武汉经开区-互联网和相关服务-核心骨干网络安全等级测评报告

核心骨干网络负责在网络的各个部分之间高速、高效地传输数据。它连接不同的汇聚层，确保数据的高速传输和流量交换；在汇聚层，核心骨干网络进行流量聚合和筛选，确保数据的快速处理和分发；设计为高可用性和冗余，确保在网络故障时仍能保持服务的连续性；支持安全策略的实施，包括访问控制和安全策略的执行，提高网络的安全性；核心骨干网络中包含了安全防护系统（天融信）、好差评系统、叫号系统、视频监控系统、考勤系统、政务外网系统、云呼叫系统、“车谷”微信公众号系统、信息发布系统（LED大屏）、政务数据展示系统、武汉经济技术开发区政府采购电子交易系统、机房门禁系统和档案管理系统。武汉经济技术开发区（汉南区）行政审批局对该系统具有信息安全保护责任。
本次测评按照测评项汇总并分析后，共发现安全问题24个，整改后经复核确认，0个安全问题已整改，剩余安全问题24个，其中高风险问题0个，中风险问题18个，低风险问题6个；选取的测评指标总数为135个，不适用指标为11个，测评指标符合率为80.64%，测评指标部分符合率为13.72%，测评指标不符合率为5.64%；本次测评的综合得分为83.1分，测评结论为良。

The core backbone network is responsible for high-speed and efficient data transmission across all segments of the network. It connects various aggregation layers to ensure high-speed data transmission and traffic exchange. Within the aggregation layers, the core backbone network conducts traffic aggregation and filtering to enable rapid data processing and distribution. It is engineered for high availability and redundancy, ensuring uninterrupted service continuity in the event of network failures. Additionally, it supports the enforcement of security policies, including access control and policy implementation, to bolster network security. The core backbone network encompasses the following systems: Topsec security protection system, good-bad review system, queue calling system, video surveillance system, attendance management system, government affairs extranet system, cloud call center system, 'Chegu' WeChat Official Account system, information release system (LED large screen), government data display system, Wuhan Economic and Technological Development Zone Government Procurement Electronic Trading System, machine room access control system, and archive management system. The Wuhan Economic and Technological Development Zone (Hannan District) Administrative Examination and Approval Bureau bears the information security protection responsibilities for these systems. Following the summarization and analysis of assessment items in this evaluation, a total of 24 security issues were identified. After rectification and post-rectification recheck confirmation, 0 security issues were fully rectified, leaving 24 remaining security issues, including 0 high-risk issues, 18 medium-risk issues, and 6 low-risk issues. The total number of selected assessment indicators was 135, with 11 inapplicable indicators. The full compliance rate of assessment indicators was 80.64%, the partial compliance rate was 13.72%, and the non-compliance rate was 5.64%. The comprehensive score of this evaluation was 83.1, and the final assessment conclusion was "Good".