国家网络安全审查制度的保障功能及其实现路径  

The Safeguarding Function of National Cyber Security Review System and the Path to Their Realization

作　　者：马宁[1] 

机构地区：[1]西安交通大学法学院信息安全法律研究中心

出　　处：《环球法律评论》2016年第5期134-150,共17页Global Law Review

基　　金：2015年国家社会科学基金重大项目"网络社会创新治理研究"(15ZDA047)的研究成果

摘　　要：国家网络安全审查制度是我国提升国家网络安全保障能力的创新制度,但现有政策立法对于该制度的规定存在诸多争议。其中需要首先明确网络安全审查的制度功能,片面的"反制"定位并不能解决我们面临的安全问题,反而会将审查制度降格为纯粹的"政策工具"。在保障功能视域下审视网络安全审查制度,也有利于澄清制度的独立性问题,及其与外商投资国家安全审查在审查重点、审查对象和审查内容方面所存在的区别。为保证国家网络安全审查制度保障功能的实现,我国应当逐步建立基于风险的威胁态势感知审查理念,解决"风险残余"的棘手问题;细化信息系统分级,限定网络安全审查的实施范围;实施供应链安全审查,强调背景审查和技术审查相结合;完善信息安全标准体系,为审查机构和供应商提供明确的遵从指引。National cyber security review hancing the state＇ s ability to safeguard national cy syst her em is an innovative system aimed at ensecurity. However, there are many controversies over and doubts about the existing legislation and policy on this system. The first issue needs to be clarified is the institutional function of the system. The one-sided ＂counter＂ function can not solve the cyber security problems faced by China, but will degrade the system into a pure ＂policy tool＂. Examining the system from the perspective of the safeguarding function is conducive to clarifying the questions relating ences from national security review of foreign to the independence of the system and its differinvestment in the emphasis, target, and content of review. In order to ensure the realization of the function of this system, China should gradually establish the risk-based ＂review of threat situational awareness＂ to solve the difficult problem of risk residual, further elaborate the grading of information systems, define the scope of imple-mentation of the system, carry out review on security of supply chain, emphasize the combination of backgro standards, and und review and technical review, improve the system of information security provide clear compliance guidelines for the review agencies and suppliers.

关 键 词：国家网络安全审查 信息技术产品采购 制度塑造 

分 类 号：D922.16[政治法律—宪法学与行政法学]