Shulou(Shulou.com)11/24 Report--

Thanks to CTOnews.com netizen MissBook for clue delivery! CTOnews.com November 7 news, the Ministry of Industry and Information Technology together with the China Insurance Regulatory Commission drafted "on promoting the healthy development of network security insurance norms (draft for comments)," public comments. The opinion draft proposes to improve the network security insurance policy system. Strengthen the support of network security industry policy for network security insurance, promote the development of network security technology service enabling network security insurance, guide the protection of key information infrastructure, network security guarantee in emerging integration fields, etc. to make full use of network security insurance. Strengthen the support of insurance industry policies for network security insurance, guide the innovation and development of network security insurance, and guide the development of insurance products conforming to the characteristics and laws of network security. We will promote and improve fiscal policies and encourage policies such as insurance tax cuts and insurance purchase subsidies.

Opinions on Promoting the Healthy Development of Network Security Insurance Norms

(Draft for Comments)

Network security insurance is a new type of insurance to provide insurance for network security risks. It has increasingly become an important tool to transfer and prevent network security risks, and plays an important role in promoting the construction of network security socialized service system. In order to thoroughly implement the Network Security Law of the People's Republic of China, the Data Security Law of the People's Republic of China and other relevant laws and regulations, accelerate the integrated development of network security industry and financial services, cultivate new forms of network security insurance, promote enterprises to strengthen network security risk management, and promote the high-quality development of network security industry, the following opinions are put forward.

I. Establish and improve the network security insurance policy standard system

(1) Improve the network security insurance policy system. Strengthen the support of network security industry policy for network security insurance, promote the development of network security technology service enabling network security insurance, guide the protection of key information infrastructure, network security guarantee in emerging integration fields, etc. to make full use of network security insurance. Strengthen the support of insurance industry policies for network security insurance, guide the innovation and development of network security insurance, and guide the development of insurance products conforming to the characteristics and laws of network security. We will promote and improve fiscal policies and encourage policies such as insurance tax cuts and insurance purchase subsidies.

(2) Improve network security insurance standards and specifications. Support the network security industry and insurance industry to strengthen cooperation, establish a standard system covering the whole life cycle of network security insurance services, and clarify the basic processes and general requirements of major links such as underwriting, underwriting and claims settlement. Study and formulate relevant standards for quantitative assessment of network security risks in key industry fields before underwriting, standardize requirements for security risk assessment; relevant standards for network security monitoring and management services during underwriting, standardize monitoring and early warning methods; relevant standards for implementation requirements of claims service after underwriting, and standardize after-sales service of network security insurance.

II. Strengthen innovation in network security insurance products and services

(3) Enriching network security insurance products. Encourage insurance companies to develop diversified network security insurance products for differentiated network security risk management needs of different industry scenarios. We will develop cybersecurity property loss insurance, liability insurance and comprehensive insurance for enterprises in key industries to improve their cybersecurity risk response capabilities. Develop product liability insurance for information technology products, develop network security special insurance for network security products, and provide insurance protection for information network technology products. Develop professional liability insurance and other products for network security services to reduce the safety risks that may be caused by human operations by professional technicians in the process of security services.

(4) Innovate and develop network security insurance services. Encourage network security insurance service organizations to cooperate and explore the construction of full-process network security risk management solutions with network security insurance as the core. Give full play to the professional advantages of insurance companies, reinsurance companies and other insurance institutions, and accelerate the integration and innovation of insurance and network security services jointly with network security enterprises. Give full play to the technical advantages of network security enterprises and professional network security evaluation institutions, and jointly improve the network security insurance service capability of insurance companies.

III. Strengthen the development of network security technology enabling insurance

(5) Carry out quantitative assessment of cyber security risks. Carry out network security risk research around typical events in telecommunications and Internet industries, as well as emerging scenarios such as industrial Internet, Internet of Vehicles and Internet of Things. Explore the establishment of a quantitative assessment model for network security risks, and strengthen the analysis of network security risk impact scale prediction and economic losses. Support network security enterprises, professional network security assessment institutions, etc. to develop quantitative assessment technology for network security risks, develop lightweight quantitative assessment tools for network security risks, encourage insurance companies and reinsurance companies to establish network security risk claims database, and support accurate pricing of network security risks.

(6) Strengthen cybersecurity risk monitoring capabilities. Carry out risk monitoring throughout the life cycle of network security insurance, covering important links such as before, during and after events. Encourage network security enterprises and professional network security assessment institutions to give full play to the advantages of network security risk monitoring technology, make full use of security technical means, carry out real-time monitoring of network security threats against network security vulnerabilities, malicious network resources, network security incidents, etc., timely discover potential network security risks, and improve network security risk monitoring, early warning and emergency response capabilities.

IV. Promoting the release of demand for cybersecurity industry

(7) Promote the application of network security insurance services. Facing key industries such as telecommunications and Internet, energy, finance, medical care, etc., as well as emerging integration fields such as industrial Internet and Internet of Vehicles, centering on the two main bodies of network security and information technology product service supply side and demand side, giving full play to the role of network security industry and network security insurance-related alliance association, etc., carry out network security insurance service pilot, form replicable and extendable network security insurance service mode, and promote network security insurance promotion and application.

(8) Promote the improvement of enterprise network security risk response capability. Encourage enterprises in key industries to improve the network security risk management mechanism, promote enterprises in key industries such as telecommunications, energy, finance, transportation, water conservancy and education to actively use network security insurance tools, effectively transfer and prevent network security risks, and improve the security protection capabilities of network infrastructure, important information systems and data. Support small and medium-sized enterprises to monitor risk exposure through network security insurance, establish and improve network security risk management system, and continuously strengthen the network security protection capability of small and medium-sized enterprises.

V. Cultivate Network Security Insurance Development Ecology

(9) Cultivate high-quality network security insurance enterprises. Encourage network security enterprises and insurance companies to actively participate in the ecological construction of network security insurance, carry out activities such as collection of excellent cases of network security insurance and demonstration of network security insurance application, cultivate a group of insurance companies and reinsurance companies with outstanding professional capabilities, develop a group of network security enterprises and professional evaluation institutions with leading technical support capabilities, build a batch of network security insurance innovation consortia, and cultivate benign ecology for network security insurance development.

(10) Propaganda and promotion of network security insurance services. Give full play to the leading role of relevant industry alliances and key enterprises, integrate resource advantages, promote the flow of network security industry and financial service elements, and strengthen the promotion and application of network security insurance. Make good use of activities such as network security industry summit forum and network security technology application pilot demonstration, publicize and popularize network security insurance, hold network security insurance theme activities, strengthen experience summary and exchange promotion, and create a strong atmosphere to promote the healthy development of network security insurance norms.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.