A Risk Assessment Model for Power Data Security Considering Subjective and Objective Factors

With the continuous development of new power systems, the power consumption information collection system has transformed from a closed system to an open environment, which has led to the expansion of data collection and control scope, frequent increase in user interaction, and increasingly complex and diverse network attack methods. These changes significantly increase the risk of data being tampered with, leaked, or deleted, and there is an urgent need to strengthen data security protection. This study proposes a data security risk assessment method that combines AHP subjective evaluation, CRITIC objective evaluation, and Boston matrix analysis. This method includes both qualitative and quantitative analysis. Firstly, by analyzing the various stages of data processing in the electricity information collection system, subjective and objective evaluation methods are used to determine the weight of evaluation indicators, and the credibility, availability, integrity, and confidentiality of the data are evaluated. Next, we need to analyze data security risks, identify key risk items of information systems using the Boston matrix by considering the degree of harm of data risks and the development trend of data security risks. Finally, the effectiveness and accuracy of the evaluation method were verified through practical cases, providing important references for data security management for power system builders and operators.