关键信息基础设施保护已成为各国网络安全法治的核心,以美国为代表的域外制度设计包括五个方面:建立政府和行业的协作机制;制订国家级保护计划;设立信息共享和分析中心;评估漏洞风险和确定优先防护措施;制定网络安全框架。借鉴域外法治经验,对落实我国关键信息基础设施保护制度提出如下建议:一是从国家安全高度把握关键信息基础设施的界定;二是进一步理清关键信息基础设施保护的领导体制;三是处理好关键信息基础设施保护和网络安全等级保护的关系;四是进一步细化关键信息基础设施的特别保护义务;五是坚持安全与发展并重,构建政府和企业的协作机制。
<<The protection of key information infrastructure has become the core of the cybersecurity legal system in most countries. The institutional design of this protection system in the US and some other foreign countries includes the following five aspects:construction of a mechanism for collaboration between the government and industries;formulation of a national-level protection plan;establishment of information sharing and analysis centers;assessment of vulnerability risks and determination of priority protection measures;and adoption of a cybersecurity framework. By drawing on the relevant foreign experiences,the author of this report puts forward the following suggestions on the implementation of the key information infrastructure protection system in China:firstly,to define key information infrastructure from the height of national security;secondly,to further rectify the system of leadership over key information infrastructure protection;thirdly,to appropriately deal with the relationship between the protection of key information infrastructure and the graded cybersecurity protection;fourthly,to further elaborate the special obligation of key information infrastructure protection;and fifthly,to attach equal importance to security and development in the construction of a collaboration mechanism between the government and enterprises.
<<Keywords: | Cybersecurity LawKey Information Infrastructure ProtectionGraded Protection of Cybersecurity |