ICS35.030 CCSL80 T/CERS0103­2025团 体 标 准 中国能源研究会发布能源企业数据安全风险评估方法 Datasecurityriskassessmentmethodforenergyenterprises 2025-09-27发布 2025-09-27实施 全国团体标准信息平台 T/CERS0103—2025 I目次 目次............................................................................................................................................................I 前言..........................................................................................................................................................III 引言..........................................................................................................................................................IV 1范围.........................................................................................................................................................5 2规范性引用文件.....................................................................................................................................5 3术语和定义.............................................................................................................................................5 4符号、代号和缩略语.............................................................................................................................6 5通则.........................................................................................................................................................6 5.1能源企业数据安全风险评估工作要求.........................................................................................6 5.2能源企业数据安全风险评估要素关系.........................................................................................6 5.3能源企业数据安全风险评估原理.................................................................................................7 5.4能源企业数据安全风险评估内容.................................................................................................8 5.5能源企业数据安全风险评估实施流程.........................................................................................8 5.6能源企业数据安全风险评估手段.................................................................................................9 5.7能源企业数据安全风险评估适用情形.......................................................................................10 6能源企业数据安全风险评估准备.......................................................................................................10 6.1确定评估目标...............................................................................................................................10 6.2确定评估范围...............................................................................................................................11 6.3组建评估团队...............................................................................................................................11 6.4开展前期准备...............................................................................................................................11 6.5制定评估方案...............................................................................................................................11 7能源企业数据安全风险评估调研.......................................................................................................12 7.1企业基本情况调研.......................................................................................................................12 7.2信息系统调研...............................................................................................................................12 7.3数据资产调研...............................................................................................................................12 7.4数据处理活动调研.......................................................................................................................12 7.5安全防护措施识别.......................................................................................................................13 8能源企业数据安全风险识别...............................................................................................................13 8.1通则.....................................................................