Research On The Perfection Of The Cyber Security Review System In China

In order to prevent the risk from network products and services,China has established the cyber security review system.However,due to limited experience,there are some shortcomings of the system,which restrict the realization of its security function.For coping with the increasingly serious security situation of cyberspace and the burgeoning international competition in cyberspace,it’s important to explore the perfection path of the cyber security review system.The aforementioned shortcomings include: the different statements on which the system is targeted for,easily leading to confusion in the application of the system,the neglection of the risk control of the entire lifecycle of network products and services,the deficiency of rating rules and the ignorance of the role of the network operators.Although the cyber security review system in China creatively put forward the supply chain review,background review,third-party organization participation,dual structures of the review organizations,and other system highlights,limited by the sketchy provisions,the guiding significance of these highlights is not strong.Based on the aforementioned shortcomings and the experience of the United States and United Kingdom,and guided by the concept of integration of security and development,with both substantive and procedural provisions,we should further clarify the scope of the object of the cyber security review system,build the rating rules in accordance with the hierarchical protection system and the idea to view the critical information infrastructure as the key protection target and the dynamic review rules for network products and services,clearly set out the obligations of network operators in the procurement and use of network products and services by legislation.Last but not least,we should enhance the operability of the cyber security review system by further completing the supply chain review,background review,third-party organization participation,dual structures of the review organization,publication and notification of the results,and so on.