Résumé
Starting from the practices of grade protection assessment on the information system of Peking Union Medical College Hos -pital, the paper introduces the information system grade and assessment contents and processes , discusses common problems found in specific work and risk analysis approaches so as to provide a reference for work related to information security .
Résumé
Description of the security grading protection used in the security protection system for information systems in medical organizations. Elaboration of the research ideas, process and some outcomes for the Fundamental Requirements for Security Grade Protection of Information Systems in Medical Organizations, from the five aspects of system modeling, grading guidance for industries, threat and risk analysis, security objective output, and security adjustment.