政务数据安全合规评估要点及实践  

Key Points and Practice of Compliance Assessment for Government Data Security

作　　者：陈永刚[1] 赵增振 陈岚 Chen Yonggang;Zhao Zengzhen;Chen Lan(State Information Center,Beijing 100045;Information&Data Security Soluions Co.,Lid,Shanghai 201803)

机构地区：[1]国家信息中心,北京100045 [2]上海观安信息技术股份有限公司,上海201803

出　　处：《信息安全研究》2022年第11期1050-1054,共5页Journal of Information Security Research

摘　　要：随着数字政府建设的深入推进,政务数据安全已成为数字政府的生命线.国家高度重视政务数据的安全风险防范工作,颁布了一系列法律法规和政策文件,对加强政务数据安全管理提出了明确要求.结合政务数据安全合规要求,提出了政务数据安全合规评估方法和指标体系,为政务数据管理者开展政务数据安全合规评估提供参考.With the development of digital government,the security of government data has become a crucial task.The state attaches great importance to the security risk prevention of government data,and has issued a series of laws,regulations and policy documents,which put forward clear requirements for strengthening the security management of government data.Based on the requirements of government data security compliance,this article proposes the evaluation method and index system of compliance assessment for government data security,which will provide reference for the manager of government data to carry out government data security compliance assessment.

关 键 词：电子政务 数据安全 安全合规 风险评估 数字政府 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]