GB/T 36047-2018Electric power information system security inspection standard (English PDF)
电力信息系统安全检查规范
This is a limited preview
Buy now to download the full PDF (25 pages)
Need quotation for your management?
Get a formal quotation for GB/T 36047-2018 in 30 minutes.
Issued by
SAMR; SAC
Level / Type
National · Recommended
Issue date
March 15, 2018
Implementation date
October 1, 2018
Scope
GB/T 36047-2018 is the English-translated version of 电力信息系统安全检查规范.
GB/T 36047-2018 is the Chinese specification for security inspections of electric power information systems, covering both management information systems and production control systems.
It sets out the inspection workflow, from preparation and implementation to analysis of results, and the content and method of inspection in fifteen areas: organization, rules and regulations, funding, personnel, outsourced services, key information assets, system construction and operation, emergency management, the security partition defence system, network protection, hosts and devices, applications and data, physical environment and business continuity.
An informative annex gives qualitative and quantitative risk analysis methods. It applies to inspections by the industry's network security authorities and to self-inspections by power companies. It was issued on 15 March 2018 and has applied since 1 October 2018.
Found what you need?
Document preview — GB/T 36047-2018
National Standard of the People's Republic of China
- ICS
- 27.010
- Classification
- F 07
Issued by: State Administration for Market Regulation; Standardization Administration of the PRC
Contents
- Preface
- Introduction
- 1 Scope
- 2 Normative references
- 3 Terms and Definitions
- 4 Inspection Workflow
- 4.1 Inspection Preparation
- 4.2 Inspection Implementation
- 4.3 Inspection Result Analysis
- 5 Inspection contents and inspection methods
- 5.1 Organization System
- 5.2 Rules and Regulations
- 5.3 Funds Protection
- 5.4 Personnel Safety Management
- 5.5 Service Outsourcing Control
- 5.6 Key Information Asset Management
- 5.7 Information System Construction Security Management
- 5.8 Information System Operation Security Management
- 5.9 Emergency Management
- 5.10 Security Partition Defense System
- 5.11 Network Security Protection
- 5.12 Host and Device Security
- 5.13 Application System and Data Security
- 5.14 Physical Environment Security
- 5.15 Business Continuity Protection
- Appendix A (Informative) Risk Analysis Methods
- A.1 Qualitative analysis
- A.2 Quantitative analysis
Foreword
This standard was drafted in accordance with the rules given in GB/T 1.1-2009.
Introduction
In order to standardize the inspection process, contents, and methods of power information system security, prevent network and information security attacks from causing damage to power information systems.
Violations to ensure the safe and stable operation of power information systems and protect the safety of national key information infrastructure, based on national All standards and requirements for the safety of information systems in the electric power industry shall be established.
1 Scope
This standard specifies the process, method and content of the power information security inspection work.
This standard applies to the industry network and information security authorities to carry out the inspection of power information system security and power companies in this set Within the mission (system), self-inspection of related information system security is carried out.
2 Normative references
The following documents are indispensable for the application of this document. For dated references, only dated versions apply to this document. For undated references, the latest version (including all amendments) applies to this document.
GB/T 5271.8 Information Technology Glossary Part 8. Security
GB 17859-1999 Guidelines for the classification of security levels for computer information systems
GB/T 22239-2008 Information Security Technology Information System Security Level Protection Basic Requirements
GB/T 25069-2010 Information Security Technical Terms
3 Terms and definitions
The following terms are defined in GB/T 5271.8, GB 17859-1999, GB/T 22239-2008 and GB/T 25069-2010 And definitions apply to this document.
3.1 Power information system
Information systems related to the production, operation, management, and control of power companies.
Note: According to the information system's responsible units, business types and business importance and physical location differences and other factors, can be divided into management information systems and production Control system.
3.2 Management information system
Support information systems for the operation, management, and operation of power companies.
Note: Such as portal website system, power marketing management system, financial management system, human resources management system, logistics management system and quality management system. this Class systems are often deployed in large areas of management information, and isolation from the Internet is logically isolated or stronger than logical isolation but weaker than physical isolation.
3.3 Production control system
Computer-based and network-based business processing systems and smart devices for monitoring and controlling the production and operation of power grids and power plants.
Note: Such as power dispatch data network, power data acquisition and monitoring system, energy management system, substation automation system, converter station computer monitoring system, Power plant computer monitoring system, distribution automation system, microcomputer relay protection and safety automatic device, wide area phasor measurement system, load control system, Water leveling automation system and water elevator level dispatching automation system, electric energy metering system, auxiliary control system for real-time power market, etc. This type of system In principle, it is deployed in a large area of production control. The isolation strength from the Internet is similar to physical isolation.
3.4 Control area
The security system consists of real-time monitoring functions and real-time subnets or dedicated channels of power distribution data networks that are connected longitudinally.
......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 25 pages — is available in the English PDF.
Referenced standards
Normative references
- GB/T 5271.8Information technology -- Vocabulary -- Part 8: Security
- GB 17859-1999Classified criteria for security protection of computer information system
- GB/T 22239-2008Information security technology - Baseline for classified protection of cybersecurity
- GB/T 25069-2010Information security techniques—Terminology
Similar standards
How to Download GB/T 36047-2018
- 1
Add to cart
Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.
- 2
Checkout
Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).
- 3
Instant delivery (0–9 sec)
Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
- 4
Invoice included
A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.
Related Standards
GB 17859-1999 — Classified criteria for security protection of computer information system
GB/T 5271.8-2001 — Information technology -- Vocabulary -- Part 8: Security
GB/T 7251.4-2026 — Low-voltage switchgear and controlgear assemblies - Part 4: Particular requirements for assemblies for construction sites (ACS)
Secure payment via Stripe
Payments accepted
GB/T 36047-2018
$385.00