国外ICT供应链安全管理研究及建议  

Research on Foreign ICT Supply Chain Security Management with Suggestions

作　　者：倪光南[1] 陈晓桦 尚燕敏 王海龙[1] 徐克付[3] 

机构地区：[1]中国科学院计算技术研究所,北京100190 [2]中国网络空间研究院,北京100010 [3]中国科学院信息工程研究所,北京100093

出　　处：《中国工程科学》2016年第6期104-109,共6页Strategic Study of CAE

基　　金：中国工程院重大咨询项目"网络空间安全战略研究"(2015-ZD-10)

摘　　要：鉴于国家关键基础设施和关键资源(CIKR)对信息通信技术(ICT)的依赖,识别和控制ICT供应链风险已成为保障国家安全的重要手段。美国作为ICT供应链管理的先行者,在提升战略地位、开展风险管理、确保软硬件安全、监管政府采购等方面为各国提供了丰富经验;欧盟、俄罗斯也加强了ICT供应链的安全管理。在分析上述国外情况的基础上,给出了完善我国ICT供应链安全管理的相关建议。Given the nation＇s critical infrastructure and key resources （CIKR） reliance on information and communication technology （ICT）, identifying and controlling the ICT supply chain risk has become an important factor when protecting national security. As the forerunner of ICT supply chain management, the US provides rich experience in enhancing the strategic position of the ICT supply chain, establishing the standards of ICT supply chain management, ensuring the security of software and hardware in the ICT supply chain, and supervising the procurement of ICT supply chains. In addition, the EU and Russia also specifically strengthen the security management of the ICT supply chain. Based on the above research, this paper provides some suggestions on the security management of the ICT supply chain in China.

关 键 词：供应链风险管理 硬件供应链 软件供应链 采购安全 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]