CN116089392A - Information system evaluation library building system and method - Google Patents
Information system evaluation library building system and method Download PDFInfo
- Publication number
- CN116089392A CN116089392A CN202211132323.7A CN202211132323A CN116089392A CN 116089392 A CN116089392 A CN 116089392A CN 202211132323 A CN202211132323 A CN 202211132323A CN 116089392 A CN116089392 A CN 116089392A
- Authority
- CN
- China
- Prior art keywords
- module
- information system
- information
- evaluation
- assessment
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
- 238000011156 evaluation Methods 0.000 title claims abstract description 106
- 238000000034 method Methods 0.000 title claims abstract description 56
- 238000004458 analytical method Methods 0.000 claims description 40
- 238000010276 construction Methods 0.000 claims description 27
- 238000012552 review Methods 0.000 claims description 14
- 230000008569 process Effects 0.000 claims description 10
- 238000013461 design Methods 0.000 claims description 7
- 238000011835 investigation Methods 0.000 claims description 6
- 238000004140 cleaning Methods 0.000 claims description 5
- 238000012937 correction Methods 0.000 claims description 4
- 230000002776 aggregation Effects 0.000 claims description 3
- 238000004220 aggregation Methods 0.000 claims description 3
- 230000000694 effects Effects 0.000 claims description 3
- 238000010586 diagram Methods 0.000 description 8
- 238000012502 risk assessment Methods 0.000 description 6
- 238000012797 qualification Methods 0.000 description 4
- 239000013307 optical fiber Substances 0.000 description 3
- 238000012545 processing Methods 0.000 description 3
- 238000009825 accumulation Methods 0.000 description 2
- 238000004891 communication Methods 0.000 description 2
- 238000009430 construction management Methods 0.000 description 2
- 230000006872 improvement Effects 0.000 description 2
- 210000001503 joint Anatomy 0.000 description 2
- 230000008520 organization Effects 0.000 description 2
- 230000002155 anti-virotic effect Effects 0.000 description 1
- 230000009286 beneficial effect Effects 0.000 description 1
- 238000004364 calculation method Methods 0.000 description 1
- 239000003086 colorant Substances 0.000 description 1
- 238000005516 engineering process Methods 0.000 description 1
- 238000004519 manufacturing process Methods 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
- 238000011160 research Methods 0.000 description 1
- 230000004044 response Effects 0.000 description 1
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
- G06F16/20—Information retrieval; Database structures therefor; File system structures therefor of structured data, e.g. relational data
- G06F16/21—Design, administration or maintenance of databases
- G06F16/211—Schema design and management
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/30—Monitoring
- G06F11/34—Recording or statistical evaluation of computer activity, e.g. of down time, of input/output operation ; Recording or statistical evaluation of user activity, e.g. usability assessment
- G06F11/3409—Recording or statistical evaluation of computer activity, e.g. of down time, of input/output operation ; Recording or statistical evaluation of user activity, e.g. usability assessment for performance assessment
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
- G06F16/20—Information retrieval; Database structures therefor; File system structures therefor of structured data, e.g. relational data
- G06F16/21—Design, administration or maintenance of databases
- G06F16/215—Improving data quality; Data cleansing, e.g. de-duplication, removing invalid entries or correcting typographical errors
Abstract
The invention discloses an information system evaluation and library building system and method, wherein the information system evaluation and library building system comprises an acquisition module, an evaluation module and a library building module, wherein the acquisition module is used for acquiring information system element information, the evaluation module is used for analyzing and identifying the acquired information system element information, the library building module is used for carrying out data library building on the analyzed information system element information, and the acquisition module, the evaluation module and the library building module are sequentially connected. The information system evaluation library building system and the information system evaluation library building method can be applied to management of an information system, provide references for information system library building management or information system library taking-off, and then establish information infrastructure databases respectively oriented to information system equipment, links and data center dimensions from the aspect of logic through point, line and plane representation, so that the resource utilization rate can be improved, the potential safety hazard of network data can be reduced, and the grading classification of the information system and the decision support efficiency of the information infrastructure can be improved.
Description
Technical Field
The invention relates to the field of information system library construction, in particular to an information system evaluation library construction system and method.
Background
The information system is a man-machine integrated system which consists of computer hardware, network and communication equipment, computer software, information resources, information users and regulations and aims at processing information flows, and the information system does not perform a specific physical work but is coordinated and consistent in a global relation, and can be divided into five types of data processing systems, management information systems, decision support systems, expert systems and virtual offices.
The elements of the information system service capability assessment mainly comprise four aspects of strategic management, business operation, basic guarantee and improvement innovation, and the information system risk assessment method comprises a qualitative risk assessment method, a quantitative risk assessment method and a risk assessment method combining qualitative and quantitative. However, the comprehensive investigation of the asset model and the dynamic mastering of the asset association situation are not performed, so that the service capability and risk hidden danger cannot be fully evaluated, repeated construction, information islands and network security events occur, the exertion of the capability of the information system is directly affected, one of the main reasons is that an information infrastructure database is not established, the comprehensive evaluation of the information system cannot be performed, the current situation and the overall dynamic state of the information system infrastructure cannot be mastered in time, and the decision-making work of supporting the information infrastructure with high efficiency cannot be performed, so that a library building system and a library building method are needed.
For example, chinese patent CN109739719B discloses a method and apparatus for managing communication machine room infrastructure, which includes a data processing system, an infrastructure database, and node information description of devices, and implements machine room infrastructure management by device node library establishment, request and response management. However, the method only expresses the infrastructure database through the node dimension, realizes the management of the infrastructure from the physical aspect, and does not consider the basic data of the link and the information system dimension from the logical aspect, so that a complete information infrastructure database cannot be established, and the comprehensive representation and management of the information system cannot be realized.
For the problems in the related art, no effective solution has been proposed at present.
Disclosure of Invention
Aiming at the problems in the related art, the invention provides an information system evaluation library building system and method, which are used for overcoming the technical problems existing in the prior related art.
For this purpose, the invention adopts the following specific technical scheme:
according to one aspect of the invention, an information system evaluation and library building system and method are provided, comprising an acquisition module, an evaluation module and a library building module;
the acquisition module is used for acquiring element information of the information system;
the evaluation module is used for analyzing and identifying the acquired information system element information;
the database building module is used for carrying out database building on the information system element information after analysis;
the acquisition module is connected with the database building module through the evaluation module.
Further, an information filling module is arranged in the acquisition module;
the information reporting module is used for obtaining the information system element information acquisition process.
Further, the evaluation module comprises an evaluation content module and an evaluation method module which are sequentially connected;
the evaluation content module is used for carrying out risk comparison on the element information of the information system;
and the evaluation method module is used for evaluating the information system element information through expert evaluation.
Further, the evaluation content module comprises a basis module, a necessity module, a feasibility module, a risk module and a sharing module;
the information system comprises a module, a control module and a control module, wherein the module is used for providing law and regulation and policy requirements, technical standard and standardization requirements and objective facts for solving specific problems for information system construction;
the necessity module is used for setting a selective trend of information system construction and setting conditions for key functions of an information system target;
the feasibility module is used for estimating the success probability of the process, design and program of the information system in a required time range;
the risk module is used for estimating the risk probability of the process, design and program of the information system in running;
and the sharing module is used for sharing the success probability and the risk probability after the estimation is completed.
Further, the evaluation method module comprises an expert evaluation module and a professional institution evaluation module;
the expert evaluation module is used for analyzing and evaluating the information system through professionals;
the professional evaluation module is used for carrying out investigation analysis demonstration through the professional evaluation.
Further, the library building module comprises a library building dimension module and a library building method module;
the database establishing dimension module is used for storing databases and sharing information of a plurality of databases;
and the database building method module is used for cleaning and correcting the internal information of the database.
Further, the database dimension module comprises an equipment module, a link module and a data center module.
Further, the database creating method module comprises a data cleaning module and a data correction module.
According to another aspect of the present invention, there is provided an information system evaluation library construction method including the steps of:
s1, information system asset census: performing asset census, and acquiring information elements of an information system, wherein the census method comprises the steps of holding a thematic conference, census method reading, information filling and information gathering;
s2, information system analysis and evaluation: the method comprises the steps of analyzing and evaluating a built information system, wherein evaluation contents comprise the basis, the necessity, the feasibility, the existing risk hidden danger and the sharing degree of continuous use of the information system, analyzing and evaluating a newly built information system, and the evaluation contents comprise the construction basis, the necessity, the feasibility, the network data security protection condition and the sharing condition, and forming a review evaluation conclusion of the information system after the analysis and evaluation are completed;
s3, establishing an information infrastructure database: and (3) establishing an information infrastructure database for the information system to be continuously used or definitely newly established, and carrying out intelligent analysis on the basis of the information infrastructure database according to analysis and evaluation conclusion, wherein the information infrastructure database is formed by representing the used equipment by points, the used links by lines and the used data centers by planes.
Further, for the information system to be used continuously or explicitly newly built, according to the analysis and evaluation conclusion, the information infrastructure database is built by representing the used equipment by point, the used link by line and the used data center by plane, and the intelligent analysis is carried out on the basis of the information infrastructure database, which comprises the following steps:
the data is selected from the information infrastructure database data table or other queries of the information system by setting the custom keywords to realize the query operation;
carrying out statistics operation on the data related to the self-defined keywords of the information system, such as aggregation, total and other activities;
and performing visualized display on related elements of the customized keywords of the information system to realize portrait analysis operation.
The beneficial effects of the invention are as follows:
the information system evaluation library building system and the information system evaluation library building method can be applied to management of the information system, and basic elements of the information system can be mastered by performing asset census on the information system; and secondly, carrying out special evaluation by organizing related experts with more work accumulation and abundant experience in the information system classified field or carrying out special evaluation by organizing a third-party professional organization with information system data classified evaluation qualification according to requirements, carrying out scientific, objective and comprehensive evaluation on construction basis, necessity, feasibility, risk hidden danger and sharing degree of the information system, providing reference for information system library construction management or off-shelf according to concrete opinion suggestion of evaluation or evaluation, and then establishing an information infrastructure database respectively facing to information system equipment, links and data center dimensions through point, line and surface representation from the logic aspect. And then according to the invention, the information infrastructure related to the information system is subjected to qualitative and quantitative warehouse-in management, intelligent analysis is provided, and the method has important reference significance for dynamically grasping the asset base number of the information system, can improve the resource utilization rate, reduce the potential safety hazard of network data, and improve the hierarchical classification of the information system and the decision support efficiency of the information infrastructure.
Drawings
In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings that are needed in the embodiments will be briefly described below, and it is obvious that the drawings in the following description are only some embodiments of the present invention, and other drawings may be obtained according to these drawings without inventive effort for a person skilled in the art.
FIG. 1 is a system block diagram of an information system assessment banking system in accordance with an embodiment of the present invention;
FIG. 2 is a flow chart of a method for information system assessment and library creation according to an embodiment of the present invention;
FIG. 3 is a system flow diagram of an information system assessment banking system in accordance with an embodiment of the present invention;
FIG. 4 is one of the intelligent representation analysis schematics of an information system assessment library system according to an embodiment of the present invention;
FIG. 5 is a second diagram of intelligent representation analysis of an information system assessment and banking system in accordance with an embodiment of the present invention;
FIG. 6 is a third diagram of intelligent representation analysis of an information system assessment and banking system in accordance with an embodiment of the present invention;
FIG. 7 is a schematic diagram of intelligent representation analysis of an information system assessment and banking system in accordance with an embodiment of the present invention;
FIG. 8 is a schematic diagram of one of a device, link, and data center of an information system assessment banking system, in accordance with an embodiment of the present invention;
FIG. 9 is a schematic diagram of a second embodiment of an information system evaluation and banking system and method, link, data center;
FIG. 10 is a third schematic diagram of an apparatus, link, data center of an information system evaluation and banking system and method according to an embodiment of the present invention.
In the figure:
1. an acquisition module; 11. an information filling module; 2. an evaluation module; 21. an evaluation content module; 211. a basis module; 212. a necessity module; 213. a feasibility module; 214. a risk module; 215. a sharing module; 22. an evaluation method module; 221. an expert review module; 222. a professional institution assessment module; 3. a library building module; 31. a database dimension module is built; 311. an equipment module; 312. a link module; 313. a data center module; 32. a library building method module; 321. a data cleaning module; 322. and a data correction module.
Detailed Description
For the purpose of further illustrating the various embodiments, the present invention provides the accompanying drawings, which are a part of the disclosure of the present invention, and which are mainly used to illustrate the embodiments and, together with the description, serve to explain the principles of the embodiments, and with reference to these descriptions, one skilled in the art will recognize other possible implementations and advantages of the present invention, wherein elements are not drawn to scale, and like reference numerals are generally used to designate like elements.
According to the embodiment of the invention, an information system evaluation library building system and method are provided.
The invention will be further described with reference to the accompanying drawings and the specific embodiments, as shown in fig. 1, 3-10, an information system evaluation and library establishment system according to an embodiment of the invention comprises an acquisition module 1, an evaluation module 2 and a library establishment module 3;
the acquisition module 1 is used for acquiring element information of an information system;
the evaluation module 2 is used for analyzing and identifying the acquired information system element information;
the database building module 3 is used for carrying out database building on the information system element information after analysis;
the acquisition module 1 is connected with the library building module 3 through the evaluation module 2.
In one embodiment, the information filling module 11 is arranged inside the acquisition module 1;
the information reporting module 11 is configured to obtain an information system element information acquisition process.
The information filling module 11 analyzes and solves and fills general investigation data through a special meeting and general investigation method, completes the collection of the basic elements of the information system asset, and comprehensively grasps the basic conditions of the information system through the general investigation information collection of the asset.
In one embodiment, the evaluation module 2 includes an evaluation content module 21 and an evaluation method module 22 connected in sequence;
wherein, the evaluation content module 21 is used for performing risk comparison on the information system element information;
the evaluation method module 22 is used for evaluating the information system element information through expert evaluation.
In one embodiment, the evaluation content module 21 includes a basis module 211, a necessity module 212, a feasibility module 213, a risk module 214, and a sharing module 215;
wherein, according to the module 211, objective facts for providing legal regulations and policy requirements, technical standards and normative requirements, and solving specific problems for information system construction are provided;
a necessity module 212 for setting a trend of information system construction setting selectivity, setting a condition under which an information system target plays a key role;
a feasibility module 213, configured to estimate a probability of success of a process, a design, and a program of the information system within a required time range;
the risk module 214 is configured to estimate risk probability of a process, a design, and a program of the information system during operation;
and the sharing module 215 is configured to share the probability of success and the probability of risk after the estimation is completed.
In one embodiment, evaluation method module 22 includes an expert review module 221 and a professional evaluation module 222;
wherein, expert review module 221 is used for evaluating the information system analysis by professionals;
the expert evaluation is divided into the steps of establishing an expert database, extracting an expert, and evaluating the expert; firstly, selecting relevant authorities, research institutions, higher institutions and key enterprise personnel with more accumulated work and experience in the information system working field, especially in the grading classification field to build a review expert database, and synchronously building an expert database management system; secondly, extracting an expert by a random method; then, the evaluation link carries out professional evaluation on the evaluation content of the information system through independent evaluation of the expert group to form expert evaluation suggestion; the review job may be an anonymous review or an analysis consultation review.
Professional assessment module 222 is used to conduct survey analysis demonstration through the professional assessment.
The professional institution review comprises the steps of constructing a professional evaluation institution or identifying according to the existing related professional institution catalogue, selecting the professional institution and judging the professional institution; firstly, selecting and constructing a professional institution from units with qualification such as information system design, risk assessment and the like, managing according to a catalog, and formulating a professional institution management system; secondly, through a entrusting mode, professional institutions in the entrusting catalogue carry out information system assessment, the professional institution assessment process can further survey, analyze and demonstrate according to assessment requirements, professional institution assessment opinion suggestions are submitted after the assessment is finished, expert assessment or professional institution assessment can be carried out according to the review assessment opinion suggestions, after the expert assessment or professional institution assessment is finished, an information system assessment conclusion is formed, the established information system assessment conclusion can be (but is not limited to) continuous use, complete application or system off-shelf, and the assessment conclusion of a newly built information system can be (but is not limited to) approval of new creation or non-new creation.
In one embodiment, the library creating module 3 includes a library creating dimension module 31 and a library creating method module 32;
the database dimension module 31 is used for storing databases and sharing information of a plurality of databases;
the database creating method module 32 is used for cleaning and correcting the internal information of the database.
In one embodiment, the banking dimension module 31 includes a facility module 311, a link module 312, and a data center module 313.
In one embodiment, the library creating method module 32 includes a data cleansing module 321 and a data correction module 322.
According to another embodiment of the present invention, as shown in fig. 2, there is also provided an information system evaluation library construction method, including the steps of:
s1, information system asset census: performing asset census, and acquiring information elements of an information system, wherein the census method comprises the steps of holding a thematic conference, census method reading, information filling and information gathering;
s2, information system analysis and evaluation: the method comprises the steps of analyzing and evaluating a built information system, wherein evaluation contents comprise the basis, the necessity, the feasibility, the existing risk hidden danger and the sharing degree of continuous use of the information system, analyzing and evaluating a newly built information system, and the evaluation contents comprise the construction basis, the necessity, the feasibility, the network data security protection condition and the sharing condition, and forming a review evaluation conclusion of the information system after the analysis and evaluation are completed;
s3, establishing an information infrastructure database: the information system to be continuously used or explicitly newly built is established, and according to analysis and evaluation conclusion, the information infrastructure database is established by representing the used equipment by points, the used links by lines and the used data centers by planes, and intelligent analysis is carried out on the basis;
the equipment, the links and the data center are respectively represented by points, lines and planes to form an information infrastructure database oriented to information system management;
as shown in table 1, the information system in the information infrastructure database is listed as including, but not limited to, the basic elements. The information system is numbered as XXXT-110000-00001 by the sequence number of XXXT-administrative area code-5 digits, if a certain information system name is a bureau portal website, a main management unit is bureau, the construction target is to realize bureau information release, the construction content is 2 servers, 1 set of database, 1 set of portal website management system, 1 set of antivirus software (the information system is constructed by depending on the existing environment, part of equipment is available and used, and is not listed in the construction content), the necessity is that the current situation of information disclosure is insufficient, the gap exists between the information disclosure and the government information, the feasibility is that the adopted technical route is feasible, the investment is reasonable, the risk hidden danger is that related safety measures and hidden danger are adopted, the hidden danger is controllable, the sharing degree is that the data is shared by a data sharing exchange platform, the hidden danger is in butt joint with an integrated government service platform, the investment fund is 150 ten thousand yuan, the annual operation cost is 10 ten thousand yuan after the system is constructed, the wholesale period, the initial construction time and the acceptance time can be in a specific mode from year to month according to actual condition.
TABLE 1
As shown in table 2, the basic elements that the devices in the information infrastructure database contain (but are not limited to) are listed. The device is numbered with an SB-110000-0000001 serial number of SB-administrative area code, such as a router, an IP address 191.168.1.11, a data center machine room, an A information technology limited company, a production date of year, month and day of input operation time, year of service life, office of administration, a person in charge of the device is a person in charge of the device, a link name of the device is a to optical fiber, and a support information system name of an office portal website.
The equipment can be built into a library in a list form, can be edited in a graphical window, can be mounted with corresponding symbols, and is combined with the actual custom equipment numbering.
TABLE 2
As shown in table 3, the basic elements of the links in the information infrastructure database are listed, including but not limited to. The link is numbered with LL-110000-0000001 by LL-administrative area code-7 bit sequence number, such as a certain link number is LL-110000-0000001, a link name is to optical fiber, a construction unit is office, a link property is optical fiber, a link bandwidth is 1000M, an entering operation time is month day, a main management unit is office, a link responsible person is king five, a local end connection device name is SB-110000-0000001, a local end connection device IP address is 192.168.1.11, an opposite end connection device name is SB-110101-0000111, an opposite end connection device IP address is 192.168.1.12, and a support information system is office portal website.
The links can be built into a library in a list form, can be edited in a graphical window, can be provided with corresponding symbols, and can be combined with actual link numbers.
TABLE 3 Table 3
As shown in table 4, the basic elements contained in (but not limited to) the data center in the information infrastructure database are listed. The data center is numbered as SJXX-110000-00001 by the sequence number of SJZX-administrative district code-5, the name of the data center is data center, the property of the data center is data calculation, the area is 2000 square meters, the geographic position is the number of the road of the county (state, city) and the county (city, district), the input operation time is the year, month and day, the construction unit is office, the data center is responsible for human being Zhao Liu, and the support information system is office system.
The data center can build a library in a list form, can edit a graphical window, and can mount corresponding symbols.
TABLE 4 Table 4
The information infrastructure database is preset with equipment, links and data centers, graphic symbols, colors and sizes in the editing state of points, lines and planes and symbols in the image state, and the information system qualification accounts can be obtained through the associated inquiry of the information system, the equipment, the links and the data center table main keys. The related asset elements can be obtained through the related inquiry of equipment, links or data centers, the portrait elements can comprise supporting conditions, equipment service lives and the like, and the corresponding intelligent analysis results can be obtained through the related inquiry, statistics, display and portraits of equipment, links, data centers and information systems. After further analysis, if the information system does not utilize basic equipment and link resources, the equipment and link can be initially screened to have repeated construction; if the equipment, the link and the data center are not part of an information system or do not share data through a data sharing and exchanging platform, are in butt joint with an integrated government service platform and cannot provide sufficient basis, the existence of an information island can be primarily determined; if the equipment and the link exceed the normal service life, or more high-risk loopholes or hidden dangers exist in the data center and the information system through risk assessment, the risk hidden dangers of the information system can be judged, and the intelligent analysis result of the information infrastructure database can be used as an important reference for classifying information assets and the information system in a grading manner.
The method for establishing the information infrastructure database for the information system to be continuously used or definitely newly established comprises the following steps of representing used equipment by points, representing used links by lines and representing used data centers by planes according to analysis and evaluation conclusion, and developing intelligent analysis on the basis of the information infrastructure database:
the query operation is realized by setting the custom keywords and selecting data from the information infrastructure database data table or other queries of the information system, the statistics operation is realized by carrying out activities such as aggregation, total and the like on the related data of the custom keywords of the information system, and the portrait analysis operation is realized by carrying out visualized display on related elements of the custom keywords of the information system.
In summary, by means of the technical scheme of the invention, the information system evaluation and library building system and the method provided by the invention can be applied to management of an information system, and basic elements of the information system can be mastered by performing asset census on the information system; and secondly, carrying out special evaluation by organizing related experts with more work accumulation and abundant experience in the information system classified field or carrying out special evaluation by organizing a third-party professional organization with information system data classified evaluation qualification according to requirements, carrying out scientific, objective and comprehensive evaluation on construction basis, necessity, feasibility, risk hidden danger and sharing degree of the information system, providing reference for information system library construction management or off-shelf according to concrete opinion suggestion of evaluation or evaluation, and then establishing an information infrastructure database respectively facing to information system equipment, links and data center dimensions through point, line and surface representation from the logic aspect. And then according to the invention, the information infrastructure related to the information system is subjected to qualitative and quantitative warehouse-in management, intelligent analysis is provided, and the method has important reference significance for dynamically grasping the asset base number of the information system, can improve the resource utilization rate, reduce the potential safety hazard of network data, and improve the hierarchical classification of the information system and the decision support efficiency of the information infrastructure.
The foregoing description of the preferred embodiments of the invention is not intended to be limiting, but rather is intended to cover all modifications, equivalents, alternatives, and improvements that fall within the spirit and scope of the invention.
Claims (10)
1. The information system evaluation and library building system is characterized by comprising an acquisition module (1), an evaluation module (2) and a library building module (3);
the acquisition module (1) is used for acquiring information system element information;
the evaluation module (2) is used for analyzing and identifying the acquired information system element information;
the database building module (3) is used for carrying out data database building on the information system element information after analysis;
the acquisition module (1) is connected with the library building module (3) through the evaluation module (2).
2. An information system assessment and library system according to claim 1, wherein an information filling module (11) is arranged inside the acquisition module (1);
the information reporting module (11) is used for obtaining the information system element information acquisition process.
3. An information system assessment and banking system according to claim 2, characterized in that the assessment module (2) comprises an assessment content module (21) and an assessment method module (22) connected in sequence;
wherein, the evaluation content module (21) is used for carrying out risk comparison on the information system element information;
the evaluation method module (22) is used for evaluating the information system element information through expert evaluation.
4. An information system assessment and library system according to claim 3, wherein said assessment content module (21) comprises a basis module (211), a necessity module (212), a feasibility module (213), a risk module (214) and a sharing module (215);
wherein the basis module (211) is used for providing law and regulation and policy requirements, technical standard and normative requirements and objective facts for solving specific problems for information system construction;
the necessity module (212) is used for setting a selective trend of information system construction and setting conditions for the information system targets to play a key role;
the feasibility module (213) is used for estimating the success probability of the process, design and program of the information system in the required time range;
the risk module (214) is used for estimating the risk probability of the process, design and program of the information system in running;
the sharing module (215) is configured to share the estimated success probability and the estimated risk probability.
5. An information system assessment banking system according to claim 4, wherein said assessment method module (22) comprises an expert review module (221) and a professional institution assessment module (222);
wherein the expert review module (221) is used for carrying out analysis and evaluation on the information system by a professional;
the professional assessment module (222) is used to conduct investigation analysis demonstration through the professional assessment.
6. An information system assessment banking system according to claim 5, characterized in that said banking module (3) comprises a banking dimension module (31) and a banking method module (32);
the database establishing dimension module (31) is used for storing databases and sharing information of a plurality of databases;
the database creating method module (32) is used for cleaning and correcting the internal information of the database.
7. An information system assessment and banking system according to claim 6, wherein said banking dimension module (31) comprises a device module (311), a link module (312) and a data center module (313).
8. An information system assessment and library system according to claim 7, wherein said library construction method module (32) comprises a data cleansing module (321) and a data correction module (322).
9. An information system evaluation and library construction method for implementing the information system evaluation and library construction system according to any one of claims 1 to 8, characterized in that the information system evaluation and library construction method comprises the steps of:
s1, information system asset census: performing asset census, and acquiring information elements of an information system, wherein the census method comprises the steps of holding a thematic conference, census method reading, information filling and information gathering;
s2, information system analysis and evaluation: the method comprises the steps of analyzing and evaluating a built information system, wherein evaluation contents comprise the basis, the necessity, the feasibility, the existing risk hidden danger and the sharing degree of continuous use of the information system, analyzing and evaluating a newly built information system, and the evaluation contents comprise the construction basis, the necessity, the feasibility, the network data security protection condition and the sharing condition, and forming a review evaluation conclusion of the information system after the analysis and evaluation are completed;
s3, establishing an information infrastructure database: and (3) establishing an information infrastructure database for the information system to be continuously used or definitely newly established, and carrying out intelligent analysis on the basis of the information infrastructure database according to analysis and evaluation conclusion, wherein the information infrastructure database is formed by representing the used equipment by points, the used links by lines and the used data centers by planes.
10. An information system evaluation and library creation method according to claim 9, wherein said information system to be continuously used or explicitly newly created is used to create an information infrastructure database based on the analysis evaluation conclusion by point representation of the used equipment, line representation of the used link, and surface representation of the used data center, and the intelligent analysis is performed based on the analysis evaluation conclusion by the following steps:
the data is selected from the information infrastructure database data table or other queries of the information system by setting the custom keywords to realize the query operation;
carrying out statistics operation on the data related to the self-defined keywords of the information system, such as aggregation, total and other activities;
and performing visualized display on related elements of the customized keywords of the information system to realize portrait analysis operation.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202211132323.7A CN116089392B (en) | 2022-09-17 | 2022-09-17 | Information system evaluation library building system and method |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202211132323.7A CN116089392B (en) | 2022-09-17 | 2022-09-17 | Information system evaluation library building system and method |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN116089392A true CN116089392A (en) | 2023-05-09 |
| CN116089392B CN116089392B (en) | 2024-03-08 |
Family
ID=86206970
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202211132323.7A Active CN116089392B (en) | 2022-09-17 | 2022-09-17 | Information system evaluation library building system and method |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN116089392B (en) |
Citations (14)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| KR20080008599A (en) * | 2006-07-20 | 2008-01-24 | 성균관대학교산학협력단 | Method of risk evaluation based on asset analysis focused on business process for security of information system |
| US20110084839A1 (en) * | 2009-10-14 | 2011-04-14 | Noah Groth | Data center equipment location and monitoring system |
| CN102063668A (en) * | 2011-01-07 | 2011-05-18 | 国都兴业信息审计系统技术（北京）有限公司 | Auditing method and system for information system |
| CN102799954A (en) * | 2012-07-18 | 2012-11-28 | 中国信息安全测评中心 | Method and system for multi-objective optimization applied to risk assessment |
| US20170178038A1 (en) * | 2015-12-22 | 2017-06-22 | International Business Machines Corporation | Discovering linkages between changes and incidents in information technology systems |
| CN108306756A (en) * | 2017-12-21 | 2018-07-20 | 国网北京市电力公司 | One kind being based on electric power data network holography assessment system and its Fault Locating Method |
| CN111597012A (en) * | 2020-05-18 | 2020-08-28 | 山东汇贸电子口岸有限公司 | System and method for automatically discovering cloud environment equipment |
| CN111815132A (en) * | 2020-06-28 | 2020-10-23 | 云南电网有限责任公司电力科学研究院 | Network security management information publishing method and system for power monitoring system |
| JP2020184097A (en) * | 2019-04-26 | 2020-11-12 | 株式会社 ミックウェア | Information processing system, program and information processing method |
| CN112163777A (en) * | 2020-10-12 | 2021-01-01 | 杭州电子科技大学 | Enterprise information system security evaluation model based on boundary shell comprehensive strength |
| CN113222406A (en) * | 2021-05-11 | 2021-08-06 | 国网安徽省电力有限公司电力科学研究院 | Effectiveness evaluation method and device for transformer fire-fighting system |
| CN113240341A (en) * | 2021-06-10 | 2021-08-10 | 中国人民解放军战略支援部队航天工程大学 | Information system efficiency evaluation method based on big data |
| CN113361937A (en) * | 2021-06-10 | 2021-09-07 | 北京新国信软件评测技术有限公司 | Integrated quality evaluation method for electronic government system |
| US20220100625A1 (en) * | 2020-09-25 | 2022-03-31 | Digital Realty Trust, Inc. | Pervasive data center architecture systems and methods |
-
2022
- 2022-09-17 CN CN202211132323.7A patent/CN116089392B/en active Active
Patent Citations (14)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| KR20080008599A (en) * | 2006-07-20 | 2008-01-24 | 성균관대학교산학협력단 | Method of risk evaluation based on asset analysis focused on business process for security of information system |
| US20110084839A1 (en) * | 2009-10-14 | 2011-04-14 | Noah Groth | Data center equipment location and monitoring system |
| CN102063668A (en) * | 2011-01-07 | 2011-05-18 | 国都兴业信息审计系统技术（北京）有限公司 | Auditing method and system for information system |
| CN102799954A (en) * | 2012-07-18 | 2012-11-28 | 中国信息安全测评中心 | Method and system for multi-objective optimization applied to risk assessment |
| US20170178038A1 (en) * | 2015-12-22 | 2017-06-22 | International Business Machines Corporation | Discovering linkages between changes and incidents in information technology systems |
| CN108306756A (en) * | 2017-12-21 | 2018-07-20 | 国网北京市电力公司 | One kind being based on electric power data network holography assessment system and its Fault Locating Method |
| JP2020184097A (en) * | 2019-04-26 | 2020-11-12 | 株式会社 ミックウェア | Information processing system, program and information processing method |
| CN111597012A (en) * | 2020-05-18 | 2020-08-28 | 山东汇贸电子口岸有限公司 | System and method for automatically discovering cloud environment equipment |
| CN111815132A (en) * | 2020-06-28 | 2020-10-23 | 云南电网有限责任公司电力科学研究院 | Network security management information publishing method and system for power monitoring system |
| US20220100625A1 (en) * | 2020-09-25 | 2022-03-31 | Digital Realty Trust, Inc. | Pervasive data center architecture systems and methods |
| CN112163777A (en) * | 2020-10-12 | 2021-01-01 | 杭州电子科技大学 | Enterprise information system security evaluation model based on boundary shell comprehensive strength |
| CN113222406A (en) * | 2021-05-11 | 2021-08-06 | 国网安徽省电力有限公司电力科学研究院 | Effectiveness evaluation method and device for transformer fire-fighting system |
| CN113240341A (en) * | 2021-06-10 | 2021-08-10 | 中国人民解放军战略支援部队航天工程大学 | Information system efficiency evaluation method based on big data |
| CN113361937A (en) * | 2021-06-10 | 2021-09-07 | 北京新国信软件评测技术有限公司 | Integrated quality evaluation method for electronic government system |
Also Published As
| Publication number | Publication date |
|---|---|
| CN116089392B (en) | 2024-03-08 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US10803097B2 (en) | Data processing systems for generating and populating a data inventory | |
| US20200195690A1 (en) | Data processing and scanning systems for generating and populating a data inventory | |
| CN110852601B (en) | Big data application method and system for environmental monitoring law enforcement decision | |
| US7051046B2 (en) | System for managing environmental audit information | |
| CN109784721B (en) | Employment data analysis and data mining analysis platform system | |
| CN105989443A (en) | Intelligent-mobile-terminal-based communication line inspection system | |
| CN111414446B (en) | Land space basic information platform | |
| CN108846911A (en) | A kind of Work attendance method and device | |
| CN109254901B (en) | A kind of Monitoring Indexes method and system | |
| CN106982251A (en) | Project field work data reporting method and system are reconnoitred based on mobile device | |
| CN104392297A (en) | Method and system for realizing non-business process irregularity detection in large data environment | |
| CN102184196A (en) | Petition integrated management information system | |
| US11222309B2 (en) | Data processing systems for generating and populating a data inventory | |
| US20190258989A1 (en) | Data processing systems for generating and populating a data inventory | |
| CN114385609A (en) | Label-based government affair event processing system, method, equipment and storage medium | |
| CN113888126A (en) | Oil gas pipeline inspection management system | |
| CN116089392B (en) | Information system evaluation library building system and method | |
| CN112784001A (en) | Real estate information monitoring method and system based on full-flow management and control | |
| KR101310420B1 (en) | User-definable Process-based Management System for Urban Planning and Recording Media for the Same | |
| CN117455379A (en) | Basic intelligent management system and method | |
| CN107608979A (en) | Identify the method and device of the potential knowledge point sought help of user | |
| CN115271514A (en) | Communication enterprise monitoring method and device, electronic equipment and storage medium | |
| CN113486115A (en) | Talent information management system based on big data | |
| CN114840519A (en) | Data labeling method, equipment and storage medium | |
| Dangermond | Trends in GIS and comments |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |