构建海委信息安全管理体系的研究

信息化的发展与信息安全保障是密切相关的，两者相辅相成、密不可分，没有安全保障的信息化必定是不能长久的。建立海委信息安全管理体系，需根据等级保护基本要求，参照国内外相关标准，并结合海委政务外网已有网络与信息安全体系建设的实际情况，最终形成依托于安全保护对象为基础，建立以安全管理中心的“一个中心，三重防护”的安全管理体系框架，并明晰具体的技术对策，逐步完善安全管理措施。

Study on the Construction of Information Security Management System of Haihe River Water Conservancy Commission

Informationization development and information security assurance are inseparable and closely related with each other. Informationization can not be sustained without security assurance. To build information security assurance system in Haihe River Water Conservancy Commission （HWCC）, it need to base on the national basic requirements of hierarchical protection, refer to relevant criteria in China and abroad, and also consider on the actual condition of existing construction of information system in HWCC. It ultimately forms a security assurance system with the framework of ＂one center of security management, three methods of protection and defense＂, then clarifies specific technical countermeasures and gradually improves the security management measures.