企业数据安全管理体系研究  

Research on Enterprise Data Security Management System

作　　者：邓宽平 

机构地区：[1]上海宝信软件股份有限公司

出　　处：《信息技术与标准化》2024年第7期95-100,共6页Information Technology & Standardization

摘　　要：在数字经济发展的背景下,数据安全被纳入总体国家安全观,企业在数字化转型过程中面临数据安全内控合规难落实的痛点。基于对国家数据安全法律法规的分析,参考相关标准规范,从数据安全管理制度、数据安全保护策略和数据安全运营3方面建立通用数据安全管理框架,并对框架各组成部分的内涵进行了详细描述。最后设计提出数据安全管理制度文件体系,指导企业有效落实数据保护义务,保障数据全生命周期安全。In the background of rapid development of the digital economy,data security has also been included into the overall national security concept.enterprises face the challenge of implementing internal control compliance in the process of digital transformation,Based on the analysis of national data security laws and regulations,and referring to relevant standards and specifications,this paper establishes a general data security management framework from three aspects:data security management system,data security protection strategy,and data security operations.It also provides a detailed description of the connotation of each component of the framework.Finally,the document system of data security management is designed to guide enterprises to effectively implement protection obligations and ensuring data security throughout its life cycle.

关 键 词：数据安全 数据安全管理 数据分类分级 监管 合规 

分 类 号：F270.7[经济管理—企业管理] TP309.2[经济管理—国民经济]