ICS 35.040 CCS L 80 备案号： 68965-2019 中华人民共和国电力行业标准 DL/T 2613—2023 电力行业网络安全等级保护测评指南 Evaluation requirement for classified protection of power indus try cybersecurity 2023-05-26 发布 2023-11-26 实施 国家能源局 发 布 中华人民共和国 电力行业标准 电力行业网络安全等级保护测评指南 DL/T 2613—2023 * 中国电力出版社出版、印刷、发行 （北京市东城区北京站西街 19号 100005 http://www.cepp.sgcc.com.cn ） * 2023年9月第一版 2023年9月北京第一次印刷 880毫米×1230 毫米 16开本 15印张 467千字 * 统一书号 155198·4916 定 价 298.00元 版 权 专 有 侵 权 必 究 本书如有印装质量问题，我社营销中心负责退换 DL/T 2613—2023 DL/T 2613—2023 I 目 次 前言 ······························································ ······························································· · II 引言 ······························································ ······························································· III 1 范 围 ······························································ ···························································· 1 2 规范性引用文件 ······························································ ············································· 1 3 术语和定义 ······························································ ··················································· 1 4 缩略语 ······························································ ························································· 2 5 等级测评工作流程与要求 ······························································ ································· 2 6 等级测评方法 ······························································ ················································ 4 7 总体测评要求 ······························································ ················································ 4 8 第二级测评要求 ······························································ ············································· 9 9 第三级测评要求 ······························································ ··········································· 65 10 第四级测评要求 ······························································ ········································· 125 11 整体测评 ······························································ ·················································· 167 12 测评结论 ······························································ ·················································· 168 附录 A（资料性） 测评单元编号说明 ······························································ ·················· 169 附录 B（规范性） 测评单元索引表 ······························································ ····················· 170 DL/T 2613—2023 II 前 言 本文件按照 GB/T 1.1 —2020《标准化导则 第 1部分：标准的结构和编写》给出的规则起草。 请注意本文件的某些内容可能涉及专利。本文件的发布机构不承担识别这些专利的责任。 本文件由中国电力企业联合会提出。 本文件由电力行业信息标准化技术委员会（ DL/TC 27 ）归口。 本文件起草单位：中国电力科学研究院有限公司、国家能源局信息中心、国家电网有限公司、南方 电网科学研究院有限责任公司、南京南瑞信息通信科技有限公司、国电南京自动化股份有限公司、北京卓识网安技术股份有限公司、国网冀北电力有限公司、国网河北省电力有限公司、国家电投集团数字科技有限公司、国网宁夏电力有限公司、国家电网有限公司客户服务中心、国网数字科技控股有限公司、国网重庆市电力公司电力科学研究院、中国长江三峡集团有限公司流域枢纽运行管理中心、国网江西省电力有限公司、国网北京市电力公司电力科学研究院、广西电网有限责任公司、海南电网有限责任公司、国网西藏电力有限公司、国网陕西省电力有限公司电力科学研究院、国网江西省电力有限公司电力科学研究院、国网青海省电力公司电力科学研究院。 本文件主要起草人：王海翔、肖红阳、梅文明、吴桐、刘莹、朱朝阳、詹雄、张晓、申连腾、周亮、 邱意民、刘大贺、缪思薇、蒋屹新、李圣泉、栾国强、焦安春、郑义、宋小芹、杜金燃、于亚坤、沈宇、陈杰、匡晓云、蒙家晓、叶龙、杨立波、阎博、宋磊、宋少阳、张宏杰、杨祎巍、戚岳、彭轼、陈明亮、向军、吴旻荣、曹毅、刘媛、安业腾、栗维勋、李楠芳、杨浩、高宇、仁真、王超、徐杰、叶程、徐玉景、李洋、丁鲁彬、眭恺、张茂盛、李宽合、何帅斌、隋子鹏、王鹏杰、赵宝春、朱亚运、张晓娟、王鹏、马雅静、蔺子卿、孙泽锋。 本文件为首次发布。 本文件在执行过程中的意见或建议反馈至中国电力企业联合会标准化管理中心（北京市白广路二条 一号， 100761）。 DL/T 2613—2023 III 引 言 为了落实国家网络安全等级保护相关标准规范要求，为电力企业开展电力行业网络安全等级保护定 级、建设、测评与整改等工作提供指导，需制定电力行业网络安全等级保护标准。 本文件是电力行业网络安全等级保护相关系列标准之一。与本文件相关的文件包括： — — DL/T 2614 —2023《电力行业网络安全等级保护基本要求》 。 本文件以 GB/T 28448 —2019和GB/T 28449 —2018为基础，给出了电力行业网络安全等级保护测评 的工作流程和方法，以 DL/T 2614 —2023规定的安全要求项为测评指标，给出了对应的测评要求（参照 GB/T 28448 —2019，将每一项安全要求及其对应的测评要求定义为一个测评单元） 。 为了缩减篇幅， 本文件针对 DL/T 2614 —2023中的两种不同安全要求项， 采用了两种不同处理方法： 1）对 DL/T 2614 —2023中与 GB/T 22239 —2019相同的安全要求项，直接引用 GB/T 28448 —2019 中相应的测评单元条款； 2）对 DL/T 2614 —2023相比 GB/T 22239 —2019提出的新增或增强