摘要
在数据资产价值愈发凸显的社会背景下,数据安全问题层出不穷,然而现有主流数据安全治理手段普遍存在数据资产识别不清、数据资产保护手段不全、数据安全保护成本过高等多种痛点和难点问题,难以有效满足日益增加的数据安全防护需求。为应对解决各类数据安全难点问题,本文提出了一种基于纵深管理的数据安全综合治理方案。该方案通过综合建立数据安全管理体系、技术体系、运营体系和监督体系,搭建了数据安全管理平台、数据安全审计平台和数据安全算法平台等关键平台。该方案在实践中数据分类分级识别准确率达80%以上,通过数据安全技术手段为超过20亿条敏感数据和超过5亿条用户口令提供有效安全防护,具有良好的应用效果和可复制推广效果。
In the background of the value of data assets more and more highlighted,data security issues have emerged endlessly.However,existing mainstream data security control methods generally have unclear data asset recognition,incomplete data asset protection methods,and high data security costs.Difficulties,it is difficult to effectively meet the increasing demand for data security protection.In order to cope with the problem of various types of data security difficulties,a comprehensive governance plan based on deep management of data security is proposed.Through comprehensive establishment of a data security management system,technical system,operating system,and supervision system,the data security management platform,data security platform,data security,data security key technologies such as auditing platforms and data security algorithm platforms have achieved key indicators of more than 80%of the accuracy of data classification and grading,and provided effective security protection for more than 2 billion sensitive data and more than 500 million user passwords through data security technology.It proves that the plan has good application effects and replicable promotion effects.
作者
周映
杨琦
杨梓涛
Zhou Ying;Yang Qi;Yang Zitao(China Unicom Software,Beijing,100176;China Industrial Control Systems Cyber Emergency Response Team,Beijing,100040)
出处
《工业信息安全》
2024年第6期53-58,共6页
Industry Information Security
关键词
数据安全
数据全生命周期
纵深管理
综合治理方案
Data Security
Data Life Cycle
Depth Management
Comprehensive Governance Plan
