| | |
| Regulations of Shenzhen Economic Special Zone on the Administration of Public Safety of Computer Information System | | 深圳经济特区计算机信息系统公共安全管理规定 |
（Promulgated by Decree No 75 of Shenzhen Municipal People's Government on July 17, 1998; revised by Decree No 75 of Shenzhen Municipal People's Government on August 26, 2004） | |
（1998年7月17日深圳市人民政府令第75号发布，根据2004年8月26日深圳市人民政府令第135号修订） |
| |
|
| Chapter I General Provisions | | 第一章 总则 |
| |
|
| Article 1 These regulations are formulated in accordance with the actual situation in Shenzhen Economic Special Zone （hereinafter referred to as the Special Zone），for the purpose of safeguarding the safety of computer information system, maintaining public order of computer information system and promoting social stabilization. | | 第一条 为了保障深圳经济特区（以下简称特区）计算机信息系统安全，维护计算机信息系统公共秩序，促进社会稳定，根据特区实际，制定本规定。 |
| |
|
| Article 2 These regulations are applicable to the administration of public safety of computer information system （hereinafter referred to as computer safety administration） of the following application units of computer information system of the Special Zone: | | 第二条 特区内下列计算机信息系统应用单位（以下简称计算机应用单位）的计算机信息系统公共安全管理（以下简称计算机安全管理），适用本规定： |
The computer information system of operation and service units of computer information network; | |
|
| | （一）计算机信息网络经营、服务单位的计算机信息系统； |
| （1） the computer information system using in storage, disposal and transfer public information and confidential materials by the government agencies; | |
|
| | （二）国家机关用于存储、处理、传输公用信息和机密资料的计算机信息系统； |
| （2） the computer information system of financing unit , securities unit or public service unit; | |
|
| | （三）金融、证券和公共事业单位的计算机信息系统； |
| （3） the computer information system of national defense construction,the most advanced branches of technology and the state key unit of economic construction; | |
|
| | （四）国防建设、尖端科学技术和国家重点经济建设单位的计算机信息系统； |
| （4） other computer information systems influencing materially on social public interest. | |
|
| | （五）其他对社会公共利益有重大影响的计算机信息系统。 |
| Article 3 The computer information system in these regulations refers to the man-machine system composing of computer and its correlative and necessary equipments and facilities and using in collection, machining, storage, transmission, searches of information according to established applicable aim and rule. | |
|
| | 第三条 本规定所称计算机信息系统，是指由计算机及其相关和配套的设备、设施（含网络）构成的，按照一定的应用目标和规则对信息进行采集、加工、存储、传输、检索等处理的人机系统。 |
| Article 4 The Public Security Organization of the People's Government of Shenzhen Municipality （ hereinafter referred to the Municipal Competent Authority） is the competent authority of computer safety administration of the Special Zone while its affiliated Administrative Department of Computer Safety shall undertake the task of computer safety administration formulated in these regulations. | |
|
Any other relevant functional departments of the government shall undertake the concerned tasks of computer safety administration for cooperation with the municipal competent authority within its scope of official duties. | | 第四条 深圳市人民政府公安机关是特区计算机安全管理工作的行政主管部门（以下简称市主管部门）。其所属的计算机安全管理部门具体承担本规定规定的计算机安全管理工作。 |
| |
其他有关政府职能部门，在各自职责范围内配合市主管部门，做好计算机安全管理的有关工作。 |
| Article 5 The municipal competent authority shall develop the propaganda, education and communication of safety of computer information system, instruct activities of trade association of safety technology of computer information system and supply technical services of safeguard system of computer information system for the application units of computer information system | |
|
| | 第五条 市主管部门应积极开展计算机信息系统安全宣传教育和学术交流，指导计算机信息系统安全技术行业协会的活动；为计算机应用单位提供计算机信息系统安全保障体系技术服务。 |
| Chapter II Safety Administration of Computer Application Unit | |
|
| | 第二章 计算机应用单位的安全管理 |
| Article 6 The computer application unit shall establish and perfect the safeguard system of computer information system which includes administration of technical safety and administration of safety organization. The administration of technical safety includes the administration of substantiation safety, software safety, input and output control and network safety of computer information system as well as safety audit and risk analysis and so cn. The administration of safety organization includes establishment of safety organization, perfect all kinds of systems of safety administration, workout contingency plan and so on. The municipal competent authority shall supervise and instruct the application unit to set up and perfect the safeguard system of computer information system. | |
|
| | 第六条 计算机应用单位应当建立和完善计算机信息系统安全保障体系。 |
| Article 7 The municipal competent authority, in the presence of the concerned competent authorities of People's Government of Shenzhen Municipality, shall issue the trade technical regulations on computer safety administration in accordance with the trade characteristics of computer application unit. The safeguard system of computer application unit shall not less than the minimum safety demands of such trade technical regulations. | |
计算机信息系统安全保障体系包括技术安全管理和安全组织管理。技术安全管理包括计算机信息系统实体安全、软件安全、输入输出控制和网络安全的管理以及安全稽核、风险分析等内容；安全组织管理包括建立安全组织和健全各种安全管理制度及制定应急计划等内容。 |
| |
市主管部门应当监督、指导计算机应用单位建立和完善计算机信息系统安全保障体系。 |
| Article 8 The person liable for computer safety administration confirmed by the computer application unit shall carry out the following duties: | |
|
| | 第七条 市主管部门应当根据计算机应用单位的行业特点，会同市政府有关主管部门发布计算机安全管理行业技术规范，计算机应用单位的安全保障体系不得低于该行业技术规范的最低安全要求。 |
| （1） to organize to propagandize the laws, regulations and relevant policies on computer safety administration; | |
|
| | 第八条 计算机应用单位应当确定计算机安全管理责任人。 |
| （2） to study out and organize to carry out the rules and systems of computer safety administration of the unit concerned; | |
安全管理责任人应当履行下列职责： |
| |
|
| （3） to organize regular inspection of safety operation circumstance of computer information system and eliminate hidden troubles of safety immediately; | | （一）组织宣传计算机安全管理方面的法律、法规和有关政策； |
| |
|
| （4） to take charge of organizing safety audit; | | （二）拟定并组织实施本单位计算机安全管理的各项规章制度； |
| |
|
| （5） to take charge of organizing safety education and training of the employed of computer of the unit concerned; | | （三）定期组织检查计算机信息系统安全运行情况，及时排除各种安全隐患； |
| |
|
| （6） to report to the municipal competent authority and take careful and skillful measures to protect the scene of crime and prevent from enlargement of harm in the case of happening safety accident or computer crime. The safety accident referred in these regulations is the incident with social harmfulness resulting from artificial or natural factor in computer information system. The computer crime referred in these regulations is the case of crime aiming at or making use of computer information system. | | （四）负责组织安全稽核； |
| |
|
| Article 9 The computer application unit shall be equipped with computer safety technician according to the trade technical regulations of computer safety administration. | | （五）负责组织本单位计算机从业人员的安全教育和培训； |
The computer safety technician shall carry out the following duties: | |
|
| | （六）发生安全事故或计算机犯罪案件时，立即向市主管部门报告并采取妥善措施，保护现场，避免危害的扩大。 |
| （1） to carry out rules and systems of computer safety administration of the unit concerned; | |
本规定所称的安全事故是指计算机信息系统中出现的因人为或自然因素造成的具有社会危害性的事件；所称的计算机犯罪案件是指针对或利用计算机信息系统的犯罪案件。 |
| |
|
| （2） to inspect and test the safety operation circumstance of computer information system and eliminate hidden troubles of safety immediately according to the trade technical regulations of computer safety administration; | | 第九条 计算机应用单位应当按照计算机安全管理行业技术规范要求，配备计算机安全技术人员。 |
The computer safety technician shall pass the safety technology training approved by the municipal competent authority and undertake relevant work only after passing the training and getting the certification of competency with the period of validity of two years. | |
计算机安全技术人员应履行下列职责： |
| |
|
| Article 10 The special product using in computer information system safety using by the computer application unit shall comply with the concerned national technical regulations or shall pass the inspection by the professional inspection institution which not less than the minimum safety demands of technical regulations of computer safety administration of the trade concerned. | | （一）执行本单位计算机安全管理的各项规章制度； |
The special product using in computer information system safety referred in the preceding clause is the special hardware and software products using in protection of computer information system safety. | |
|
The municipal competent authority shall issue regular notification for promulgating the list of special products of computer information system safety. | | （二）按照计算机安全管理行业技术规范要求对计算机信息系统安全运行情况进行检查测试，及时排除各种安全隐患； |
| |
|
| Article 11 The computer application unit shall report to the municipal competent authority within 24 hours from discovering the safety accident or the computer crime in computer information system. | | （三）发生安全事故或计算机犯罪案件时，应当立即向本单位安全管理责任人报告或直接向市主管部门报告，并采取妥善措施，保护现场，避免危害的扩大。 |
| |
|
| Article 12 Where the sudden accidence happening in computer information system may damage to public safety, the municipal competent authority shall take emergency measures such as suspend internet connection and suspend using computer for examination against computer application unit but shall assist the computer application unit to do safety protection work in advance. | | 第十条 计算机应用单位使用的计算机信息系统安全专用产品必须符合国家有关技术规范或经过专业检测机构检测不低于本行业计算机安全管理技术规范中的最低安全要求。 |
| |
前款所称的计算机信息系统安全专用产品是指用于保护计算机信息系统安全的专用硬件和软件产品。 |
| Chapter III Safety Inspection of Computer Information System | |
市主管部门应当定期发布通告，公布合格的计算机信息系统安全专用产品目录。 |
| |
|
| Article 13 The inspection of safeguard system of computer information system shall include the followings: | | 第十一条 计算机应用单位发现计算机信息系统中发生安全事故或计算机犯罪案件时，应当在24小时内向市主管部门报告。 |
| |
|
| （1） the person liable for computer safety administration and safety technician; | | 第十二条 计算机信息系统发生突发性事件，可能危及公共安全时，市主管部门有权对计算机应用单位采取暂停联网、停机检查等应急措施。但应当事先协同计算机应用单位做好安全保护工作。 |
| |
|
| （2） the system of safety administration and safety audit; | | 第三章 计算机信息系统安全检测 |
| |
|
| （3） the capability of computer software and the circumstance of computer room; | | 第十三条 计算机信息系统安全保障体系检测应包括以下内容： |
| |
|
| （4） the reliability of computer system software, application software and database; | | （一）计算机安全管理责任人和安全技术人员； |
| |
|
（5） the measures of technology safety;
．．．．．． | | （二）安全管理制度和安全稽核制度；
．．．．．． |
|
Dear visitor, as a premium member of this database, you will get complete access to all content.Please go premium and get more.
1. To become a premium member, please call 400-810-8266 Ext. 171.
2. Binding to the account with access to this database.
3. Apply for a trial account.
4. To get instant access to a document, you can Pay Amount 【￥600.00】 for your single purchase. | |
您好：您现在要进入的是北大法宝英文库会员专区。
如您是我们英文用户可直接 登录，进入会员专区查询您所需要的信息；如您还不是我们 的英文用户；您可通过网上支付进行单篇购买，支付成功后即可立即查看本篇内容。
Tel: +86 (10) 82689699, +86 (10) 82668266 ext. 153
Mobile: +86 13311570713
Fax: +86 (10) 82668268
E-mail:info@chinalawinfo.com
|
| | | |
| | | |