Enterprise safety management maturity evaluation method and system and related equipment

Abstract

The invention discloses an enterprise safety management maturity evaluation method and system and related equipment. The method comprises the following steps: constructing a multi-dimensional quantitative evaluation model of enterprise safety management maturity; the method comprises the following steps: collecting multi-dimensional index data of enterprise safety management, wherein the multi-dimensional index data comprises strategic index data, system index data, cultural index data and performance index data; carrying out weight-based comprehensive index score operation on the multi-dimensional index data through a multi-dimensional quantitative evaluation model to obtain a maturity evaluation score; and obtaining the level grade of the enterprise safety management maturity based on the numerical value interval of the maturity evaluation score in the level grade division table. According to the evaluation method, starting from multiple index dimensions such as enterprise strategy, system, culture and performance, comprehensive scoring is performed based on weights by using the constructed multi-dimensional quantitative evaluation model, the output evaluation result is more representative, and a reference basis can be better provided for subsequent improvement of enterprises.

Description

Technical Field

[0001] The present invention relates to the field of enterprise safety management, and particularly to an evaluation method, system and related equipment for the maturity of enterprise safety management. Background Art

[0002] The evaluation of an enterprise's safety management level is of great significance in aspects such as accident prevention, ensuring employee safety, meeting legal and regulatory requirements, improving enterprise management level, and enhancing information security. At present, the quantitative evaluation method of an enterprise's safety management level mainly uses the daily basic data of enterprise safety management as the evaluation data source, and the evaluation of the enterprise's safety management level is not comprehensive enough, the obtained evaluation is not representative enough, and the reference significance for the improvement of enterprise safety management is limited.

[0003] Therefore, the existing technology still needs to be improved and developed. Summary of the Invention

[0004] The present invention provides an evaluation method, system and related equipment for the maturity of enterprise safety management, aiming to solve the technical problems mentioned in the above background art existing in the existing quantitative evaluation method of enterprise safety management level.

[0005] In the first aspect of the present invention, an evaluation method for the maturity of enterprise safety management is provided. The evaluation method for the maturity of enterprise safety management includes:

[0006] Construct a multi-dimensional quantitative evaluation model for the maturity of enterprise safety management;

[0007] Collect multi-dimensional index data of enterprise safety management, where the multi-dimensional index data includes strategic index data, system index data, cultural index data, and performance index data;

[0008] Perform a comprehensive index score operation based on weights on the multi-dimensional index data through the multi-dimensional quantitative evaluation model to obtain a maturity evaluation score;

[0009] Obtain the level of the maturity of enterprise safety management based on the numerical interval where the maturity evaluation score is located in the maturity level grading table.

[0010] In an optional implementation manner of the first aspect of the present invention, the evaluation method for the maturity of enterprise safety management further includes:

[0011] Analyze the multi-dimensional index data through a pre-set AI intelligent analysis tool to generate analysis charts for each index;

[0012] Obtain the problems existing in enterprise safety management based on the analysis charts;

[0013] Conduct root cause analysis on the issues and obtain suggestions for improving enterprise security management;

[0014] The obtained maturity assessment score, the level of enterprise security management maturity, the analysis charts of each indicator, the problems existing in enterprise security management and the improvement suggestions are visually displayed.

[0015] In an optional implementation of the first aspect of the present invention, the multi-dimensional indicator data of enterprise security management is collected, and the multi-dimensional indicator data includes strategic indicator data, system indicator data, cultural indicator data, and performance indicator data, including:

[0016] For the strategic indicator data, the system indicator data and the cultural indicator data, a percentage-based questionnaire of each indicator is loaded from a preset database;

[0017] Distribute the percentage-based questionnaires for each indicator to the enterprise self-assessment team and / or external audit expert team for evaluation and scoring;

[0018] Based on the evaluation and scoring results of the percentage-based questionnaire for each indicator, the average value of the valid scores of each indicator is obtained, and the average value of each indicator is used as the individual score of each indicator;

[0019] For the performance indicator data, basic data is obtained based on the enterprise safety management basic data collection list;

[0020] The basic data is processed by a preset performance evaluation algorithm to obtain individual scores of performance indicators.

[0021] In an optional implementation of the first aspect of the present invention, performing a weighted comprehensive indicator score calculation on the multidimensional indicator data using the multidimensional quantitative evaluation model to obtain a maturity evaluation score includes:

[0022] Obtaining a first individual score and a first weight coefficient of the strategic indicator data;

[0023] Determining a first individual score level of the strategic indicator data based on a preset indicator level classification table and the first individual score;

[0024] Obtaining a second individual score and a second weight coefficient of the system indicator data;

[0025] Determining a second individual score level of the system indicator data based on the preset indicator level classification table and the second individual score;

[0026] Obtaining a third individual score and a third weight coefficient of the cultural indicator data;

[0027] Determining the third individual score level of the cultural indicator data based on the preset indicator level classification table and the third individual score;

[0028] Obtaining a fourth individual score and a fourth weight coefficient of the performance indicator data;

[0029] Based on the preset indicator grade classification table and the fourth individual score, the fourth individual score grade of the performance indicator data is determined.

[0030] In an optional implementation of the first aspect of the present invention, performing a weighted comprehensive indicator score calculation on the multidimensional indicator data using the multidimensional quantitative evaluation model to obtain a maturity evaluation score further includes:

[0031] Obtaining a first weighted score for the strategic indicator data based on the first individual score, the first individual score level, and the first weight coefficient;

[0032] Obtaining a second weighted score for the system indicator data based on the second individual score, the second individual score level, and the second weight coefficient;

[0033] Obtaining a third weighted score for the cultural indicator data based on the third individual score, the third individual score level, and the third weight coefficient;

[0034] Obtaining a fourth weighted score for the performance indicator data based on the fourth individual score, the fourth individual score level, and the fourth weight coefficient;

[0035] calculating a sum of the first weighted score, the second weighted score, the third weighted score, and the fourth weighted score;

[0036] The sum is converted into a percentage system to obtain a maturity assessment score.

[0037] In an optional implementation of the first aspect of the present invention, analyzing the multi-dimensional indicator data using a preset AI intelligent analysis tool to generate analysis charts for each indicator includes:

[0038] For each dimension indicator data, the target statistical parameters are calculated through the dynamic indicator calculation engine;

[0039] The target statistical parameters are analyzed by using a chain iteration method combined with a Gini coefficient algorithm to obtain an expansion dimension parameter;

[0040] Based on the parameter characteristics of the target statistical parameters and the expanded dimension parameters, intelligent chart matching is performed to generate analysis charts of the indicator data of each dimension.

[0041] In an optional implementation of the first aspect of the present invention, before constructing the multi-dimensional quantitative assessment model of enterprise security management maturity, the steps include:

[0042] Taking motivation and cause, strategic analysis, strategic planning and strategic management as the four first-level elements, and subdividing each first-level element into several second-level elements, and configuring several evaluation contents and assigning scoring points for each second-level element, a percentage-based questionnaire is constructed to obtain the strategic indicator data;

[0043] Taking several first-level elements related to the enterprise system as system indicators, and subdividing each of the first-level elements into several second-level elements, and configuring several evaluation contents and assigning scoring scores for each of the second-level elements, to construct a percentage-based questionnaire related to the enterprise system;

[0044] Several dimensions related to corporate culture are used as cultural indicators, and each dimension is divided into five stages: pathological, passive, institutional, proactive, and innovative. Each stage is described and scored, and a percentage-based questionnaire is constructed to obtain the cultural indicator data.

[0045] Action indicators and result indicators are used as main indicators, and the action indicators are subdivided into system sub-indicators, capability sub-indicators and action sub-indicators. The result indicators are divided into accident sub-indicators, and each sub-indicator is configured with multiple basic data of enterprise safety management and assigned indicator target values, and a data collection form for obtaining the performance indicator data is constructed.

[0046] A second aspect of the present invention provides an enterprise security management maturity assessment system, the enterprise security management maturity assessment system comprising:

[0047] Model building module, used to build a multi-dimensional quantitative assessment model for enterprise security management maturity;

[0048] A data collection module is used to collect multi-dimensional indicator data of enterprise security management, including strategic indicator data, system indicator data, cultural indicator data, and performance indicator data;

[0049] A scoring acquisition module is used to perform a weighted comprehensive indicator scoring operation on the multi-dimensional indicator data through the multi-dimensional quantitative evaluation model to obtain a maturity evaluation score;

[0050] The level acquisition module is used to obtain the level of enterprise security management maturity based on the numerical interval of the maturity assessment score in the maturity level classification table.

[0051] A third aspect of the present invention provides an evaluation device for the maturity of enterprise security management. The evaluation device for the maturity of enterprise security management includes: a memory and at least one processor. Instructions are stored in the memory, and the memory and the at least one processor are interconnected by a line;

[0052] The at least one processor invokes the instructions in the memory to enable the evaluation device for the maturity of enterprise security management to execute the evaluation method for the maturity of enterprise security management as described in any one of the first aspects of the present invention.

[0053] A fourth aspect of the present invention provides a computer-readable storage medium. A computer program is stored on the computer-readable storage medium, and when the computer program is executed by a processor, it implements the evaluation method for the maturity of enterprise security management as described in any one of the first aspects of the present invention.

[0054] Beneficial effects: The present invention discloses an evaluation method, system and related devices for the maturity of enterprise security management. The method includes constructing a multi-dimensional quantitative evaluation model for the maturity of enterprise security management; collecting multi-dimensional index data of enterprise security management, where the multi-dimensional index data includes strategic index data, system index data, cultural index data, and performance index data; performing a weighted comprehensive index score operation on the multi-dimensional index data through the multi-dimensional quantitative evaluation model to obtain a maturity evaluation score; and obtaining the level grade of the maturity of enterprise security management based on the numerical interval where the maturity evaluation score is located in the level grade division table. The evaluation method of the present invention starts from multiple index dimensions such as enterprise strategy, system, culture, and performance, and then uses the constructed multi-dimensional quantitative evaluation model to perform a comprehensive score based on weights. The output evaluation result is more representative and can better provide a reference basis for the subsequent improvement of the enterprise. Description of the Drawings

[0055] Figure 1 It is a schematic diagram of the evaluation method for the maturity of enterprise security management in an embodiment of the present invention;

[0056] Figure 2 It is a schematic diagram of the index composition of the multi-dimensional quantitative evaluation model in an embodiment of the present invention;

[0057] Figure 3 It is a schematic diagram of the evaluation questionnaire for the strategic index data in an embodiment of the present invention;

[0058] Figure 4 It is a schematic diagram of the single-index grade division table in an embodiment of the present invention;

[0059] Figure 5 It is a schematic diagram of the maturity level grade division table in an embodiment of the present invention;

[0060] Figure 6 A schematic diagram of an enterprise security management maturity assessment system according to an embodiment of the present invention;

[0061] Figure 7 A schematic diagram of a device for evaluating enterprise security management maturity in an embodiment of the present invention. DETAILED DESCRIPTION

[0062] The embodiments of the present invention provide a method, system and related equipment for evaluating the maturity of enterprise security management.

[0063] The following describes embodiments of the present disclosure in more detail with reference to the accompanying drawings. Although certain embodiments of the present disclosure are shown in the accompanying drawings, it should be understood that the present disclosure can be implemented in various forms and should not be construed as limited to the embodiments described herein. Rather, these embodiments are provided to provide a more thorough and complete understanding of the present disclosure. It should be understood that the drawings and embodiments of the present disclosure are for illustrative purposes only and are not intended to limit the scope of protection of the present disclosure.

[0064] In the description of the embodiments disclosed herein, the term "including" and similar terms should be understood as open inclusion, i.e., "including but not limited to." The term "based on" should be understood as "based, at least in part, on." The term "one embodiment" or "the embodiment" should be understood as "at least one embodiment." The terms "first," "second," etc. may refer to different or the same objects. Other explicit and implicit definitions may also be included below.

[0065] For ease of understanding, the specific process of the embodiment of the present invention is described below. Figure 1 In a first aspect, the present invention provides a method for evaluating enterprise security management maturity, the method comprising:

[0066] S100. Construct a multi-dimensional quantitative evaluation model for enterprise security management maturity. In the present invention, a multi-dimensional quantitative evaluation model for enterprise security management maturity is constructed mainly based on the principle of the Balanced Scorecard (BSC). By dynamically associating the four-dimensional indicators of "strategic indicators, system indicators, cultural indicators, and performance indicators" and the "comprehensive indicator of quantitative security management maturity" (referred to as "comprehensive indicator"), the enterprise security management capability is evaluated. The indicator composition of the multi-dimensional quantitative evaluation model of the present invention can be as follows: Figure 2 shown.

[0067] In the present invention, since the enterprise safety management maturity evaluation model mainly consists of four-dimensional indicators of "strategic indicators, system indicators, cultural indicators, and performance indicators", it is necessary to clarify the composition of sub-elements, element descriptions, element scoring criteria and rules, element weights, scoring principles, etc. of the four-dimensional evaluation indicators before constructing the model. That is, in an optional implementation manner of the first aspect of the present invention, before constructing the multi-dimensional quantitative evaluation model of enterprise safety management maturity, it includes:

[0068] Taking motivation and cause, strategic analysis, strategic planning, and strategic management as four primary elements, and subdividing each of the primary elements into several secondary elements, and configuring several evaluation contents and assigning scoring values for each of the secondary elements to construct a 100-point questionnaire for the strategic indicator data; A specific implementation scenario for this step, for example, can be setting the quantitative content of strategic indicators to include 4 primary elements of "motivation and cause, strategic analysis, strategic planning, and strategic management", and further subdividing 10 secondary elements on the basis of the primary elements. 3 evaluation contents are set for each secondary element, and the scoring value for each item is 0 points or 2 points. And a corresponding evaluation questionnaire is set, and the evaluation questionnaire for the strategic indicator data can be as Figure 3 shown.

[0069] Taking several primary elements related to the enterprise system as system indicators, and subdividing each of the primary elements into several secondary elements, and configuring several evaluation contents and assigning scoring values for each of the secondary elements to construct a 100-point questionnaire for the enterprise system-related; A specific implementation scenario for this step, for example, can be setting the quantitative evaluation content of system indicators to include 15 primary elements and 45 secondary elements, and setting evaluation contents and a scoring standard of six grades from 0 to 5 points for each secondary element. At the same time, a corresponding evaluation questionnaire is set, and the questionnaire format is similar to that of the strategic indicator data.

[0070] Taking several dimensional elements related to corporate culture as cultural indicators, and dividing each of the dimensional elements into five stages of pathological type, passive type, institutional type, active type, and innovative type, and configuring stage characteristic descriptions and assigning scoring values for each stage to construct a 100-point questionnaire for the cultural indicator data; A specific implementation scenario for this step, for example, can be setting the quantitative evaluation content of cultural indicators to include 18 dimensional elements, and setting a total of five different maturity stages of "pathological type, passive type, institutional type, active type, and innovative type" for each dimension, and describing their characteristics and scoring standards. The five stages progress step by step and correspond to 1 to 5 points respectively. At the same time, a corresponding evaluation questionnaire is set.

[0071] Taking action indicators and result indicators as the main category indicators, and subdividing the action indicators into system sub-indicators, ability sub-indicators, and action sub-indicators, and dividing the result indicators into accident sub-indicators, and configuring multiple basic data of enterprise safety management for each sub-indicator and assigning indicator target values to construct the data collection form of the performance indicator data. A specific implementation scenario of this step by way of example can be that the quantitative evaluation content of the performance indicators is set to include action indicators and result indicators. Among them, the action indicators include 3 sub-category indicators of "system category (25%), ability category (25%), action category (25%)", and the result indicators include 1 sub-category indicator item of "accident category (25%)". The 4 sub-category indicators all account for 25% of the performance indicator weight. Each sub-category indicator is further subdivided into multiple basic data of enterprise safety management, such as: the actual completed employee training duration and the planned completed training duration, the hidden danger rectification rate, the actual number of safety accident incidents and the target value, etc. The scores of each indicator are calculated by the relevant data in the enterprise safety management basic data collection list according to the algorithm.

[0072] S200. Collect multi-dimensional indicator data of enterprise safety management. The multi-dimensional indicator data includes strategic indicator data, system indicator data, cultural indicator data, and performance indicator data; in the present invention, an enterprise applies to register and deploy the enterprise safety management maturity evaluation system of the method of the present invention, and synchronizes internal employee accounts, enterprise grass-roots safety management data information, etc. with the existing enterprise management system, and at the same time, the system can add external expert accounts. The enterprise quantitative safety management evaluation system use management department can initiate an organizational review task, including: self-evaluation by enterprise employees and external expert review; the personnel receiving the task in the system can complete various evaluation questionnaires in the system.

[0073] In an optional implementation manner of the first aspect of the present invention, the collection of multi-dimensional indicator data of enterprise safety management, the multi-dimensional indicator data includes strategic indicator data, system indicator data, cultural indicator data, and performance indicator data includes:

[0074] For the strategic indicator data, the system indicator data, and the cultural indicator data, load the 100-point questionnaires for each indicator from a pre-set database; distribute the 100-point questionnaires for each indicator to the enterprise self-evaluation group and / or the external audit expert group for evaluation and scoring; based on the evaluation and scoring results of the 100-point questionnaires for each indicator, obtain the average value of the valid scores for each indicator, and use the average value of each indicator as the single-item score for each indicator. In the present invention, during enterprise self-evaluation, the'management strategy indicators, system indicators, and cultural indicators' are self-evaluated and scored by the management; during external audit, the'management strategy indicators, system indicators, and cultural indicators' are evaluated and scored by the members of the external audit expert group; the final result of multiple people participating in the evaluation of a single indicator is the average value of the valid scores. (Invalid scores refer to those where all the questions submitted in a single indicator questionnaire are the same option and the answering time is less than 50% of the average answering time recorded by the system, which is determined to be invalid.)

[0075] For the performance indicator data, obtain the basic data based on the enterprise safety management basic data collection list; process the basic data through a pre-set performance evaluation algorithm to obtain the single-item score of the performance indicator. In the present invention, the 'performance indicators' are mainly calculated by the system through the associated basic data of enterprise safety management and built-in evaluation algorithms. The single-item scores of the above four-dimensional indicators are obtained by converting the evaluation results using a 100-point system. Generally speaking, the system for evaluating the maturity of enterprise safety management in the present invention can integrate enterprise safety management system texts, management and operation records, and employee behavior data (i.e., enterprise safety management basic data) from other relevant systems, combined with the evaluation inputs of evaluators (enterprise employees and / or external experts) on the actual situation of enterprise safety management in multiple dimensions ('strategic indicators, system indicators, cultural indicators').

[0076] S300. Perform a weighted comprehensive indicator score operation on the multi-dimensional indicator data through the multi-dimensional quantitative evaluation model to obtain the maturity evaluation score; simply put, the core algorithm of the evaluation method for the maturity of enterprise safety management in the present invention mainly maps strategic indicators, system indicators, cultural indicators, and performance indicators to a quantitative comprehensive indicator of safety management maturity through weight assignment and dynamic calibration.

[0077] In an optional implementation manner of the first aspect of the present invention, the performing a weighted comprehensive indicator score operation on the multi-dimensional indicator data through the multi-dimensional quantitative evaluation model to obtain the maturity evaluation score includes:

[0078] Obtain the first single-item score and the first weight coefficient of the strategic indicator data; based on a pre-set indicator level division table and the first single-item score, determine the first single-item score level of the strategic indicator data; then obtain the first weighted score of the strategic indicator data based on the first single-item score, the first single-item score level, and the first weight coefficient.

[0079] Obtain the second single score and the second weight coefficient of the system index data; based on the preset index level division table and the second single score, determine the second single score level of the system index data; then obtain the second weighted score of the system index data based on the second single score, the second single score level and the second weight coefficient.

[0080] Obtain the third single score and the third weight coefficient of the cultural index data; based on the preset index level division table and the third single score, determine the third single score level of the cultural index data; then obtain the third weighted score of the cultural index data based on the third single score, the third single score level and the third weight coefficient.

[0081] Obtain the fourth single score and the fourth weight coefficient of the performance index data; based on the preset index level division table and the fourth single score, determine the fourth single score level of the performance index data; then obtain the fourth weighted score of the performance index data based on the fourth single score, the fourth single score level and the fourth weight coefficient.

[0082] Calculate the sum of the first weighted score, the second weighted score, the third weighted score and the fourth weighted score; finally, convert the sum to a percentage system to obtain the maturity evaluation score.

[0083] Generally speaking, the present invention determines the levels of each four-dimensional index by comparing the single scores of the four-dimensional indexes obtained through evaluation with the single index level division table (as shown in Figure 4 ); convert the single scores of the four-dimensional indexes according to the formula "level × weight × 100 = score", and the comprehensive index score (in thousand-point system) of the enterprise safety management maturity is equal to the sum of the converted single scores of the four-dimensional indexes, and then convert it to a percentage score. That is: the comprehensive index score (in percentage system) of the enterprise safety management maturity = (strategic index score + system index score + cultural index score + performance index score) / 1000*100.

[0084] S400. Based on the numerical interval where the maturity evaluation score is located in the maturity level division table, obtain the level of the enterprise safety management maturity. An exemplary maturity level division table of the present invention can be as shown in Figure 5 ; after obtaining the maturity evaluation score by the technical solution of the present invention, the corresponding level can be obtained in the maturity level division table.

[0085] In an optional implementation manner of the first aspect of the present invention, the evaluation method for the enterprise safety management maturity further includes:

[0086] S500. Analyze the multi-dimensional indicator data through a preset AI intelligent analysis tool to generate analysis charts for each indicator; in an optional implementation of this step of the present invention, this step may include: for each dimensional indicator data, calculate the target statistical parameters through a dynamic indicator calculation engine; use a chain iteration method in combination with a Gini coefficient algorithm to analyze the target statistical parameters to obtain extended dimension parameters; perform intelligent chart matching based on the parameter characteristics of the target statistical parameters and the extended dimension parameters to generate analysis charts for each dimensional indicator data. In the present invention, it is also possible to integrate multi-source heterogeneous data (such as text, time series data, images) from enterprise security management systems, IoT devices, work order logs, employee behavior monitoring, etc. through preset AI tools. Use the ETL process to clean and standardize the data, such as processing missing values and normalizing indicator units to ensure data consistency.

[0087] S600: Obtaining existing enterprise security management issues based on the analysis chart. In this step, a chain iterative analysis method can be used to decompose core security indicators and identify key influencing factors. Simultaneously, a Gini coefficient algorithm is used to analyze the contribution of each dimension to indicator fluctuations, screening for root causes of highly explanatory dimensions.

[0088] S700: Analyze the root causes of the problem and obtain improvement suggestions for enterprise security management. In this invention, an LSTM model based on time series data is used to predict future security risk trends, and clustering algorithms (such as DBSCAN) are combined to mine the correlations between abnormal events. Natural Language Processing (NLP) technology is used to analyze work order text, identify high-frequency keywords, and construct a risk knowledge graph.

[0089] S800, visualize the obtained maturity assessment score, the level of enterprise security management maturity, the analysis charts of each indicator, the problems existing in enterprise security management, and the improvement suggestions. After completing the above-mentioned assessment and data collection, the quantitative security management assessment system of the present invention will automatically update the enterprise security management maturity assessment score and maturity level through the above-mentioned algorithm model; analyze the assessment process data with the help of the embedded AI intelligent analysis tool, generate analysis charts for each indicator, and identify the problems and advantages in enterprise security management, conduct root cause analysis on the problems found, identify the space for future improvement, etc. With the help of AI intelligent analysis tools, conduct comparative analysis on the enterprise security management maturity assessment results at different time nodes (such as quarterly and annual), and summarize the enterprise's security management improvement items and security situation. With the help of AI intelligent analysis tools, conduct benchmarking analysis on the security management maturity assessment results of different enterprises, summarize the gaps in security management with the benchmarked enterprises, and output a benchmarking gap analysis report.

[0090] Generally speaking, the technical solution of the present invention provides a set of evaluation index systems, algorithm models and safety management maturity level grading standards for enterprise quantitative safety management maturity. The invention constructs a multi-dimensional quantitative evaluation model for enterprise safety management maturity based on the principle of the Balanced Scorecard (BSC). By dynamically associating the four-dimensional indicators of "strategic indicators, system indicators, cultural indicators, and performance indicators" and the "comprehensive indicator of quantitative safety management maturity" (hereinafter referred to as the "comprehensive indicator"), a panoramic digital diagnosis of the enterprise's safety management ability is realized, and an implementable improvement path is output. The four-dimensional indicators are designed in combination with the current enterprise safety management system framework, with multiple evaluation elements, rules and scoring criteria, and are set up as a set of basic evaluation questionnaires and enterprise safety management basic data collection lists; by organizing internal employees of the enterprise to conduct self-evaluations, external expert reviews, and associating safety management data in other systems of the enterprise, as the input of the quantitative safety management maturity evaluation system, and using the built-in quantitative safety evaluation algorithm model and artificial intelligence algorithm technology in the system for calculation, a quantitative digital evaluation of the current enterprise safety management maturity is realized, and the score and rating of the enterprise quantitative safety maturity, the advantages and disadvantages of safety management, etc. are output. This method is based on the four-dimensional indicator system of quantitative safety maturity, quantifies enterprise safety management procedures, technologies and processes, etc., realizes the quantitative evaluation of the enterprise's safety management level, analyzes the evaluation process data with the help of the embedded AI intelligent analysis tool, generates analysis charts for each indicator, and identifies the problems and advantageous areas existing in the enterprise's safety management, helping the enterprise to implement more scientific safety performance assessment and providing safety management data support for enterprise decision-making. This method and system provide technical support and data basis for the application of AI intelligent technology in enterprise safety management.

[0091] Technical effects of the present invention: Improvement in evaluation objectivity: Through the quantitative algorithm model, subjective and macroscopic empirical judgments are converted into data-based scores (error rate ≤ 5%); Formation of a management closed-loop: The entire process of "evaluation - analysis - improvement" is automated, and the enterprise's rectification response efficiency is increased by more than 40%; Industry adaptability: It supports the evaluation of the safety management maturity of large and medium-sized comprehensive group enterprises, and is also applicable to the parameter customization of enterprises in specific industries such as manufacturing, construction, warehousing and logistics, and commercial properties. The evaluation system is compatible with domestic and international standards such as GB / T 33000 and ISO45001.

[0092] See Figure 6 , the second aspect of the present invention provides an evaluation system for enterprise safety management maturity, and the evaluation system for enterprise safety management maturity includes:

[0093] A model construction module 10, configured to construct a multi-dimensional quantitative evaluation model for enterprise safety management maturity;

[0094] A data collection module 20, configured to collect multi-dimensional index data of enterprise security management, where the multi-dimensional index data includes strategic index data, system index data, cultural index data, and performance index data;

[0095] A score acquisition module 30, configured to perform an operation on the multi-dimensional index data to obtain a comprehensive index score based on weights through the multi-dimensional quantitative evaluation model, and obtain a maturity evaluation score;

[0096] A level acquisition module 40, configured to obtain the level of enterprise security management maturity based on the numerical range where the maturity evaluation score is located in the maturity level grading table.

[0097] In an alternative embodiment of the second aspect of the present invention, the evaluation system for enterprise security management maturity further includes:

[0098] A data analysis module, configured to analyze the multi-dimensional index data through a pre-set AI intelligent analysis tool to generate analysis charts for each index;

[0099] A problem generation module, configured to obtain the problems existing in enterprise security management based on the analysis charts;

[0100] A suggestion generation module, configured to perform a root cause analysis on the problems to obtain improvement suggestions for enterprise security management;

[0101] A data display module, configured to visually display the obtained maturity evaluation score, the level of enterprise security management maturity, the analysis charts for each index, the problems existing in enterprise security management, and the improvement suggestions.

[0102] In an alternative embodiment of the second aspect of the present invention, the data collection module includes:

[0103] A questionnaire data evaluation unit, configured to, for the strategic index data, the system index data, and the cultural index data, load a hundred-mark questionnaire for each index from a pre-set database; distribute the hundred-mark questionnaires for each index to the enterprise self-evaluation group and / or the external audit expert group for evaluation and scoring; based on the evaluation and scoring results of the hundred-mark questionnaires for each index, obtain the average value of the valid scores for each index, and use the average value of each index as the single score for each index;

[0104] A basic data evaluation unit, configured to, for the performance index data, obtain basic data based on a basic data collection list for enterprise security management; process the basic data through a pre-set performance evaluation algorithm to obtain the single score of the performance index.

[0105] In an alternative embodiment of the second aspect of the present invention, the score acquisition module includes:

[0106] A strategic index related parameter acquisition unit, configured to acquire a first single-item score and a first weight coefficient of the strategic index data; and determine a first single-item score level of the strategic index data based on a preset index level division table and the first single-item score;

[0107] A system index related parameter acquisition unit, configured to acquire a second single-item score and a second weight coefficient of the system index data; and determine a second single-item score level of the system index data based on the preset index level division table and the second single-item score;

[0108] A cultural index related parameter acquisition unit, configured to acquire a third single-item score and a third weight coefficient of the cultural index data; and determine a third single-item score level of the cultural index data based on the preset index level division table and the third single-item score;

[0109] A performance index related parameter acquisition unit, configured to acquire a fourth single-item score and a fourth weight coefficient of the performance index data; and determine a fourth single-item score level of the performance index data based on the preset index level division table and the fourth single-item score.

[0110] In an alternative embodiment of the second aspect of the present invention, the score acquisition module further includes:

[0111] A strategic index weighted calculation unit, configured to obtain a first weighted score of the strategic index data based on the first single-item score, the first single-item score level, and the first weight coefficient;

[0112] A system index weighted calculation unit, configured to obtain a second weighted score of the system index data based on the second single-item score, the second single-item score level, and the second weight coefficient;

[0113] A cultural index weighted calculation unit, configured to obtain a third weighted score of the cultural index data based on the third single-item score, the third single-item score level, and the third weight coefficient;

[0114] A performance index weighted calculation unit, configured to obtain a fourth weighted score of the performance index data based on the fourth single-item score, the fourth single-item score level, and the fourth weight coefficient;

[0115] A score summation unit, configured to calculate the sum of the first weighted score, the second weighted score, the third weighted score, and the fourth weighted score;

[0116] The score conversion unit is used to convert the sum into a percentage system to obtain a maturity assessment score.

[0117] In an optional implementation of the second aspect of the present invention, the data analysis module includes:

[0118] A statistical parameter acquisition unit is used to calculate target statistical parameters for each dimension indicator data through a dynamic indicator calculation engine;

[0119] An expansion parameter acquisition unit is used to analyze the target statistical parameters using a chain iteration method combined with a Gini coefficient algorithm to obtain expansion dimension parameters;

[0120] A chart generating unit is used to perform intelligent chart matching based on the parameter characteristics of the target statistical parameters and the expanded dimension parameters to generate analysis charts of the indicator data of each dimension.

[0121] In an optional implementation of the second aspect of the present invention, the enterprise security management maturity assessment system further includes:

[0122] A strategic indicator questionnaire construction module is used to construct a percentage-based questionnaire to obtain the strategic indicator data, using motivation and cause, strategic analysis, strategic planning, and strategic management as four primary elements, and to subdivide each of the primary elements into a number of secondary elements. Each of the secondary elements is then configured with a number of evaluation items and assigned a score.

[0123] A system indicator questionnaire construction module is used to use several first-level elements related to the enterprise system as system indicators, and to subdivide each of the first-level elements into several second-level elements, and to configure several evaluation contents and assign scoring scores to each of the second-level elements, so as to construct a percentage-based questionnaire related to the enterprise system;

[0124] A strategic indicator questionnaire construction module is used to use several dimensional elements related to corporate culture as cultural indicators, and to divide each of these dimensional elements into five stages: pathological, passive, institutional, proactive, and innovative. A description of the characteristics of each stage is provided, and a scoring value is assigned to each stage. A percentage-based questionnaire is constructed to obtain the cultural indicator data.

[0125] The basic data collection module is used to use action indicators and result indicators as main indicators, and subdivide the action indicators into system sub-indicators, capability sub-indicators and action sub-indicators, and divide the result indicators into accident sub-indicators, and configure multiple basic data of enterprise safety management for each sub-indicator and assign indicator target values, and construct a data collection form for obtaining the performance indicator data.

[0126] Figure 7FIG. 0 is a schematic structural diagram of an evaluation device for enterprise security management maturity provided by an embodiment of the present invention. The evaluation device 500 for enterprise security management maturity may vary greatly due to configuration or performance differences, and may include one or more central processing units (CPUs) 510 (for example, one or more processors) and a memory 520, and one or more storage media 530 (for example, one or more mass storage devices) storing application programs 533 or data 532. Among them, the memory 520 and the storage media 530 may be transient storage or persistent storage. The program stored in the storage media 530 may include one or more modules (not shown in the figure), and each module may include a series of instruction operations on the evaluation device 500 for enterprise security management maturity. Further, the processor 510 may be configured to communicate with the storage media 530 and execute a series of instruction operations in the storage media 530 on the evaluation device 500 for enterprise security management maturity.

[0127] The evaluation device 500 for enterprise security management maturity may further include one or more power supplies 540, one or more wired or wireless network interfaces 550, one or more input / output interfaces 560, and / or one or more operating systems 531, such as Windows Server, Mac OS X, Unix, Linux, FreeBSD, etc. Those skilled in the art can understand that Figure 4 the shown structural diagram of the evaluation device for enterprise security management maturity does not limit the evaluation device for enterprise security management maturity, and may include more or fewer components than shown, or combine certain components, or have different component arrangements.

[0128] The present invention also provides a computer-readable storage medium. The computer-readable storage medium may be a non-volatile computer-readable storage medium or a volatile computer-readable storage medium. Instructions are stored in the computer-readable storage medium. When the instructions run on a computer, the computer is caused to execute the steps of the evaluation method for enterprise security management maturity.

[0129] In the context of the present disclosure, a machine-readable medium can be a tangible medium that can contain or store a program for use by or in connection with an instruction execution system, apparatus, or device. A machine-readable medium can be a machine-readable signal medium or a machine-readable storage medium. A machine-readable medium can include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, apparatus, or devices, or any suitable combination of the foregoing. More specific examples of a machine-readable storage medium would include an electrical connection based on one or more wires, a portable computer diskette, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or Flash memory), an optical fiber, a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0130] Moreover, although the operations are depicted in a particular order, this should be understood as requiring that such operations be performed in the particular order shown or in sequential order, or that all illustrated operations be performed to achieve the desired result. In certain circumstances, multitasking and parallel processing may be advantageous. Likewise, although several specific implementation details are included in the above discussion, these should not be construed as limiting the scope of the present disclosure. Certain features described in the context of separate embodiments can also be implemented in combination in a single implementation. Conversely, the various features described in the context of a single implementation can also be implemented separately or in any suitable sub-combination in multiple implementations.

[0131] Although the subject matter has been described in language specific to structural features and / or methodological acts, it should be understood that the subject matter defined in the appended claims is not necessarily limited to the specific features or acts described above. Rather, the specific features and acts described above are merely example forms of implementing the claims.

Claims

1. An evaluation method for the maturity of enterprise security management, characterized in that, The evaluation method for the enterprise safety management maturity includes: Constructing a multi-dimensional quantitative evaluation model for the enterprise safety management maturity; Collecting multi-dimensional index data of the enterprise safety management, where the multi-dimensional index data includes strategic index data, system index data, cultural index data, and performance index data; Performing an operation of calculating the comprehensive index score based on weights for the multi-dimensional index data through the multi-dimensional quantitative evaluation model to obtain the maturity evaluation score; Obtaining the level grade of the enterprise safety management maturity based on the numerical interval where the maturity evaluation score is located in the maturity level grade division table.

2. The enterprise security management maturity assessment method according to claim 1, characterized in that: The evaluation method for the enterprise safety management maturity further includes: Analyzing the multi-dimensional index data through a pre-set AI intelligent analysis tool to generate analysis charts for each index; Obtaining the problems existing in the enterprise safety management based on the analysis charts; Performing a root cause analysis on the problems to obtain improvement suggestions for the enterprise safety management; Visualizing the obtained maturity evaluation score, the level grade of the enterprise safety management maturity, the analysis charts for each index, the problems existing in the enterprise safety management, and the improvement suggestions.

3. The evaluation method for the maturity of enterprise security management according to claim 1 or 2, characterized in that, The collection of the multi-dimensional index data of the enterprise safety management, where the multi-dimensional index data includes strategic index data, system index data, cultural index data, and performance index data includes: For the strategic index data, the system index data, and the cultural index data, loading the 100-point questionnaires for each index from a pre-set database; Distributing the 100-point questionnaires for each index to the enterprise self-evaluation group and / or the external audit expert group for evaluation and scoring; Based on the evaluation and scoring results of the 100-point questionnaires for each index, obtaining the average value of the valid scores for each index, and using the average value of each index as the single-item score for each index; For the performance index data, obtaining the basic data based on the enterprise safety management basic data collection list; Processing the basic data through a pre-set performance evaluation algorithm to obtain the single-item score of the performance index.

4. The enterprise security management maturity assessment method according to claim 3 is characterized in that: The operation of calculating the comprehensive index score based on weights for the multi-dimensional index data through the multi-dimensional quantitative evaluation model to obtain the maturity evaluation score includes: Obtaining the first single-item score and the first weight coefficient of the strategic index data; Based on a pre-set index grade division table and the first single-item score, determining the first single-item score grade of the strategic index data; Obtaining the second single-item score and the second weight coefficient of the system index data; Based on the pre-set index grade division table and the second single-item score, determining the second single-item score grade of the system index data; Obtaining the third single-item score and the third weight coefficient of the cultural index data; Based on the pre-set index grade division table and the third single-item score, determining the third single-item score grade of the cultural index data; Obtaining the fourth single-item score and the fourth weight coefficient of the performance index data; Based on the pre-set index grade division table and the fourth single-item score, determining the fourth single-item score grade of the performance index data.

5. The evaluation method for the maturity of enterprise safety management according to claim 3, characterized in that The operation of calculating the comprehensive index score based on weights for the multi-dimensional index data by the multi-dimensional quantitative evaluation model to obtain the maturity evaluation score further includes: Obtaining the first weighted score of the strategic index data based on the first single-item score, the first single-item score level, and the first weight coefficient; Obtaining the second weighted score of the system index data based on the second single-item score, the second single-item score level, and the second weight coefficient; Obtaining the third weighted score of the cultural index data based on the third single-item score, the third single-item score level, and the third weight coefficient; Obtaining the fourth weighted score of the performance index data based on the fourth single-item score, the fourth single-item score level, and the fourth weight coefficient; Calculating the sum of the first weighted score, the second weighted score, the third weighted score, and the fourth weighted score; Converting the sum to a percentage system to obtain the maturity evaluation score.

6. The evaluation method for the maturity of enterprise security management according to claim 2, wherein The analysis of the multi-dimensional index data by the pre-set AI intelligent analysis tool to generate analysis charts for each index includes: For each dimension index data, calculating the target statistical parameters through a dynamic index calculation engine; Analyzing the target statistical parameters by using the serial iteration method and combining with the Gini coefficient algorithm to obtain the extended dimension parameters; Based on the parameter characteristics of the target statistical parameters and the extended dimension parameters, performing intelligent chart matching to generate analysis charts for each dimension index data.

7. The enterprise security management maturity assessment method according to claim 1, characterized in that: Before constructing the multi-dimensional quantitative evaluation model of enterprise safety management maturity, it includes: Taking motivation and cause, strategic analysis, strategic planning, and strategic management as four first-level elements, subdividing each first-level element into several second-level elements, configuring several evaluation contents for each second-level element and assigning score values, and constructing a 100-point questionnaire for the strategic index data; Taking several first-level elements related to the enterprise system as system indicators, subdividing each first-level element into several second-level elements, configuring several evaluation contents for each second-level element and assigning score values, and constructing a 100-point questionnaire related to the enterprise system; Taking several dimension elements related to enterprise culture as cultural indicators, dividing each dimension element into five stages: pathological type, passive type, institutional type, active type, and innovative type, configuring stage characteristic descriptions for each stage and assigning score values, and constructing a 100-point questionnaire for the cultural index data; Taking action indicators and result indicators as main category indicators, subdividing the action indicators into sub-indicators including system category sub-indicators, ability category sub-indicators, and action category sub-indicators, dividing the result indicators into accident category sub-indicators, configuring a number of basic data of enterprise safety management for each sub-indicator and assigning index target values, and constructing a data collection form for the performance index data.

8. An evaluation system for the maturity of enterprise security management, characterized in that, The evaluation system for enterprise safety management maturity includes: A model construction module for constructing a multi-dimensional quantitative evaluation model of enterprise safety management maturity; A data collection module for collecting multi-dimensional index data of enterprise security management, where the multi-dimensional index data includes strategic index data, system index data, cultural index data, and performance index data; A score acquisition module for performing weighted comprehensive index score calculation on the multi-dimensional index data through the multi-dimensional quantitative evaluation model to obtain a maturity evaluation score; A level acquisition module for obtaining the level of enterprise security management maturity based on the numerical interval where the maturity evaluation score is located in the maturity level classification table.

9. An enterprise security management maturity assessment device, characterized in that: The evaluation device for enterprise security management maturity includes: a memory and at least one processor, where instructions are stored in the memory, and the memory and the at least one processor are interconnected by a line; The at least one processor calls the instructions in the memory so that the evaluation device for enterprise security management maturity executes the evaluation method for enterprise security management maturity as described in any one of claims 1-7.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by the processor, it implements the evaluation method for enterprise security management maturity as described in any one of claims 1-7.

Images