GB/T 36572-2018Guidelines of cyber security protection for electric power system supervision and control (English PDF)

Foreword

This standard was drafted in accordance with the rules given in GB/T 1.1-2009.

Introduction

With the wide application of computer and network communication technologies in power monitoring systems, network security problems of power monitoring systems have become increasingly prominent.

In order to strengthen the security management of the power monitoring system, prevent attacks against power monitoring systems such as hackers and malicious code, and protect the power system.

Safe and stable operation, according to the National Development and Reform Commission, No. 14 of 2014, "Safety Protection Regulations for Power Monitoring Systems" and National Letters This standard is formulated in accordance with the relevant provisions of the interest system level protection.

1 Scope

This standard specifies the basic principles, system architecture, protection technology, emergency backup measures and safety of network security protection for power monitoring systems. Management requirements.

This standard is applicable to the safety protection of power monitoring systems in all aspects of power generation such as power generation, transmission and distribution, electricity consumption, power grid dispatching, etc.

Planning, research and development, construction, installation and commissioning, system transformation, operation management, decommissioning and retirement.

2 Normative references

The following documents are indispensable for the application of this document. For dated references, only dated versions apply to this document. For undated references, the latest edition (including all amendments) applies to this document.

GB/T 9361 computer site safety requirements

GB 17859-1999 Computer Information System Security Protection Level Division Guidelines

GB/T 18336.2-2015 Information technology security technology - Information technology - Assessment criteria - Part 2. Security Component

GB/T 20272-2006 Information security technology operating system security technical requirements

GB/T 20984-2007 Information Security Technology Information Security Risk Assessment Specification

GB/T 21028-2007 Information Security Technology Server Security Technical Requirements

GB/T 21050-2007 Information security technology network switch security technical requirements (assessment assurance level 3)

GB/T 22186-2016 Information security technology IC card chip security technical requirements with central processing unit

GB/T 22239-2008 Information security technology information system security level protection basic requirements

GB/T 22240-2008 Information Security Technology Information System Security Level Protection Rating Guide

GB/T 25058-2010 Information Security Technology Information System Security Level Protection Implementation Guide

GB/T 25068.3-2010 Information technology security technology - IT network security - Part 3. Inter-network communication using security gateways safety protection

GB/Z 25320 (all parts) Power system management and its information exchange data and communication security

GB/T 30976.1-2014 Industrial control systems - Information security - Part 1. Assessment

IEC 62443 (all parts) Industrial automation and control system security (SecurityforIndustrialAutomationandCon-trolSystems)

3 Terms and definitions

The following terms and definitions apply to this document.