首页|美国网络安全责任政策分析及启示

美国网络安全责任政策分析及启示

扫码查看
2023 年美国拜登政府发布了《国家网络安全战略》,该战略以2021年发布的第14028号行政命令为基础,对网络空间责任的分配方式做出了根本性的转变,强调政府监管在市场中的作用.通过重塑市场格局,将网络风险从最终用户转移到拥有数据和技术的各类企业实体.避免最终用户因专业人员、数据、技术等资源的匮乏而成为网络空间中最为薄弱的一环,让最有能力确保网络安全的参与者肩负起相应责任,以建设一个可防御、有弹性的数字生态系统.从战略的背景出发,对战略平衡网络安全责任的举措进行了分析,之后建立了网络安全边际收益曲线模型,使用该模型对战略转移网络安全责任的政策方向合理性进行了判断,对战略具体政策措施的有效性进行了分析,最后提出了对中国网络安全空间责任分配政策的建议.
Analysis and Enlightenment of U.S.Cybersecurity Responsibility Policy
In 2023,the Biden administration of the United States released the National Cybersecurity Strategy,which is based on Executive Order 14028 issued in 2021.It fundamentally changes the allocation of cyberspace responsibilities,emphasizing the role of government regulation in the market.By reshaping the market structure,cyber risks are transferred from end users to various corporate entities that own data and technology.Avoid end users from becoming the weakest link in cyberspace due to the lack of professional personnel,data,technology and other resources,and let the participants who are most capable of ensuring cybersecurity shoulder the corresponding responsibilities to build a defensible and resilient digital ecosystem.Starting from the background of the strategy,this paper analyzes the measures to balance cybersecurity responsibilities,and then establishes a cybersecurity marginal benefit curve model,which is used to judge the rationality of the policy direction for strategic transfer of cybersecurity responsibilities,and analyze the effectiveness of specific policy measures of the strategy.Finally,suggestions for the distribution policy of cybersecurity space responsibilities in China are proposed.

cybersecurity responsibilitycybersecurity strategydigital ecosystemcyber insurance

张烨阳、李惟依、韩旸、李响、夏春姊、张蕾

展开 >

中国科学技术信息研究所,北京 100038

网络安全责任 网络安全战略 数字生态系统 网络保险

中信所重点工作项目国家科技图书文献中心2024年专项任务

ZD2024-062024XM14

2024

全球科技经济瞭望
中国科学技术信息研究所(ISTIC) 科学技术文献出版社

全球科技经济瞭望

CSTPCDCHSSCD
影响因子:0.359
ISSN:1009-8623
年,卷(期):2024.39(6)
  • 1