It’s time for governance!Reference path for data security protection in the industrial field

In February 2024, the “Implementation Plan for Improving Data Security Capabilities in the Industrial Sector (2024-2026)” (hereinafter referred to as the “Implementation Plan”) issued by the Ministry of Industry and Information Technology clearly stated that by the end of 2026, the data security system in the industrial sector will basically be in place. Establish. Industry support capabilities such as data security technology, products, services and talents have been steadily improved.

1. More than 45,000 companies have implemented data classification and hierarchical protection

The Ministry of Industry and Information Technology requires that we focus on key enterprises and regulated enterprises, and implement data classification and hierarchical protection for more than 45,000 enterprises, covering at least the top 10% of regulated industrial enterprises with annual revenue in each province (autonomous region, city).

• Strengthen the leading role of excellent application practices

Establish projects to develop no less than 100 national, industry, group and other various standards and specifications, strengthen detailed standard guidance for enterprises to fulfill their data security protection responsibilities and obligations, and select no less than 200 typical cases for no less than 10 key industries. Strengthen the leading role of excellent application practices.

• Increase talent training

Increase talent training, achieve training coverage of 30,000 people, and train more than 5,000 talents. Overall, data security construction in the industrial field has entered a critical stage. The promulgation of the “Implementation Plan” further refines the legal and policy requirements in the industrial field, accelerates the deepening and practical implementation of data security work in the industrial field, and plays an important role in strengthening data security, cultivating new productivity, maintaining the safety and stability of the industrial chain and supply chain, and escorting The high-quality development of new industrialization is of great significance. Li Jun, director of the Technical Assurance Institute of the National Industrial Information Security Development Research Center, said that my country’s industrial data security currently faces three problems: First, my country’s industrial enterprises generally have weak data security awareness and lack a basic understanding of data security protection; second, my country’s industrial enterprises Investment in data security is still relatively low, protection capabilities are basically lacking, and the supply of industrial data security products is insufficient. Third, my country's industrial sector has diverse industry categories, and the implementation of data security supervision is complex and difficult.

As a representative unit in the field of industry and information technology, China Telecom has long carried out data security governance work, and based on its own capabilities and practices, it has polished the “Telecom Digital Shield” series of data security products to improve the data protection capabilities, data security supervision capabilities and data security capabilities of industrial enterprises. Accumulate valuable experience in improving security industry support capabilities.

Through the product system of “1 platform + 12 security components + 6 types of special services”, Telecom Digital Shield provides industrial enterprise data element management with security capabilities covering the entire life cycle of data, including but not limited to data classification and classification construction, data security Risk assessment, mobile data monitoring, data security situation capability building, data outbound security assessment, data leakage prevention capability building, data security normalized operation services, etc. As one of the participating units in the “Industrial Data Classification and Grading Guidelines”, the Telecom Security Data Security Team focuses on key data processing scenarios such as industrial enterprise data aggregation, sharing, export, personnel violation operations, and uncontrolled remote operation and maintenance, as well as easy and frequent data processing scenarios. Risk scenarios, promptly provide industrial enterprise customers with data security risk assessment and data security construction solutions that are most suitable for actual scenarios.

Strengthen resource investment in common technologies and key technologies to carry out technical research. The Telecom Digital Shield classification and grading system has been widely adapted to nearly 40 types of databases; and through integrated training and reinforcement learning models, the degree of automation of classification and grading has been greatly improved; mobile data monitoring The system has the most comprehensive static identification rules built into the industry, and has risk monitoring capabilities for internal operation and maintenance, external access, work secrets, Web services and other scenarios. Through the original dynamic AI engine, the identification accuracy is increased by more than 50%; data security management platform All components can be managed in a unified manner, and data and events can be displayed intensively and operated efficiently. The process of achieving the capabilities of the Telecom Digital Shield platform is also a process for enterprises to establish a coordinated and powerful data security management system, build complete key core capabilities for data security, and conduct an orderly data security maturity assessment, thereby helping enterprises protect the most important aspects of the information age. core value.

Build the foundation of national development with the stone of data security. Our country is a big country in data production and application, and it is also the first country in the world to propose the theory of data elements. Ensuring data security is related to the overall national security. Telecom Digital Shield provides users with the ultimate experience of full discovery of data assets, real-time monitoring of circulation risks, and integrated operation of security protection for data security governance scenarios, external application scenarios, corporate office scenarios, and database access scenarios. “With tens of millions of pieces of data, security comes first” – Telecom Digital Shield continues to protect the digital development of enterprises!

China Telecom Security

Tianyi Security Technology Co., Ltd. is a technology-based and platform-based professional company that China Telecom intensively develops network security business. It uses an integrated R&D and operation approach to integrate the entire group's cloud network, security, data and other advantageous resources and capabilities to conduct unified operations and provide internal services. External customers provide various security products and services such as cloud network security, data security, and information security. The company has always adhered to the mission of inheriting the red gene and protecting a safe China, and is committed to becoming the most reliable network security operator in the digital era!