Industrial control security of Internet of things is listed in Shanghai network

Shanghai has officially released the special emergency response plan for network and information security incidents in Shanghai, which further defines the classification and classification method of information security incidents, emergency work organization system, incident handling procedures and work requirements for key units. According to the analysis, the revised plan adds new types of attack content, such as industrial control security and Internet of things, which are not included in the previous plan.

In this plan, network and information security incidents are divided into harmful program incidents, network attack incidents, information destruction incidents, industrial control system attack incidents, equipment and facility failures and catastrophic incidents.

The network and information security incidents are divided into four levels: Level I (extra large), level II (Major), level III (large) and level IV (general). The information system is interrupted for more than 2 hours, affecting more than 1million public users; Or the data in the information system is lost or stolen, tampered with or counterfeited, which poses a particularly serious threat to the national security and social stability of the city, or leads to economic losses of more than 1billion yuan, which is a super major security event.

Zhang Wei, a network security expert, told the great wisdom News Agency (wechat: dzh_news) that in recent years, information technology has developed rapidly, and attack security problems of emerging technologies have occurred frequently, such as the Internet of things, cloud computing, industrial control, mobile Internet, etc., which have brought many new threats. These emerging plans are fully filled in the revised plan, and the original safety event level is adjusted.

Zhang Wei stressed that industrial control safety involves the national economy and the people's livelihood and information sensitivity. Therefore, "industrial control safety" has been added to the plan.

According to the plan, the office of the municipal network security coordination group (hereinafter referred to as "the municipal network security office") set up in the Municipal Economic and Information Technology Commission undertakes the daily affairs of the municipal network security coordination group and comprehensively coordinates the emergency disposal of network and information security incidents in the city.

The original network security management was relatively decentralized, and various departments had power entanglement, which hindered the development of network security work. This time, after Shanghai releases the revised emergency plan, there may be further actions, such as the establishment of Shanghai's network security and Informatization Leading Group, so that more authoritative leaders can take the helm.