Notice of the Ministry of Industry and Information Technology on Launching the Pilot Demonstration of Network Security in Telecommunication Industry
Notice of the Ministry of Industry and Information Technology on Launching the Pilot Demonstration of Network Security in Telecommunication Industry
No.391 [2015] of the Ministry of Industry and Information Technology
Communications administrations of all provinces, autonomous regions and municipalities directly under the Central Government, China Telecom Group Corporation, China Mobile Communications Group Corporation and China United Network Communications Group Co., Ltd.:
In order to implement the relevant requirements of the State Council’s "internet plus" Action Plan, promote the construction of network security technical means in the telecommunications industry, and enhance the security guarantee capability of network infrastructure, according to the Guiding Opinions of the Ministry of Industry and Information Technology on Strengthening Network Security in the Telecommunications and Internet Industries (No.368 [2014] of the Ministry of Industry and Information Technology) and the key work arrangements in 2015, the Ministry of Industry and Information Technology decided to organize and carry out the pilot demonstration of network security in the telecommunications industry (hereinafter referred to as the pilot demonstration). The relevant matters are hereby notified as follows:
First, the general idea
Based on the actual needs of network security protection in the telecommunications industry, around the key direction of network security technology construction, we will promote basic telecommunications enterprises to carry out innovative application of management and technical means, guide basic telecommunications enterprises to increase investment in network security technology, implement security protection responsibilities, explore outstanding practice cases of network security in the industry, promote the popularization and application of advanced technology and experience in the industry, give full play to the role of technical means in ensuring the security of network infrastructure, and effectively enhance the telecommunications industry’s ability to prevent and respond to network security threats.
Second, the selection requirements
The applicant for the pilot demonstration project in 2015 is the basic telecommunications enterprise group company or provincial company, and the pilot demonstration project should be the network security management system or technical platform that has been built or under construction (including the project).
The selection of pilot demonstration projects is based on "good demonstration effect, high practical value and great promotion potential", focusing on whether the pilot demonstration projects have practical foundation, strong technical or management innovation and good application effect; Whether it has universal applicability, reproducibility and popularization value; Can we persist in continuous improvement and give full play to comprehensive benefits? The Ministry of Industry and Information Technology will support the selected pilot demonstration projects in terms of applying for national special funds and science and technology awards in accordance with relevant policies.
III. Key areas
In 2015, the key guiding directions of the pilot demonstration of network security in the telecommunications industry include:
(1) Centralized safety management within the enterprise.It can realize the centralized management of accounts, authentication, authority and audit of many users of applications, systems and equipment in the enterprise, and can improve the internal security protection level of the enterprise by formulating a unified security strategy.
(2) Security management of network and information system assets.Managing the asset names, categories, responsible units and persons in charge of enterprise networks and information systems can dynamically grasp the asset information of enterprise equipment and realize the associated management of assets and security risks.
(3) Data security protection.Realize the security protection and backup of important sensitive data of business support system, and improve the comprehensive protection ability of business support system.
(4) Monitoring and handling of network security threats.Realize the monitoring and disposal of Trojans and botnets, malicious programs on mobile Internet, phishing websites, etc., purify the public Internet network environment, and protect public rights and interests.
(5) Resisting denial of service attacks.It has the ability to resist denial of service attacks and can effectively monitor and handle sudden and large-scale denial of service attacks.
(6) Cloud platform security protection.It has the security protection capability of public cloud platform and user’s key data, which can provide targeted protection for cloud computing virtualization application scenarios and form a safe and reliable public cloud security protection system.
(7) Domain name system security.Realize the emergency disaster backup of domain name resolution service, effectively defend against high-traffic network attacks, domain name poisoning and domain name hijacking attacks, and provide continuous and reliable domain name resolution service.
(8) Others.Other projects with remarkable innovation, outstanding safety protection effect and high demonstration value.
Fourth, organize the implementation
(1) Project declaration.The basic telecommunications enterprise group company is responsible for the project declaration within the scope of the group. According to the requirements of the 2015 Network Security Pilot Demonstration Declaration Form (see Annex), all reporting units prepare the application materials and supporting documents. For the declared projects of provincial companies of basic telecommunications enterprises, the local provincial communication management department shall fill in written recommendation opinions in combination with the actual situation. Each group company shall summarize and review the application materials and submit them to the Ministry of Industry and Information Technology before September 30, 2015. Each basic telecommunications enterprise group company (including provincial companies) has no more than three declared projects in each field.
(2) Project selection.The Ministry of Industry and Information Technology (Network Security Administration) organizes a normative and complete review of the application materials of the basic telecommunications enterprise groups, and organizes experts to select projects on the basis of on-site visits.
(3) the results are announced.The selected projects will be published in the relevant media and websites of the Ministry of Industry and Information Technology.
V. Job Requirements
(1) Strengthen organizational leadership.The basic telecommunications enterprise group companies should attach great importance to the network security pilot demonstration work, designate the lead department and responsible person as soon as possible, do a good job in the deployment of relevant departments, provincial companies and professional companies (including business bases) within the group company, and conscientiously do a good job in organizing, mobilizing and reporting; It is necessary to further increase investment in network security and do a good job in the establishment and implementation of network security projects.
(2) Strengthen dynamic management.All basic telecommunications enterprises should establish a dynamic management mechanism for pilot demonstration projects, manage and make good use of pilot demonstration projects, give full play to their advantages and functions, and optimize and upgrade their technologies in view of the shortcomings and problems found in actual use. For the pilot demonstration projects under construction, they should be completed within the construction period according to the plan. The Ministry of Industry and Information Technology will organize on-site verification on the basis of the enterprise’s project acceptance, and cancel the qualification of "network security pilot demonstration project" if the verification fails.
(3) Strengthen the promotion of experience.All basic telecommunications enterprises should actively learn from the experience of pilot demonstration projects and strengthen the construction and innovation of network security means in light of the actual situation of their own units; For the selected projects, we should conscientiously sum up and popularize relevant experience, and actively provide support for other enterprises to learn from. Encourage enterprises to carry out advanced experience exchange and network security technical cooperation in pilot demonstration projects. The Ministry of Industry and Information Technology will organize the exchange of experience in pilot demonstration technology and strengthen the promotion and application of the industry.
(Tel: 010-66022774)