摘 要：“互联网 +”时代的到来，有力地促进了企业信息化应用，但是企业信息化软件研发也面临着许多安全威胁，存在许多可以避免或消除的信息系统安全漏洞，这给企业信息化软件普及带来了严峻的挑战。因此，为了提高企业信息化普及水平，本文简要介绍了企业信息化研发现状及安全管理体系相关内容，分析了企业信息化研发安全管理体系存在的问题并提出解决对策，本文从六个方面针对企业信息化研发安全管理体系进行了深入研究，优化研发组织职能，制定严格的信息化研发管理制度，加强研发过程管控，同时加强技术支撑、评价考核和配套保证，进一步提高企业信息化研发安全管理水平。
关键词：信息系统本质安全；研发安全管理体系；研发全过程管控
中图分类号：TP311.52；TP309.7 文献标识码：A 文章编号：2096-4706（2019）11-0160-03
O ptim ization D esign of Enterprise Inform atization R & D Safety M anagem ent System
CAO Hongyu
(State Grid Information and Telecommunication Group Co.，Ltd.，Beijing 102211，China)
Abstract： The advent of the “internet plus” era has effectively promoted the application of enterprise information. However，enterprise information software development is also facing many security threats. There are many information system securityvulnerabilities that can be avoided or eliminated，and this has brought severe challenges to the popularization of enterprise informationsoftware. Therefore，in order to improve the level of enterprise informatization，this paper describes in detail the status of enterpriseinformation research and development and the content of security management system，analyzes the existing problems and proposessolutions. This paper proposes the enterprise information security research and development security management system from six aspects.R&D organizational functions，develop a strict information research and development management system，strengthen the control of theresearch and development process，while strengthening technical support，evaluation and supporting guarantees，and further improve thelevel of enterprise information research and development security management.
Keywords： information system intrinsic safety；R & D safety management system；R&D process control
参考文献：
[1] [ 美 ] 惠特曼，马托德 . 信息安全原理 [M]. 北京：清华大学出版社，2004.
[2] 李仪 . 研发能力持续成长路线图：向华为学习研发管理，助推企业持续发展 [M]. 北京：电子工业出版社，2013.
作者简介：曹洪雨（1976.07-），男，汉族，山东聊城人，中级职称，研究生，研究方向：计算机应用技术。