Research on a Cybersecurity Review System with Suggestions
Strategic Study of CAE · 2016
Cybersecurity is a part of national security.The rules and regulations for security testing and evaluation are established in policies regarding national security review systems or cyberspace management.This paper focuses on current international systems related to cybersecurity reviews, and analyzes foreign governments' practices in information technology (IT) product and service security evaluations, critical information infrastructure (CII) security evaluation and management, information and communication technology (ICT) supply chain security and background security investigation.Based on this information and analysis, the authors research how to establish a China's cybersecurity review system in the areas of law and regulation, organization framework, operation mode, review approach, and supporting technology.