Risk-based information security audit applied research in the power industry

This paper analyzes the information security situation in the power industry,Combined with information security requirements of the power industry, From the information security audit objectives, audit evidence, information security control framework, information security and other aspects of the audit process is proposed for the power industry to establish risk-based information security audit systems and processes.