IT一体化运维管控技术与管理研究

在分析了当前电力行业中IT运维操作面临的内部和外部安全风险与需求的基础上，以IT运维安全审计系统、动态口令认证系统、防火墙等运维安全系统为研究对象，对IT运维安全的技术手段与管理手段进行探讨，并提出相应的技术方案和安全管理要求，对内部人员和第三方人员实现一体化运维管控。经实践表明，该技术方案和管理要求是可行有效的，既满足IT运维审计的实际需要，又符合IT内控管理中的合规性要求。

Research on Integration of IT Operation Control Technology and Management

Abstract： Based on the analysis of the internal and external security risk and demand of IT operation facing in the electric power industry, the paper takes the IT operation safety audit system, dynamic password authentication system and firewall as the research object, study the technology and management methods of IT maintenance operation safety, and propose appropriate technical solutions and safety management requirements to achieve the integrat）on of operation and maintenance management on the internal staff and external personnel. The practice shows that the technical solutions and management requirements are feasible and effective, both to meet the actual needs of IT operations audit, internal control and compliance with the IT compliance requirements.