铁路关键信息基础设施安全防护建设思路初探

为贯彻落实我国关键信息基础设施的保护要求，践行关键信息基础设施运营者主体责任，充分发挥安全运营价值，文章依据国家关键信息基础设施安全防护法要求，参考相关技术标准，分析铁路关键信息基础设施业务特点和防护现状，提出从业务应用、信息系统、重要数据和基础设施4个层面持续加强识别认定、安全防护、监测预警、事件处置和检测评估5项安全防护能力的建设思路，为铁路关键信息基础设施安全防护工作提供理论参考。

Thoughts on safety protection construction of railway critical information infrastructure

In order to implement the protection requirements of China's critical information infrastructure, fulfill the main responsibility of critical information infrastructure operators, and give full play to the value of safe operation, the paper analyzed the business characteristics and protection status of railway critical information infrastructure according to the requirements of the National Key Information Infrastructure Security Protection Law, with reference to relevant technical standards, and put forward the thoughts of continuously strengthening the construction of five security protection capabilities, namely, identification, security protection, monitoring and early warning, event handling, detection and evaluation from the four levels of business application, information system, important data and infrastructure. It can provide theoretical reference for the safety protection of railway critical information infrastructure.