ICS35.240.01 CCSL67DB4403 深圳市地方标准 DB4403/T439—2024 公共数据安全评估方法 Assessmentmethodsofcommondatasecurity 深圳市市场监督管理局发布2024-04-22发布 2024-05-01实施DB4403/T439—2024 I目  次 前言.................................................................................III 1范围................................................................................1 2规范性引用文件......................................................................1 3术语和定义..........................................................................1 4缩略语..............................................................................2 5通则................................................................................2 5.1评估原则........................................................................2 5.2评估体系........................................................................2 5.3安全能力........................................................................3 5.4评估手段........................................................................3 5.5评估适用情形....................................................................4 5.6评估指标和评估对象说明..........................................................4 5.7评估流程........................................................................4 6通用管理安全评估....................................................................5 6.1总体数据安全策略................................................................5 6.2数据安全管理机构与人员..........................................................6 6.3数据安全管理制度体系...........................................................11 7通用技术安全评估...................................................................13 7.1数据分类分级保护...............................................................13 7.2数据安全评估...................................................................15 7.3数据安全风险监测...............................................................17 7.4数据安全管控...................................................................19 7.5数据安全应急处置...............................................................23 7.6数据安全审计...................................................................25 8数据处理活动安全评估...............................................................27 8.1数据收集.......................................................................27 8.2数据存储.......................................................................29 8.3数据传输.......................................................................32 8.4数据使用.......................................................................34 8.5数据加工.......................................................................37 8.6数据开放共享...................................................................40 8.7数据交易.......................................................................42 8.8数据出境.......................................................................42 8.9数据销毁与删除.................................................................44