卫生健康行业网络信息与数据安全 建设方案目录 1安全框架.............................................................................................................1 1.1安全背景................................................................................................................1 1.2安全需求................................................................................................................2 1.3安全策略................................................................................................................4 1.4管理体系................................................................................................................5 1.4.1管理对象....................................................................................................................................5 1.4.2管理原则....................................................................................................................................5 1.4.3管理策略....................................................................................................................................6 1.5技术体系................................................................................................................8 1.5.1防护对象....................................................................................................................................8 1.5.2防护原则....................................................................................................................................8 1.5.3防护策略....................................................................................................................................9 1.6安全运营.............................................................................................................10 1.6.1运营对象.................................................................................................................................10 1.6.2运营原则.................................................................................................................................10 1.6.3运营策略.................................................................................................................................11 1.6.4数据安全.................................................................................................................................12 1.7合规测评.............................................................................................................13 1.7.1评测要素.................................................................................................................................13 1.7.2评测策略.................................................................................................................................14 2建设内容..........................................................................................................15 2.1建设框架.............................................................................................................15 2.2基础设施安全.....................................................................................................152.2.1等级保护.................................................................................................................................15 2.2.2云平台安全.............................................................................................................................49 2.2.3容灾备份.................................................................................................................................54 2.3健康医疗大数据安全........................................................................................56 2.3.1大数据服务安全管控系统.................................................................................................56 2.3.2数据脱敏系统建设...............................................................................................................59 2.3.3数据开发安全环境建设.....................................................................................................59 2.4互联互通安全...........................................................................