How to carry out the self-inspection work of information communication and power monitoring safety evaluation

1. Whether there is illegal network outreach in the power monitoring system;

2. Whether the operation and maintenance and technical support personnel connect and mix the computer equipment connected to the production control area with the Internet;

3. Whether all business functions are deployed according to the principle of safe partition;

4. Whether the remote control function is in the safety zone I;

5. Whether the dispatching data network is based on dedicated communication channels (time division multiplexing or wavelength division multiplexing), whether statistical multiplexing PTN or leased virtual private network (VPN) is adopted, etc.

6. Spot check the network equipment of dispatching data network to see whether its security configuration meets the requirements;

7. Whether the lateral boundary of the safety area adopts positive and negative isolation devices and is configured correctly;

8. Whether the longitudinal boundary of dispatching data network adopts forward isolation device and the configuration is correct;

9. Whether to use vertical encryption authentication equipment (card) to replace the firewall of level II security zone;

10. Whether the firewall only opens the data channels required by the application, and whether the IDS intrusion monitoring strategy is reasonable;

1 1. Whether to take technical or related measures to prevent illegal outreach in the production control area; (and check the network interface and USB interface) Three types of workstations check the Internet connection;