国家电子政务工程建设项目非涉密信息系统信息安全风险评估报告模板

附件：

国家电子政务工程建设项目非涉密信息系统

信息安全风险评估报告格式

项 目 名 称：

项目建设单位：

风险评估单位：

年 月 日

目 录

二、风险评估活动概述...........................................................................................................................2

2.1 风险评估工作组织管理.................................................................................................................2

2.2 风险评估工作过程.........................................................................................................................3

2.3 依据的技术标准及相关法规文件.................................................................................................3

2.4 保障与限制条件.............................................................................................................................3

三、评估对象...........................................................................................................................................3

3.1 评估对象构成与定级.....................................................................................................................3

3.1.1

3.1.2

3.1.3

..................................................................................................................3

4.1.2

4.2 关键资产说明.................................................................................................................................5

五、威胁识别与分析...............................................................................................................................5

5.1 威胁数据采集.................................................................................................................................5

5.2 威胁描述与分析.............................................................................................................................5

5.2.1

..............................................................................................................................5

5.2.2

..........................................................................................................................5

5.2.3

..........................................................................................................................5

5.3 威胁赋值.........................................................................................................................................5

六、脆弱性识别与分析...........................................................................................................................6

6.1.6

.......................................................................................................................7

6.1.7

...........................................................................................................7

6.1.8

...............................................................................................................................7

6.2 脆弱性专项检测.............................................................................................................................7

6.2.1

...................................................................................................................7

6.2.2

...........................................................................................................7

6.2.3

.......................................................................................................7

6.2.4

...............................................................................................7

6.2.5

...........................................................................................................................7

6.2.6

...........................................................................................................7

7.2.3

..........................................................................................................8

7.2.4

..........................................................................................................................8

八、综合分析与评价...............................................................................................................................8

九、整改意见...........................................................................................................................................9