为深入贯彻落实党中央、国务院关于制造强国和网络强国的战略部署,2017年以来,面对严峻的工业控制系统信息安全(以下简称“工控安全”)形势,我国积极开展工控安全检查评估工作,取得了显著成效。一是开展2017年工控安全检查,包括企业安全自查、检查队伍技术抽查、工业现场深度核查等,检查范围覆盖全国5000余家企业的3万多个工业控制系统(以下简称“工控系统”),梳理总结了化工、有色、装备制造、烟草等重要行业的共性安全问题,进一步掌握我国工控安全现状,提高企业整体安全防护水平;二是启动开展工控安全防护能力评估工作,发布《工业控制系统信息安全防护能力评估工作管理办法》及其配套工作方法,完成10家中央企业的工控安全防护能力评估,验证了相关文件的科学性、合理性和可操作性,推动了相关文件的进一步完善和落地实施,丰富了我国工控安全管理手段和方式。
<<In order to carry out the strategic deployment of the CPC central committee and the state council on manufacturing and Internet power. Since 2017,in the face of serious information security of industrial control system (hereinafter referred to as “industrial control safety”),China has actively carried out the assessment and evaluation of industrial control safety,and achieved remarkable results:The first is to carry out industrial control safety inspection in 2017,including enterprise security self-inspection,inspection team technology sampling,industrial field depth verification,etc. Check covering more than 30000 industrial control systems (hereinafter referred to as the industrial control system) of over 5000 Chinese enterprises,carding summed up the chemical,non-ferrous industry,equipment manufacturing,tobacco,and other important common security problems,further grasp the present situation of China’s industrial control,improve the level of enterprise overall safety protection;The second is to launch the assessment work on the safety protection capability of the industrial control system,and issue the management measures for the assessment of the information security protection capability of the industrial control system and its supporting work methods. The evaluation of the safety protection capability of the industrial control of 10 central enterprises has been completed,and the scientific,rational and operability of the relevant documents have been verified. The further improvement and implementation of relevant documents have been promoted,and the methods and methods of industrial control safety management in China have been enhanced.
<<