关键词: 网络安全, 关键信息基础设施, 关键信息基础设施保护, 保护要求, 评价指标

Abstract: The safe and stable operation of critical information infrastructure (CII) is crucial to the national security, economic prosperity and peoples wellbeing. In order to effectively measure the protection level of Chinas CII and provide objective measurement standards or work guidelines for the protection departments and operators of CII, it is necessary to design a set of evaluation indicator system for the level of critical information infrastructure protection (CIIP). In accordance with relevant policies, laws and regulations in China, we summarize 12 major requirements of CII, and propose a fourlevel evaluation indicator system for CIIP based on the effectiveness of safety measures and the ability to control risks. Pilot results in the key fields show that this evaluation indicator system is operable and applicable, which can reflect the current situation of CIIP in China and provide references for the CIIP.

Key words: cyber security, critical information infrastructure (CII), critical information infrastructure protection (CIIP), protection requirement, evaluation indicator