Data leakage protection method based on risk management, and integrated system

Abstract

The invention provides a data leakage protection method based on risk management, and an integrated system. The method is applied to a risk management system and a data leakage protection system, asset inventory data, risk identification data and risk assessment data are obtained through the risk management system, and the risk assessment data comprise quantified asset value, risk occurrence possibility and influence degree generated after risk occurrence; obtaining a risk value according to risk assessment; importing the asset inventory data, the risk identification data and the risk evaluation data into a data leakage protection system; performing adaptation according to the asset value and the risk influence degree to obtain an adaptation result including criticality and sensitivity, and performing grading according to the adaptation result to obtain a grading result including confidential data, secret data, internal data and external data; setting a response strategy for the classification in the asset inventory data according to the grading result; and importing the grading result and the response strategy into the risk management system by the data leakage protection system.According to the method, the efficiency and the risk management and control capability are improved.

Description

technical field [0001] The present invention mainly relates to a data leakage protection method, in particular to a risk management-based data leakage protection method and an integrated system. Background technique [0002] Article 10 of the "Law of the People's Republic of China on the Protection of State Secrets" stipulates that the classification of state secrets is divided into four levels: top secret, top secret, secret and non-secret. All information above the Unclassified level is considered sensitive data. NGOs rarely need to classify data based on potential harm to national security. However, management will be concerned about potential damage to the organization, which considers not just the sensitivity of the data, but also the criticality of the data. According to the sensitivity and criticality of data, general non-governmental organizations divide the classification into confidential, secret, internal and external. [0003] At present, it is more common to ...

AI Technical Summary

Problems solved by technology

It can be seen that the data inventory 101 and 201 in the two systems are completely repeated, and the data classification and grading modules 202 and 203 are completed manually, which will inevitably greatly increase the labor cost and cause the work efficiency of the two systems to be quite low. And there will be various security risks

Images