Research On Information Security Risk Management Of Petrochemical Enterprise

As one of the leaders in the petrochemical industry,some petrochemical enterprise plays a crucial role in improving the national living standard and social stability.Since its exploration,production,sales,and other important departments reply heavily on the information system,the development of the information system in the petrochemical industry becomes one of the key components in national infrastructure construction,and the security of the information system matters for the economic development and social stability of the country.Therefore,it is necessary to study how to discover and evaluate the security risks of the information system in the petrochemical industry,as it can not only improve the information security of the enterprise,but also secure the operations of important infrastructures nationwide,which further generates significant economic and political benefits.This paper first illustrates briefly the characteristics of businesses of the enterprise,the properties of the informatization scale,and the security level of its information through analyzing a large amount of survey data.The results suggest that on the one hand,there exist problems in information security in the petrochemical enterprise,which requires a more industry-specific risk assessment method to solve such problems,and on the other hand,it suggests that the method proposed in the following sections is closely related with the characteristics of businesses of the industry and the development of information technology.The second section of the paper proposes a new risk assessment model/method.This method is still based on information system and aims at evaluating information security risks,but in addition to the effect of existing methods,it can further discover security risks not only at the information technology level,but also at the business level.The third section of the paper shows the evaluation results and verifies the feasibility of the new method by a large number of case studies and risk analysis.The fourth section provides suggestions to the petrochemical enterprise on how to handle security risks based on the proposed risk assessment model and the characteristics of the petrochemical industry.