Data security knowledge system

Data security knowledge system

Catalog

1、 Data security legislation

2、 Data security lifecycle

2.1、 Data collection security

2.2、 Data storage security

2.3、 Data transmission security

2.4、 Data access security

2.5、 Data exchange security

2.6、 Data destruction security

1、 Data security legislation

2019 year 12 month 30 Japan , About Printing 《App Identification method of illegal collection and use of personal information 》 The notice of .

Revised by China Institute of electronic technology standardization 《 Information security technology personal information security specifications 》 Has been officially approved for release , The implementation time is 2020 year 10 month 1 Japan , replace GB/T35273-2017 Version national standard .

《 Information security technology network security level protection basic requirements for big data 》(T/ISEAA002-2021) The group standard was officially released , since 2021 year 5 month 30 Effective from .

2021 year 6 month 10 Japan , Adopted at the 29th meeting of the Standing Committee of the 13th National People's Congress 《 Data security law of the people's Republic of China 》, since 2021 year 9 month 1 The effective date .

National Internet Information Office 、 National development and reform commission 、 Ministry of industry and information technology 、 The Ministry of Public Security 、 Jointly issued by the Ministry of transport 《 Several regulations on vehicle data security management ( On a trial basis )》, since 2021 year 10 month 1 The effective date .

2021 year 8 month 20 Adopted at the 30th meeting of the Standing Committee of the 13th National People's Congress on November .《 Personal information protection law 》 since 2021 year 11 month 1 The effective date .

2、 Data security lifecycle

2.1、 Data collection security

1、 The security and credibility of the data source 、 Identification 、 User authorization

2、 Personal information and important data are evaluated before collection

3、 Collection process safety compliance 、 logging

4、 Privacy data 、 Sensitive data identification and leakage prevention

5、 Collection tools or equipment should be safely managed 、 Access control, etc

2.2、 Data storage security

1、 Data classification

2、 Storage area and isolation

3、 Encrypted storage

4、 Storage platform or system account 、 password 、 jurisdiction 、 security management

5、 Password protection 、 Key management

6、 Log management

7、 Store backup

8、 Data recovery

9、 Data archiving

2.3、 Data transmission security

1、 Transmission encryption

2、 Network availability management

3、 Transmission interface control

4、 Interface call log management

2.4、 Data access security

1、 Data classification

2、 Data access rights

3、 Data query authority division

4、 Print / Download permissions

5、 Data desensitization

2.5、 Data exchange security

1、 Data interface configuration

2、 Log management and monitoring audit

3、 Document labels

4、 Data encryption 、 data compression

5、 Desensitization of sensitive data

6、 Exchange process validation

7、 Digital watermark

2.6、 Data destruction security

1、 Data content is safely destroyed

2、 User logout

3、 The key is safely destroyed