关于构建数据安全生态圈的研究与实践  

Research and Practice on the Construction of Data Security Ecosystem

作　　者：曾令平 李凯 杨浩淼[3] Zeng Lingping;Li Kai;Yang Haomiao(Shenzhou NSFOCUS Chengdu Information Technology Co.,Ltd.,Chengdu 610213;Beijing Shenzhou NSFOCUS Information Technology Co.,Ltd.,Beijing 100089;University of Electronic Science and Technology of China,Chengdu 611731)

机构地区：[1]神州绿盟成都科技有限公司,成都610213 [2]北京神州绿盟科技有限公司,北京100089 [3]电子科技大学,成都611731

出　　处：《信息安全研究》2021年第10期941-948,共8页Journal of Information Security Research

基　　金：国家自然科学基金项目(62072081)。

摘　　要：2021年3月,《中华人民共和国国民经济和社会发展第十四个五年规划和2035年远景目标纲要》正式发布,其中提到"坚持放管并重,促进发展与规范管理相统一,构建数字规则体系,营造开放、健康、安全的数字生态"."数字生态"的提出为构建数据安全生态圈的研究和实践提供了有力支撑,在国家数据安全战略的指导下,正逐渐形成全社会共同参与、共同维护数据安全和促进发展的良好环境.提出数据安全生态圈的整体框架,包括1个中心、2个循环、3个体系、5个关键和8大路线.以数字生态为建设目标,从如何落实数据安全治理与建设要求的角度出发,确定数据安全生态圈的具体内容以及各项指标,最终形成数据安全各层级的落地执行路径.In March 2021,"the 14 th five year plan for national economic and social development of the People’s Republic of China and the outline of long-term objectives for 2035"were officially released,which mentioned that"we should pay equal attention to open and control,promote the unity of development and standardized management,build a digital rule system,and create an open,healthy and safe digital ecology".The proposal of"digital ecology"provides strong support for the research and practice of constructing a data security ecosystem.Under the guidance of the national data security strategy,agood environment that the whole society participates,maintains data security and promotes development is gradually formed.This study proposes the overall framework of the data security ecosystem,including one center,two cycles,three systems,five keys and eight routes.Taking the digital ecology as the construction goal,the specific contents and indicators of the data security ecosystem are determined from the perspective of how to implement the data security governance and construction requirements.Finally,a landing execution path at all levels of data security is formed.

关 键 词：数据安全 生态圈 个人信息保护 数据安全合规 数据安全治理 数据安全考核指标 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]