Shandong strengthens data classification and grading protection for key industrial enterprises
The Provincial Department of Industry and Information Technology recently issued the "Implementation Plan for Promoting the Enhancement of Data Security Capability in the Industrial Sector in Shandong Province (2024-2026)". Shandong will implement three major projects to improve the data protection capability of industrial enterprises, enhance the scientific supervision capability of data security, and improve the support capability of the data security industry. By the end of 2026, the data security guarantee system in the industrial sector in the province will be basically established, and more than 5000 key enterprises will carry out data classification and grading protection. The top 10% of large-scale industrial enterprises with annual revenue in each city will achieve full coverage of data classification and grading protection.
Shandong will adopt online and offline forms such as special online courses, forum lectures, and on-site observations to strengthen the promotion of laws, regulations, and policy standards in the field of data security, guide enterprises to integrate data security into their development strategies and assessment mechanisms, and promote the planning, deployment, implementation, and assessment of data security management and business development together. According to the Implementation Rules for Data Security Management in the Industrial and Information Technology Fields of Shandong Province (Trial), key enterprises are guided to establish and improve security management systems such as data classification and grading protection, regularly sort and identify important and core data, form a directory, and report it in a timely manner. Important data and core data processors shall implement data classification protection requirements and conduct data security risk assessments at least once a year.
Relying on the Provincial Digital Economy Standardization Technical Committee, establish a data security working group to accelerate the development of standards for industrial data security protection, trusted execution environment, situational awareness, risk assessment, etc. While improving the functions of the provincial-level industrial data security management platform, we encourage cities and enterprises with conditions to build city level and enterprise level nodes, and promote integration and linkage with the provincial-level platform. It is reported that Shandong will compile a rolling list of key enterprises for data security risk prevention and control in the industrial sector at the provincial and municipal levels. Through joint inspections by multiple departments and special inspections in the industrial sector, regular data security supervision and inspections will be conducted on the enterprises listed in the list. Data security will gradually be included in the list of administrative law enforcement matters, and channels for complaints and reports of data security violations will be established and improved, with strict measures taken to deal with such violations.
Support the establishment of innovative carriers such as data security industry technology research institutes, joint laboratories, and technology innovation centers, and increase research and development efforts in basic software and hardware core technologies such as encryption chips, secure operating systems, and privacy computing databases. Encourage data security enterprises to develop data security products such as traffic anomaly monitoring, attack behavior identification, event tracing, and disposal around the risks of industrial data leakage, theft, and tampering, and establish and continuously update a directory of data security products. At the same time, Shandong will also deepen cooperation with the Beijing Tianjin Hebei region and the Yangtze River Economic Belt, focusing on promoting national level scientific and technological innovation platforms and industry leaders to establish regional headquarters, incubation platforms, and research and development centers in our province, forming a new pattern of coordinated development of the data security industry, and radiating and driving the high-quality development of the data security industry in the Yellow River Basin.
According to the plan, Shandong will explore the establishment of special funds for data security in the industrial transformation and development funds of various cities, and increase investment in data security funds in the industrial sector through support methods such as rewards and subsidies, and interest subsidies.
Information source: Dazhong Daily
