信息通信技术与政策

信息通信技术与政策

信息通信技术与政策 ›› 2022, Vol. 48 ›› Issue (2): 37-41.doi: 10.12267/j.issn.2096-5931.2022.2.006

专题:数据治理 上一篇    下一篇

数据安全治理能力评估框架构建研究

Research on the construction of data security governance capability evaluation framework

李雪妮, 秦书锴   

  1. 中国信息通信研究院云计算与大数据研究所,北京 100191
  • 收稿日期:2021-12-20 出版日期:2022-02-15 发布日期:2022-03-14
  • 作者简介:
    李雪妮,中国信息通信研究院云计算与大数据研究所高级业务主管,主要研究方向为数据安全、数据安全治理、数据安全评估评测等|秦书锴,中国信息通信研究院云计算与大数据研究所大数据与区块链部工程师,主要从事数据安全技术、数据安全解决方案及服务能力等研究工作

LI Xueni, QIN Shukai   

  1. Cloud Computing & Big Data Research Institute, China Academy of Information and Communications Technology, Beijing 100191, China
  • Received:2021-12-20 Online:2022-02-15 Published:2022-03-14

摘要:

面对日益严峻的数据安全形势,国家、行业、地方相继出台多项数据安全法律法规,并接连开展审查整治行动,国内数据安全进入强监管新阶段。在此背景下,通过构建数据安全治理体系提升数据安全水平已经成为行业共识,如何评估数据安全治理体系建设成效也备受各方关注。因此,构建完善的数据安全治理能力评估框架对把握数据安全共性问题,了解行业发展情况,发现业内实践标杆有重要作用。

关键词: 数据安全, 数据安全治理, 数据安全评估

Abstract:

In the face of the increasingly severe situation of data security, the state, local government, and industry have successively issued several laws and regulations, followed by a series of related review and rectification actions. The domestic data security has entered a new stage of strong supervision. In this context, it has become an industry consensus to improve the level of data security by building a data security governance system, and how to evaluate the effectiveness of the system’s construction has attracted the attention of all parties. Therefore, building a sound assessment framework of security governance capability plays an important role in grasping the common problems of data security, understanding the development of the industry, and discovering the practice benchmark in the industry.

Key words: data security, data security governance, data security evaluation

中图分类号: