the supplier information data and log data in the database, input them into the response capability algorithm formula and the log management capability algorithm formula, and output the response capability score Sres and the log management capability score Slog; The compliance and data protection analysis module is used to construct the compliance deviation rate algorithm formula and the data processing security algorithm formula, and then extract the supplier information data and log data in the database, input them into the compliance deviation rate algorithm formula and the data processing security algorithm formula to calculate and output the compliance score Scom and the data processing security score Sadt; The comprehensive analysis module is used to comprehensively calculate the response capability score Sres, log management capability score Slog, compliance score Scom and data processing security score Sadt, output the supplier comprehensive security score Stot, and perform preliminary comparative evaluation with the preset security threshold S and the obtained supplier comprehensive security score Stot, and generate evaluation results and improvement suggestions; The problem tracking and rectification suggestion module is used to construct the improvement effectiveness algorithm formula, output the improvement effectiveness score Eimp, and set up a secondary evaluation. It combines the improvement effectiveness score Eimp and the supplier's comprehensive safety score Stot to calculate and output the safety capability improvement score Sfin, and conducts a secondary evaluation with the safety threshold S, and executes the deduction plan based on the evaluation results.

[0021] In this embodiment, the system can automatically integrate with the supplier side and the supplier system log through the supplier information collection module, collect the supplier's key data and log data in real time, and store them in the database. This real-time data collection method effectively solves the problems of data lag and incomplete information in traditional supplier management methods, and enterprises can obtain the latest information of suppliers without relying on manual processes. This improvement not only improves the efficiency of information collection, but also ensures the timeliness and accuracy of data, thereby providing a reliable data basis for subsequent security analysis and evaluation. The preliminary security analysis module and the compliance and data protection analysis module use the supplier's information data and log data to output a series of security scores through response capability, log management, compliance deviation rate and data processing security algorithm respectively. These scores are comprehensively calculated by the comprehensive analysis module to generate the supplier's comprehensive security score Stot, and compared and evaluated with the preset security threshold S. Compared with the current single-dimensional security assessment method, the system can conduct a comprehensive analysis and comprehensive assessment of the supplier's security status, accurately identify the supplier's security shortcomings and generate improvement suggestions, and ensure that the supplier continues to meet the standards in multiple key security dimensions. Through the problem tracking and rectification suggestion module, the system can effectively track and improve the supplier's security deficiencies. This module monitors the supplier's safety improvement in real time by constructing an improvement effectiveness algorithm formula, outputs the improvement effectiveness score Eimp, and calculates the safety capability improvement score Sfin in the secondary evaluation. This evaluation result can be used to determine whether the supplier's improvement meets expectations and implement the corresponding deduction plan or further rectification prompts. Compared with traditional manual monitoring and manual evaluation methods, the automated tracking and evaluation mechanism greatly improves the supplier's rectification efficiency and ensures the continuity and effectiveness of supplier safety management in the supply chain.

[0022] Example 2 This embodiment is explained in Example 1, please refer to Figure 1 ,Specifically: the supplier information collection module includes a data collection unit and a data storage unit; The data collection unit integrates with the supplier end and the supplier system log by using the API application program interface provided by the supplier to collect supplier information data and log data in real time; Supplier information data includes data processing security indicator DPP, upstream supplier dependency indicator VDR, compliance deviation rate CDP, data encryption capability indicator Eenc, data storage security capability indicator Esto and external data risk factor Rext; Log data includes the security incident response time TTR, supplier log retention time SLR, incident recurrence probability IRP and authority management capability indicator Eacc; The data processing security indicator DPP is obtained by integrating automated scanning tools to conduct security checks on supplier systems and verify the effectiveness of their security measures; The upstream supplier dependency indicator VDR is collected after obtaining the supplier dependency analysis through a third-party supply chain risk management tool; Compliance Deviation Rate CDP automatically checks the compliance of suppliers by integrating third-party compliance tools, and collects data after calculating the deviation rate; The data encryption capability indicator Eenc obtains detailed information about encryption logs or encryption algorithms through the vendor's security management tools; The data storage security capability indicator Esto reads the supplier's data storage system log to check whether it has adopted data backup and redundancy mechanisms and whether the stored data is encrypted; External data risk factor Rext connects to the supplier's external data interface through API to detect the security of its transmission and potential threats of external connections; The response time (TTR) of security incidents is obtained through statistical analysis of the average response time provided by the vendor based on its internal data, especially the statistical data within a specific time period in the past; Supplier log retention time SLR is connected to the supplier log management system through API, and the system can automatically obtain the relevant configuration of log retention time; The event recurrence probability (IRP) is obtained by automatically reading the supplier's historical event records in the supplier's system and calculating the frequency of similar events. Permission management capability indicator Eacc conducts in-depth scanning and verification through the supplier's network access logs and permission management policies to ensure that the user's permissions are correct and comply with security policies; The data storage unit is used to build a NoSQL database and set a write port and a write-out port. The collected supplier information data and log data are written into the storage table in the database through the write port. The storage table includes a supplier information table and a log retention table. The supplier information table is used to store supplier information data, and the log retention table is used to store log data. The supplier information data and log data are then extracted in real time through the write-out port.

[0023] In this embodiment, the system uses the data collection unit and data storage unit in the supplier information collection module, and the system can integrate with the supplier system through the API interface provided by the supplier to realize the real-time collection and storage of supplier information data and log data. This module comprehensively covers multiple core dimensions of supplier security by collecting key information including data processing security index DPP, upstream supplier dependency index VDR, compliance deviation rate CDP, data encryption capability Eenc, data storage security capability Esto and external data risk coefficient Rext. At the same time, the system can automatically obtain the supplier's security incident response time TTR, log retention time SLR, event recurrence probability IRP and authority management capability Eacc, thereby providing accurate data support for the supplier's security assessment. By building a NoSQL database to store and manage these data, the system realizes efficient data storage and fast call, ensuring real-time and data integrity. Compared with traditional manual data collection and analysis methods, the system significantly improves the automation and accuracy of information collection and solves the problems of data lag and incompleteness.

[0024] Example 3 This embodiment is explained in Example 2. Please refer to Figure 1 ,Specifically: the preliminary security analysis module includes a security incident response ,capability analysis unit and a log management capability analysis unit; The security incident response capability analysis unit is used to construct a response capability algorithm formula, and then extract the response time TTR of the security incident in the log data through the write port of the database, input it into the response capability algorithm formula, and calculate and output the response capability score Sres; The responsiveness score Sres is calculated by the following responsiveness algorithm formula; ; In the formula, It represents the adjustment factor, which is used to indicate the impact of response time differences. Tideal represents the ideal response time required by the enterprise. The specific value is set by the user. e represents the exponential function.

[0025] The log management capability analysis unit is used to construct a log management capability algorithm formula, and then extract the supplier information data and the supplier log retention time SLR and the upstream supplier dependency index VDR in the log data through the write port of the database, input them into the log management capability algorithm formula, and calculate and output the log management capability score Slog; The log management capability score Slog is calculated using the following log management capability algorithm formula: ; In the formula, log represents the logarithmic function, Indicates the weight value of the upstream supplier's dependency indicator, and its specific value is set by the user.

[0026] In this embodiment, the method realizes a preliminary assessment of the supplier's security performance by constructing algorithmic formulas for response capability and log management capability respectively. In the security incident response capability analysis unit, the system calculates the supplier's response capability score Sres by extracting the response time TTR in the log data and combining it with the ideal response time Tideal set by the enterprise. This evaluation method enables enterprises to quickly quantify the supplier's response speed in security incidents and ensure that suppliers can respond in a timely manner when facing security threats. The log management capability analysis unit extracts the supplier's log retention time SLR and the upstream supplier dependency index VDR, and uses logarithmic functions and weight adjustments to calculate the log management capability score Slog to evaluate the supplier's performance in log management and dependency risks. Compared with the traditional method that relies on manual evaluation and static review, the system realizes automated and quantitative supplier security assessment through algorithmic formulas, greatly improving the accuracy and efficiency of the assessment.

[0027] Example 4 This embodiment is explained in Example 2. Please refer to Figure 1 ,Specifically: the compliance and data protection analysis module includes a compliance ,deviation rate analysis unit and a data processing security analysis unit; The compliance deviation rate analysis unit is used to construct a compliance deviation rate algorithm formula, and then extract the compliance deviation rate CDP from the supplier information data through the write port of the database, input it into the compliance deviation rate algorithm formula, and calculate and output the compliance score Scom; The compliance score Scom is calculated using the following compliance deviation rate algorithm formula; ; In the formula, n represents the total number of compliance standards, wi represents the weight value of the i-th standard, and CDPi represents the compliance deviation rate CDP of the i-th standard.

[0028] The data processing security analysis unit is used to construct a data processing security algorithm formula, extract supplier information data and log data through the write port of the database, input them into the data processing security algorithm formula, and calculate and output the data processing security score Sadt; The data processing security score Sadt is calculated using the following data processing security algorithm formula: ; In the formula, a1, a2 and a3 represent the weight values ​​of the data encryption capability index Eenc, the authority management capability index Eacc and the data storage security capability index Esto respectively. The specific values ​​are set by the user to adjust the importance of each data processing link in the overall security. Represents the adjustment parameter used to control the rate of change of the data processing security algorithm formula. Represents the external data risk coefficient, reflecting the data processing security risk when the supplier interacts with the external system. The larger the value, the higher the risk.

[0029] In this embodiment, the system constructs a compliance deviation rate algorithm through the compliance deviation rate analysis unit, which can perform weighted analysis on multiple compliance standards through the supplier's compliance deviation rate CDP, calculate the compliance score Scom, and thus evaluate the supplier's deviation from regulations and industry standards. The data processing security analysis unit uses the supplier's data encryption capability Eenc, authority management capability Eacc, and data storage security capability Esto, combined with the external data risk coefficient, to calculate the data processing security score Sadt to evaluate the supplier's security in key links such as data encryption, authority control, and data storage. This module automatically evaluates the supplier's compliance and data processing security through algorithms, which not only improves the efficiency and accuracy of the evaluation, but also dynamically reflects the supplier's performance in compliance and data security. This improvement enables enterprises to quickly identify suppliers' compliance deficiencies and data security risks, ensure that suppliers always maintain compliance in a changing legal and security environment, and improve the overall supply chain's information security level.

[0030] Example 5 This embodiment is explained in Example 3, please refer to Figure 1 ,Specifically: the comprehensive analysis module includes a comprehensive analysis unit and a comprehensive ,evaluation unit; The comprehensive analysis unit is used to comprehensively calculate the acquired response capability score Sres, log management capability score Slog, compliance score Scom and data processing security score Sadt, and output the supplier comprehensive security score Stot through comprehensive calculation; The supplier's comprehensive safety score Stot is calculated using the following algorithm formula: ; Where, represents the supply chain dependency risk score, b1, b2, b3 and b4 represent the preset weight values ​​of the response capability score Sres, the log management capability score Slog, the compliance score Scom and the data processing security score Sadt respectively, b5 represents the weight value of the supply chain dependency risk score, and its specific value is set by the user, and b1+b2+b3+b4+b5=1; The comprehensive assessment unit sets the security threshold S based on the ISO27001 standard in the field of enterprise information security, and then conducts a preliminary comparative assessment with the obtained supplier comprehensive security score Stot, analyzes the results of the supplier comprehensive security score in the supplier information security management system, and generates improvement tips based on the assessment results. The specific assessment contents are as follows; When the supplier's comprehensive security score Stot ≥ security threshold S, it means that the supplier's comprehensive security capabilities meet the security standards set by the enterprise, and real-time security monitoring will continue; When the supplier's comprehensive safety score Stot is less than the safety threshold S, it means that the supplier's comprehensive safety capabilities do not meet the safety standards set by the enterprise. At this time, a rectification prompt is generated to prompt the supplier to make rectifications in accordance with the safety management process.

[0031] In this embodiment, the system uses a comprehensive analysis unit to weight the response capability score Sres, log management capability score Slog, compliance score Scom and data processing security score Sadt in combination with the supply chain dependency risk score to generate a supplier comprehensive security score Stot, thereby reflecting the overall security status of the supplier. Then, based on industry standards such as ISO27001, the comprehensive assessment unit compares the supplier comprehensive security score Stot with the preset security threshold S, automatically determines whether the supplier's security capabilities meet the company's requirements, and provides improvement suggestions. This module realizes the automation, quantification and dynamicization of supplier security management, significantly improving the accuracy and efficiency of the assessment.

[0032] Example 6 This embodiment is explained in Example 5. Please refer to Figure 1 ,Specifically: the problem tracking and rectification suggestion module includes the ,improvement effect analysis unit and the final analysis unit; The improvement effect analysis unit is used to trigger when the supplier's comprehensive security capabilities are initially assessed to be inconsistent with the security standards set by the enterprise. By constructing an improvement effectiveness algorithm formula, it calculates and outputs the improvement effectiveness score Eimp; The improved effectiveness score Eimp is calculated and obtained by the following improved effectiveness algorithm formula; ; In the formula, S total-new Indicates the supplier’s latest comprehensive security score, S total-old Indicates the supplier's last comprehensive security score, time improvement Indicates the rectification time.

[0033] The final analysis unit includes the supplier final scoring analysis unit and the secondary evaluation unit; The final scoring analysis unit is used to monitor the supplier's information security changes in real time, build the supplier's final scoring formula, and calculate the supplier's information security every 24 hours in combination with the improvement effectiveness score Eimp to output the security capability improvement score Sfin; ; In the formula, Indicates the preset weight value of the improvement effect, Indicates the deduction coefficient for newly discovered security risks. New-risks indicates the newly discovered security risk score, which is a new problem detected by the system through the vendor's security assessment, especially through automated tools or audit processes; The secondary evaluation unit is used to conduct a secondary evaluation based on the obtained security capability improvement score Sfin and the security threshold S, analyze the improved security capability and rectification performance of the supplier, and generate a corresponding deduction mechanism. The specific evaluation contents are as follows; When the security capability improvement score Sfin ≥ the security threshold S, it means that the supplier's security capability and rectification performance are normal. In this case, cooperation should continue and monitoring and re-evaluation should be carried out every 24 hours. When the safety capability improvement score Sfin is less than the safety threshold S, it means that the supplier's safety capability and rectification performance are abnormal. At this time, a deduction mechanism is generated and rectification is prompted again; The deduction mechanism is as follows: When the safety capability improvement score Sfin is less than 10% of the safety threshold S, 2 points will be deducted; When the safety capability improvement score Sfin is less than 30% of the safety threshold S, 5 points will be deducted; When the safety capability improvement score Sfin is less than 80% of the safety threshold S, 15 points will be deducted; When the safety capability improvement score Sfin is less than 100% of the safety threshold S, the remaining score will be deducted and the supplier cooperation will be automatically terminated; The supplier's initial score is set at 20 points, and the supplier cooperation will be automatically terminated after the score is deducted.

[0034] In this embodiment, the system uses an improved effectiveness algorithm formula through an improved effect analysis unit to calculate the latest comprehensive safety score S before and after the supplier's rectification. total-new and the supplier’s last comprehensive safety score S total-old, combined with the rectification time, calculate the improvement effectiveness score Eimp. This process helps enterprises quantify the actual effect of supplier rectification and provide specific improvement evaluations. The final analysis unit monitors and evaluates the supplier's security status every 24 hours, combines the newly discovered security risks, calculates the security capability improvement score Sfin, and compares it with the security threshold S twice. This module automatically triggers the deduction mechanism to ensure that suppliers continue to improve and remain in compliance with corporate security standards. This module implements dynamic monitoring and automated feedback, improves the accuracy of problem tracking and rectification efficiency, and reduces manual intervention. Through the automated scoring and deduction mechanism, enterprises can quickly identify potential risks of suppliers and take timely measures to ensure the continuous optimization and efficient operation of supply chain security management. Example 7 See also Figure 1 and Figure 2 , an enterprise supplier information security management method, comprising the following steps: S1. Set up an API application program interface to integrate with the supplier side and the supplier system log, collect supplier information data and log data in real time, and build a database to store the collected supplier information data and log data in the database; S2. By constructing a response capability algorithm formula and a log management capability algorithm formula, extracting supplier information data and log data from the database, inputting them into the response capability algorithm formula and the log management capability algorithm formula, and outputting a response capability score Sres and a log management capability score Slog; S3. By constructing a compliance deviation rate algorithm formula and a data processing security algorithm formula, extracting supplier information data and log data from the database, and inputting them into the compliance deviation rate algorithm formula and the data processing security algorithm formula to calculate and output the compliance score Scom and the data processing security score Sadt; S4. Comprehensively calculate the response capability score Sres, log management capability score Slog, compliance score Scom and data processing security score Sadt, output the supplier comprehensive security score Stot, and perform preliminary comparative evaluation with the preset security threshold S and the obtained supplier comprehensive security score Stot, and generate evaluation results and improvement suggestions; S5. Construct the improvement effectiveness algorithm formula, output the improvement effectiveness score Eimp, and set up a secondary evaluation. Combine the improvement effectiveness score Eimp and the supplier's comprehensive safety score Stot to calculate the output safety capability improvement score Sfin, and conduct a secondary evaluation with the safety threshold S. Implement the deduction mechanism based on the evaluation results.

[0035] Although embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is defined by the appended claims and their equivalents.

Claims

1. An enterprise supplier information security management system, characterized by: It includes supplier information collection module, preliminary security analysis module, compliance and data protection analysis module, comprehensive analysis module and problem tracking and rectification suggestion module; The supplier information collection module is used to set up an API application program interface to integrate with the supplier end and the supplier system log, collect supplier information data and log data in real time, and build a database to store the collected supplier information data and log data in the database; The preliminary security analysis module is used to construct a response capability algorithm formula and a log management capability algorithm formula, and extract supplier information data and log data from the database, input them into the response capability algorithm formula and the log management capability algorithm formula, and output a response capability score Sres and a log management capability score Slog; The compliance and data protection analysis module is used to construct a compliance deviation rate algorithm formula and a data processing security algorithm formula, and then extract supplier information data and log data from the database, input them into the compliance deviation rate algorithm formula and the data processing security algorithm formula to calculate and output the compliance score Scom and the data processing security score Sadt; The comprehensive analysis module is used to comprehensively calculate the obtained response capability score Sres, log management capability score Slog, compliance score Scom and data processing security score Sadt, output the supplier comprehensive security score Stot, and perform preliminary comparative evaluation with the preset security threshold S and the obtained supplier comprehensive security score Stot, and generate evaluation results and improvement suggestions; The problem tracking and rectification suggestion module is used to construct an improvement effectiveness algorithm formula, output the improvement effectiveness score Eimp, and set a secondary evaluation. Combine the improvement effectiveness score Eimp and the supplier's comprehensive safety score Stot to calculate and output the safety capability improvement score Sfin, and perform a secondary evaluation with the safety threshold S, and execute the deduction plan based on the evaluation results.

2. The enterprise supplier information security management system according to claim 1, characterized in that: The supplier information acquisition module includes a data acquisition unit and a data storage unit; The data collection unit integrates with the supplier end and the supplier system log by using the API application program interface provided by the supplier to collect supplier information data and log data in real time; The supplier information data includes the data processing security index DPP, the upstream supplier dependency index VDR, the compliance deviation rate CDP, the data encryption capability index Eenc, the data storage security capability index Esto and the external data risk factor Rext; The log data includes the security incident response time TTR, the supplier log retention time SLR, the event recurrence probability IRP and the authority management capability index Eacc; The data storage unit is used to build a NoSQL database, and set a write port and a write port. The collected supplier information data and log data are written into a storage table in the database through the write port. The storage table includes a supplier information table and a log retention table. The supplier information table is used to store supplier information data, and the log retention table is used to store log data. The supplier information data and log data are then extracted in real time through the write port.

3. The enterprise supplier information security management system according to claim 2 is characterized by: The preliminary security analysis module includes a security incident response capability analysis unit and a log management capability analysis unit; The security incident response capability analysis unit is used to construct a response capability algorithm formula, and then extract the response time TTR of the security incident in the log data through the write port of the database, input it into the response capability algorithm formula, and calculate and output the response capability score Sres; The responsiveness score Sres is calculated and obtained by the following responsiveness algorithm formula; ; In the formula, It represents the adjustment factor, which is used to indicate the impact of response time differences. Tideal represents the ideal response time required by the enterprise. The specific value is set by the user. e represents the exponential function.

4. The enterprise supplier information security management system according to claim 3 is characterized by: The log management capability analysis unit is used to construct a log management capability algorithm formula, and then extract the supplier log retention time SLR and the upstream supplier dependency index VDR in the supplier information data and log data through the write port of the database, input them into the log management capability algorithm formula, and calculate and output the log management capability score Slog; The log management capability score Slog is calculated by the following log management capability algorithm formula: ; In the formula, log represents the logarithmic function, Indicates the weight value of the upstream supplier's dependency indicator, and its specific value is set by the user.

5. The enterprise supplier information security management system according to claim 1, characterized in that: The compliance and data protection analysis module includes a compliance deviation rate analysis unit and a data processing security analysis unit; The compliance deviation rate analysis unit is used to construct a compliance deviation rate algorithm formula, and then extract the compliance deviation rate CDP in the supplier information data through the write port of the database, input it into the compliance deviation rate algorithm formula, and calculate and output the compliance score Scom; The compliance score Scom is calculated and obtained by the following compliance deviation rate algorithm formula; ; In the formula, n represents the total number of compliance standards, wi represents the weight value of the i-th standard, and CDPi represents the compliance deviation rate CDP of the i-th standard.

6. The enterprise supplier information security management system according to claim 5, characterized in that: The data processing security analysis unit is used to construct a data processing security algorithm formula, extract supplier information data and log data through the write port of the database and input them into the data processing security algorithm formula to calculate and output a data processing security score Sadt; The data processing safety score Sadt is calculated and obtained by the following data processing safety algorithm formula; ; In the formula, a1, a2 and a3 represent the weight values ​​of the data encryption capability index Eenc, the authority management capability index Eacc and the data storage security capability index Esto respectively, and their specific values ​​are set by the user. Represents the adjustment parameter used to control the rate of change of the data processing security algorithm formula. Represents the external data risk factor.

7. The enterprise supplier information security management system according to claim 2, characterized in that: The comprehensive analysis module includes a comprehensive analysis unit and a comprehensive evaluation unit; The comprehensive analysis unit is used to comprehensively calculate the acquired response capability score Sres, log management capability score Slog, compliance score Scom and data processing security score Sadt, and perform comprehensive calculation to output the supplier comprehensive security score Stot; The supplier comprehensive safety score Stot is calculated by the following algorithm formula; ; In the formula, represents the supply chain dependency risk score, b1, b2, b3 and b4 represent the preset weight values ​​of the response capability score Sres, the log management capability score Slog, the compliance score Scom and the data processing security score Sadt respectively, b5 represents the weight value of the supply chain dependency risk score, and its specific value is set by the user, and b1+b2+b3+b4+b5=1; The comprehensive evaluation unit performs a preliminary comparative evaluation with the obtained supplier comprehensive security score Stot through the set security threshold S, analyzes the results of the supplier comprehensive security score in the supplier information security management system, and generates improvement tips based on the evaluation results. The specific evaluation contents are as follows; When the supplier's comprehensive security score Stot ≥ security threshold S, it means that the supplier's comprehensive security capabilities meet the security standards set by the enterprise, and real-time security monitoring will continue; When the supplier's comprehensive safety score Stot is less than the safety threshold S, it means that the supplier's comprehensive safety capabilities do not meet the safety standards set by the enterprise. At this time, a rectification prompt is generated to prompt the supplier to make rectifications in accordance with the safety management process.

8. The enterprise supplier information security management system according to claim 7, characterized in that: The problem tracking and rectification suggestion module includes an improvement effect analysis unit and a final analysis unit; The improvement effect analysis unit is used to be triggered when the supplier's comprehensive security capability is preliminarily evaluated to be not in compliance with the security standards set by the enterprise, and to calculate and output the improvement effectiveness score Eimp by constructing an improvement effectiveness algorithm formula; The improved effectiveness score Eimp is calculated and obtained by the following improved effectiveness algorithm formula; ; In the formula, S total-new Indicates the supplier’s latest comprehensive security score, S total-old Indicates the supplier's last comprehensive security score, time improvement Indicates the rectification time.

9. The enterprise supplier information security management system according to claim 8, characterized in that: The final analysis unit includes a supplier final scoring analysis unit and a secondary evaluation unit; The final scoring analysis unit is used to monitor the supplier information security changes in real time, and to construct a final scoring formula for the supplier, and to calculate the supplier information security and output the security capability improvement score Sfin in combination with the improvement effectiveness score Eimp every 24 hours; ; In the formula, Indicates the preset weight value of the improvement effect, Indicates the newly discovered safety risk deduction coefficient, and new-risks indicates the newly discovered safety risk score; The secondary evaluation unit is used to perform a secondary evaluation based on the obtained security capability improvement score Sfin and the security threshold S, analyze the security capability and rectification performance of the improved supplier, and generate a corresponding deduction mechanism. The specific evaluation contents are as follows; When the security capability improvement score Sfin ≥ the security threshold S, it means that the supplier's security capability and rectification performance are normal. In this case, cooperation should continue and monitoring and re-evaluation should be carried out every 24 hours. When the safety capability improvement score Sfin is less than the safety threshold S, it means that the supplier's safety capability and rectification performance are abnormal. At this time, a deduction mechanism is generated and rectification is prompted again; The deduction mechanism is as follows: When the safety capability improvement score Sfin is less than 10% of the safety threshold S, 2 points will be deducted; When the safety capability improvement score Sfin is less than 30% of the safety threshold S, 5 points will be deducted; When the safety capability improvement score Sfin is less than 80% of the safety threshold S, 15 points will be deducted; When the safety capability improvement score Sfin is less than 100% of the safety threshold S, the remaining score will be deducted and the supplier cooperation will be automatically terminated; The initial score of the supplier is set at 20 points, and the supplier cooperation will be automatically terminated after the score is deducted.

10. An enterprise supplier information security management method, applied to the enterprise supplier information security management system according to any one of claims 1 to 9, characterized in that: The following steps are involved: S1. Set up an API application program interface to integrate with the supplier side and the supplier system log, collect supplier information data and log data in real time, and build a database to store the collected supplier information data and log data in the database; S2. By constructing a response capability algorithm formula and a log management capability algorithm formula, extracting supplier information data and log data from the database, inputting them into the response capability algorithm formula and the log management capability algorithm formula, and outputting a response capability score Sres and a log management capability score Slog; S3. By constructing a compliance deviation rate algorithm formula and a data processing security algorithm formula, extracting supplier information data and log data from the database, and inputting them into the compliance deviation rate algorithm formula and the data processing security algorithm formula to calculate and output the compliance score Scom and the data processing security score Sadt; S4. Comprehensively calculate the response capability score Sres, log management capability score Slog, compliance score Scom and data processing security score Sadt, output the supplier comprehensive security score Stot, and perform preliminary comparative evaluation with the preset security threshold S and the obtained supplier comprehensive security score Stot, and generate evaluation results and improvement suggestions; S5. Construct the improvement effectiveness algorithm formula, output the improvement effectiveness score Eimp, and set up a secondary evaluation. Combine the improvement effectiveness score Eimp and the supplier's comprehensive safety score Stot to calculate the output safety capability improvement score Sfin, and conduct a secondary evaluation with the safety threshold S. Implement the deduction mechanism based on the evaluation results.

Images