信息安全研究 ›› 2023, Vol. 9 ›› Issue (1): 87-.

• 技术应用 • 上一篇    下一篇

苏州市2022年度第27批科技发展计划

鞠鑫1丁松松2张俊杰1   

  1. 1(苏州市卫生计生统计信息中心江苏苏州215002)
    2(绿盟科技集团股份有限公司杭州310020)
  • 出版日期:2023-01-01 发布日期:2022-12-31
  • 通讯作者: 鞠鑫 硕士,高级工程师.主要研究方向为卫生信息化. juxinmail@163.com
  • 作者简介:鞠鑫 硕士,高级工程师.主要研究方向为卫生信息化. juxinmail@163.com 丁松松 主要研究方向为数据安全治理. dingsongsong@nsfocus.com 张俊杰 主要研究方向为网络信息安全. 516021847@qq.com

Methodological Exploration of Data Security Standard Construction in  Health Industry

  • Online:2023-01-01 Published:2022-12-31

摘要: 信息安全作为国家的战略发展方向,一直备受社会的关注.《中华人民共和国数据安全法》和《中华人民共和国个人信息保护法》的施行,让数据安全和个人隐私保护上升到了法治的高度.各行业都在积极探索数据保护的措施,并不断尝试推进完善数据安全类标准体系.然而行业的差异性、数据的多样性成为数据安全标准化的最大难题.通过总结苏州市卫生健康行业地方标准建设的实践经验,提出数据安全标准建设方法论.标准的建设过程科学、客观,为其他行业数据安全类标准体系建设提供可参考的经验.

关键词: 数据安全, 标准体系, 卫生健康行业, 实践经验, 方法论

Abstract: As a national strategic development direction, information security has always received social attention. The implementation has raised data security and personal privacy protection to the height of the rule of law, which is “Data Security Law of the People’s Republic of China” and “Personal Information Protection Law of the People’s Republic of China”. All industries are exploring data protection measures actively, and are trying to improve the data security standard system constantly. However, industry differences and data diversity have become the biggest problem in data security standardization. By summarizing the practical experience of the local standard system in health industry in Suzhou City, the methodology of data security standard construction is proposed. The standard system process is scientific and objective, which can provide reference experience to the construction of data security standard systems in other industries.

Key words: data security, standard system, health industry, practical experience, methodology