政务云环境中的档案安全保障生态模型与策略研究

Ecological Model and Strategies of Records Security in the Government Cloud Environment

在总体国家安全观的指引下,国家档案主管部门高度重视档案安全工作,新修订的档案法提出进一步加强档案安全工作的要求。政务云环境中的档案安全风险更为复杂且多变,安全保障问题亟待解决。文章以访谈法为主、问卷调查为辅收集数据,通过开放式编码和统计分析方法分析数据;在此基础上,采用生态系统的理论视角,分别构建宏观和微观层面的档案云安全保障生态模型。基于宏观生态模型,从体制、政策、标准、市场、责任与职责、协作与沟通、评估与审计等方面提出风险应对策略;基于微观生态模型,从资源分级分类、意识观念、工作技能、权限配置、容灾备份、组织环境等方面提出风险应对策略,旨在为构建与网络空间安全战略相适应的档案安全保障体系提供参考。

Under the guidance of implementing a holistic approach to national security,the National Archives Administration of China attaches great importance to records and archives management(RAM)security,and the newly revised Archives Law demands strengthening further RAM security.RAM security risk in government cloud environment is more complicated and volatile,and there is a lot of problems to solve.In this paper,data collected by interview with online survey as a supplement,are analyzed by means of open coding and statistical analysis.From the perspective of ecosystem,a macro-and a micro-level RAM security ecological models are constructed.Based on the macro-level model,risk countermeasures are proposed focusing on system,policy,standard,market,responsibilities,collaboration and communication,assessment,and auditing;and from the micro level model,countermeasures should place emphasis on resources classification,consciousness,working skills,access configuration,disaster recovery and backup,organizational environment.Thus,reference could be provided for the construction of RAM security system suitable for Cyberspace Security Strategy.