关键词: 数据安全, 标准体系, 卫生健康行业, 实践经验, 方法论

Abstract: As a national strategic development direction, information security has always received social attention. The implementation has raised data security and personal privacy protection to the height of the rule of law, which is “Data Security Law of the People’s Republic of China” and “Personal Information Protection Law of the People’s Republic of China”. All industries are exploring data protection measures actively, and are trying to improve the data security standard system constantly. However, industry differences and data diversity have become the biggest problem in data security standardization. By summarizing the practical experience of the local standard system in health industry in Suzhou City, the methodology of data security standard construction is proposed. The standard system process is scientific and objective, which can provide reference experience to the construction of data security standard systems in other industries.

Key words: data security, standard system, health industry, practical experience, methodology