周亮, 张晓娟, 邱意民, 朱亚运, 缪思薇, 姜琳. 电力数据分类分级方法研究[J]. 电力信息与通信技术, 2023, 21(4): 25-30. DOI: 10.16543/j.2095-641x.electric.power.ict.2023.04.04
引用本文: 周亮, 张晓娟, 邱意民, 朱亚运, 缪思薇, 姜琳. 电力数据分类分级方法研究[J]. 电力信息与通信技术, 2023, 21(4): 25-30. DOI: 10.16543/j.2095-641x.electric.power.ict.2023.04.04
ZHOU Liang, ZHANG Xiaojuan, QIU Yimin, ZHU Yayun, MIAO Siwei, JIANG Lin. Research on Power Data Classification and Grading Method[J]. Electric Power Information and Communication Technology, 2023, 21(4): 25-30. DOI: 10.16543/j.2095-641x.electric.power.ict.2023.04.04
Citation: ZHOU Liang, ZHANG Xiaojuan, QIU Yimin, ZHU Yayun, MIAO Siwei, JIANG Lin. Research on Power Data Classification and Grading Method[J]. Electric Power Information and Communication Technology, 2023, 21(4): 25-30. DOI: 10.16543/j.2095-641x.electric.power.ict.2023.04.04

电力数据分类分级方法研究

Research on Power Data Classification and Grading Method

  • 摘要: 我国数据安全法提出“国家建立数据分类分级保护制度”,数据分类分级是国家治理数据安全的重要制度。现有的数据分类分级方法角度单一,主要根据数据敏感程度进行定级,不适用于电力数据类型复杂、属性多样的场景。文章提出数据多维度分级方法,综合考虑数据安全的影响对象、影响范围、影响程度、数据敏感性、与生产业务的关联性和业务系统关联性因素,从6个维度将电力数据的安全等级划分为1—4级,并给出操作示例。多维度数据分类分级方法解决了商密保护指引、工信部数据分类分级指南、国家等级保护合规一致的难题,为实现电力数据安全治理提供基础支撑。

     

    Abstract: The data security law proposes that "the state establishes a data classification and grading protection system", which determines that classification and grading is an important system for national governance of data security. The existing data classification and grading method has a single perspective and is mainly based on the sensitivity of data, which is not applicable to the scenario of complex types and diverse attributes of power data. This paper proposes a multi-dimensional classification method, which comprehensively considers the influence object, influence scope, influence degree, data sensitivity, relevance to production business and business system of data security. The security level of power data is divided into 1-4 levels from six dimensions, and an operation example is given. The data classification and grading method proposed in this paper solves the problem of consistent commercial confidentiality protection guidelines, Ministry of Industry and Information Technology data classification and grading guidelines, and national level protection compliance, and provides basic support for realizing power data security governance.

     

/

返回文章
返回