Home > News content

The Ministry of Industry and Information Technology responded to the "Suggestions on Strengthening the Security Construction of Industrial Internet Platform"

via:新浪科技     time:2021/11/9 23:03:22     readed:182

Industrial and Information

In order to implement the important thinking of the General Secretary of the Popular Secretary on Adhering to and Perfecting the People's Congress, the Ministry of Industry and Information Technology actively did a good job in the 13th National People's Congress, four conferences of the 13th National People's Congress. The handling of the four conference proposals, especially in combination with party history, practical practices, solve problems, strengthen organization guidance, innovation communication mechanism, and strive to convert representative members, high quality recommendations to crack Policy measures for problems promote high quality development in industrial and informationization. In order to in-depth propaganda industry and the Ministry of Information Science, the National Second Participation proposal proposal to handle the results, the Ministry of Industry and Information Technology "Industrial and Information Technology" Industrial System "Industrial and Information Technology" special "Industrial and Information" column opened "Subsequent" column, and sequentially proposes part of the proposal.

Reply to the recommendations of the 13th National People's Congress

Tian Likun representative:

The recommendations on Strengthening the Security Construction of Industrial Internet Platforms are received, and the reply is as follows:

At present, the industrial Internet has developed rapidly, and the number of platforms is significantly increased, and the fusion is increasingly matured. As the central center of the industrial Internet, the industrial Internet platform carries the application of ecology, accessing the massive equipment, and the network security risk challenge is increasing. I agree with you to improve the platform safety management system, improve platform security technology protection capabilities, implement platform data security classification grading management, strengthen security inspection assessment, etc., will actively incorporate relevant work initiatives.

First, work has been carried out

(1) Promote the construction of industrial Internet platform security policy systems. First, according to the "State Council's Guidance Opinion" "The Guidance Opinions Strengthening the Guidance of Industrial Internet Security", "Strengthening the Guidance Opinions of Industrial Internet Security Work", promoting the construction of multi-departmental cooperation, government supervision, corporate responsibility The management pattern, clearly strengthened the security supervision of industrial Internet platforms from all local communication management bureaus, and safety monitoring of networked equipment and systems. The second is to issue the "Notice on the Pilot Work of Industrial Internet Enterprise Network Safety Classification", deploy the start of the classification grading management pilot work, classification, policy, grading protection, and further strengthen platform enterprise network security management. The third is to promote the "Industrial Internet Platform Enterprise Network Security Code" "Industrial Internet Data Security Code" and other four national standards, accelerate the development of more than 30 industrial standards such as safety protection, safety assessment, safety testing of industrial Internet platforms.

(2) Strengthening the safety protection of industrial Internet platforms. First, relying on industrial Internet innovation development projects, support Haier, Foxconn and other industrial Internet platform enterprises to establish a technical means of safety access, situation, risk warning, etc., build test validation, safety test, etc., and encourage threats to trap, Safety technology products such as industrial App safety tests accelerate breakthroughs. The second is to rely on the national industrial Internet security technology monitoring service platform, accumulating more than 100 key industrial Internet platforms, continuous monitoring and disposal of malicious network behavior. The third is to continuously carry out the application of network security technology applications, surrounding the marginal layer, infrastructure layer (cloud IAAS), platform layer (industrial PaaS), application layer (industrial SaaS), and industrial App, select platform security protection excellent solution Program, continuously strengthen the construction of platform safety protection capacity.

(3) Solidly promote industry data security management. First, adhere to the legal and regulatory system, actively participate in legal development of the "Data Safety Law" and consolidate the legal basis of data security work. The second is to issue documents such as "Telecommunication and Internet Industry Data Security Standard System Construction Guide" and other more than 40 key industry standards such as network data classification and important data identification. The third is to deploy special actions, "Telecom and Internet Enterprise Network Data Safety Compliance Evaluation Evaluation Evaluation", and clarify compliance evaluation guidelines. Organize basic telecommunications enterprises to carry out data classification, important data identification, data security assessment and other standard applications, guiding key Internet enterprises to carry out data security management capacity assessments.

(Iv) accelerate the construction industry in Internet security technology protection system. First, the basic completion of 14 important areas of national, provincial and enterprise Internet security technology industry three collaborative monitoring service system has covered national platform automotive, electronics, steel and other industries, involving more than 10 industrial enterprises at home. Second, check the Internet security industry organizations, to develop detection kits and verification platforms, the timely detection, notification and rectification of safety hazards risk nearly 2,000. Third, relying on the Internet industrial enterprise network security classification and grading management pilot, for test and evaluation platform for enterprises to develop, guide enterprises to effectively implement the platform network security measures.

Second, the next step is considered

Doing a good job in platform security is important for improving the high quality development level of industrial Internet. Next, I will focus on improving the platform security management system, improving platform security, and strengthening platform data security protection.

(1) Improve the safety management system of industrial Internet platform. First, promote the introduction of industrial Internet enterprise network security classification management guidelines, in-depth implementation platform enterprise network security classification management, strengthen key platform enterprise network security management. The second is to promote the "Industrial Internet Integrated Standardization System Construction Guide" (2021), accelerate the development of national standards and other national standards such as systematic Internet platform safety classification, and guide enterprises to implement network security subject responsibility.

(2) Continuous improvement of industrial Internet platform safety levels. First, encourage key platform enterprises to build enterprise security situational perception, and incorporate key platforms into safety monitoring systems, strengthen platform safety monitoring and early warning, emergency disposal. The second is to introduce small and medium-sized enterprises on the cloud platform policy measures to implement SMEs, and provide safety guidelines for SMEs. The third is to rely on engineering projects, pilot demonstrations, etc., further increase the platform safety key technology research and excellent project selection, promote network security technology innovation applications, improve platform security and service capabilities.

(3) Effectively carry out industrial Internet data security protection. First, implement the "Data Safety Law", study the development of industrial Internet data security management policies, establish and improve the basic system such as grading protection, important data protection. The second is to speed up the data security standards for key areas such as industrial Internet, organize standard verification and pilot demonstrations, and guide companies to do data security. The third is to vigorously develop data security technology and industries, encourage relevant enterprises, research institutions to actively participate in data security key technology research and development innovation and application promotion of data security such as data security, data traceability. The fourth is to organize the research data security certification system, formulate an assessment and certification mechanism for assessment and certification mechanisms involved in the production of production and research, and carry out certification work.

(4) The system strengthens industrial Internet security capacity. First, improve the safety technology monitoring service system, expand the scope of monitoring, enrich the platform function, improve the quality of monitoring, and improve the support of government decision-making, and ensure the safety of enterprises. The second is to give full play to the role of the industry threat information sharing platform, promote the establishment of cross-regional, cross-industry notification and emergency linkage mechanisms, enhance industrial Internet major security risks, major security incidents. The third is to improve the security inspection and testing mechanism, regularly conduct inspection and assessment of key platforms, industrial enterprises, industrial APPs, and promote standardization, normalization, and systemification of safety testing assessments.

Thank you for your concern and support for industrial Internet security.

Ministry of Industry and Information Technology

September 14, 2021

  

translate engine: Google

China IT News APP

Download China IT News APP

Please rate this news

The average score will be displayed after you score.

Post comment

Do not see clearly? Click for a new code.

User comments