T-CIITA 506—2022 数据元件安全审核要求

数据元件安全审核要求 ICS35.020 CCSL78 团体标准 T/CIITA 506-2022 Audit requirement of data component for security 2022-07-28 发布 2022-08-28 实施中国信息产业商会发布 CIITA ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ 全国团体标准信息平台 CIITA ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ 全国团体标准信息平台 T/CIITA 506 -2022 I 目次前言 ................................ ................................ ................................ ................................ .......... III 引言 ................................ ................................ ................................ ................................ .......... IV 1 范围 ................................ ................................ ................................ ................................ ............ 1 2 规范性引用文件 ................................ ................................ ................................ ......................... 1 3 术语和定义 ................................ ................................ ................................ ................................ . 1 4 缩略语 ................................ ................................ ................................ ................................ ......... 4 5 总体要求 ................................ ................................ ................................ ................................ ..... 4 6 安全审核内容 ................................ ................................ ................................ ............................. 4 7 安全审核流程 ................................ ................................ ................................ ............................. 4 7.1 流程规范 ................................ ................................ ................................ .............................. 4 7.2 数据资源的申请 ................................ ................................ ................................ .................. 5 7.3 数据元件模型的开发 ................................ ................................ ................................ .......... 5 7.4 数据元件的发布 ................................ ................................ ................................ .................. 5 8 安全审核技术要求 ................................ ................................ ................................ ..................... 5 8.1 数据资源的申请阶段 ................................ ................................ ................................ .......... 5 8.2 数据元件的模型开发阶段 ................................ ................................ ................................ .. 6 8.3 数据元件的发布阶段 ................................ ................................ ................................ .......... 6 附录 A（资料性）数据样本脱敏方法与敏感信息 ................................ ................................ .... 8 参考文献 ................................ ................................ ................................ ........................... 12 CIITA ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ 全国团体标准信息平台 T/CIITA 506 -2022 Ⅱ CIITA ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ ÑÏ½û¸´ÖÆ 全国团体标准信息平台 T/CIITA 506 -2022 III 前言本文件按照 GB/T 1.1 —2020 《标准化工作导则第1部分：标准化文件的结构和起草规则》的规定起草。请注意本文件的某些内容可能涉及专利。本文件的发布机构不承担识别专利的责任。本文件由中国信息产业商会团体标准专业委员会提出并归口。本文件起草单位：中国电子信息产业集团有限公司、中国电子系统技术有限公司、清华大学、北京大数据研究院、奇安信科技集团股份有限公司、中电云数智科技有限公司、南京赛宁信息技术有限公司。本文件主要起草人：陆志鹏、国丽、乔亲旺、周崇毅、刘国栋、胡成盛、杨二龙、王理达、欧高炎、朱立锋、郑曦、温彦龙、修心、范国浩、章