总体国家安全观下的“敏感信息”管理机制刍议——美国经验借鉴

Sensitive Information Management Mechanism under Chinese Overall National Security Concept:Using the American Experience for Reference

[目的/意义]总体国家安全观对传统保密理论与实务提出了新要求,尤其大数据环境下,需统筹传统安全与非传统安全领域的国家安全与利益的保护,适应情报窃密手段的发展,拓展保密事项范围,强化对非密国家安全信息的保护。[方法/过程]分析美国"敏感信息"管理存在的问题及美国受控非密信息管理机制的实施程序,详述其业务流程实务规范及系统安全技术标准统一要求。[结果/结论]认为我国的"敏感信息"管理机制构建可借鉴美国经验,在明确"敏感信息"概念、强制统一标识的基础上,由国家保密行政管理部门会同相关部委制定统一的"敏感信息"管理制度。

[Purpose/Significance]The Chinese overall national security concept requires the development of traditional national security information classification theories and practices,especially in the era of big data,unclassified national security information should be protected strongly,classification categories should be expanded so as to neutralize the adversarial intelligence action,and realize the safeguard of national security and interests in traditional and non-traditional security areas.[Method/Process]This paper elaborated the CUI program process and information system security requirements based on the challenge analysis and implementation procedures.[Result/Conclusion]It is believed that China＇s sensitive information management mechanism can be built on the experience of the United States.A unified management system should be formulated by the National Secrecy Administration through consultation with relevant ministries after designating ＂ sensitive information＂ concept and standardizing mandatory marking.