作者：洪瑛

近日，云南省测绘局在全局系统开展保密检查，针对检查中暴露的突出问题，向局属各单位和机关各处室发出通知，就进一步加强保密工作提出要求。

　　一要进一步加强对保密工作的领导，加大问责力度。各单位要根据实际及时调整充实保密工作领导机构，明确分管领导，保持相对稳定，并在保密工作机构中适当补充熟悉计算机、网络技术的专业人员。各单位每年要组织一次保密检查，局保密委视情况组织抽检和临时检查，对违反国家保密法律法规的行为，加大问责力度，按规定查处相关责任人的直接责任和领导责任，并视情节移送省国家保密局或司法机关查处。

　　二要加强保密教育的针对性，让职工熟知保密法规、严守保密法规。各单位针对工作中大量使用计算机的实际，采取多种形式，每年至少开展一次保密专题学习教育活动，重点加强对涉密计算机、移动存储介质、涉密网络版的保密教育，从设备采购、使用、管理、维修和报废各个环节都要按相关规定办理，筑牢保密的思想防线。

　　三要加强管理，完善制度，堵塞漏洞。对现有的保密规章制度进行一次全面清理，对不适应新形势下保密工作要求的，及时进行修订、补充；对未纳入局域网内管理的涉密计算机，要制定切实可行的管理制度，纳入有效监控范围；建立涉密移动存储介质登记制度，将设备型号、硬件编号、保管人、启用时间等登记在册，并报局办公室备案；建立涉密计算机、涉密移动存储介质外出登记台账制度；严禁涉密计算机接入互联网，严禁非涉密计算机与涉密计算机之间用未经国家保密部门认可的移动存储介质直接传输数据；涉密计算机及移动存储介质报废，须报局保密委备案，登记造册后用物理方法进行销毁。

　　四要增加投入，依靠技术手段增强防范能力。各单位在制定工作规划、工程项目立项、科研立项时将保密工作一并纳入统筹，在系统设计、设备选型、场地建设、维护、人才培训等环节充分考虑保密技术防范的需要。对未达到保密定级标准的涉密网络，要逐步添加设施，按规定报有关部门审定密级。对不符合现行保密规定的计算机、移动存储介质要逐步进行更新调整，使之符合要求。

Recently, the Yunnan Provincial Bureau of Surveying and Mapping in the global system to carry out security checks, for the inspection of the outstanding problems in exposure to the Bureau of belonging to different units and investors from Taiwan authorities issued a circular on further strengthening the security work requests.

A need to further strengthen security work, and increase accountability efforts. All units should be adjusted according to the actual time enrich the confidentiality of the lead agency, clear leaders in charge, remained relatively stable, and the confidentiality of the appropriate complementary institutions are familiar with computer and network technology professionals. All units a year to organize a security check, the Council appointed as the security situation in the organization and temporary sampling inspection, in violation of state privacy laws and regulations of the act, increase the accountability efforts, according to the provisions of the relevant persons responsible for investigation of direct responsibility and leadership, and as plot transferred to provincial State Security Bureau, or judicial authorities for prosecution.


Second, we must strengthen the confidentiality of relevance of education to enable employees familiar with privacy regulations, strict confidentiality laws and regulations. All units use the computer for work, a lot of practice, take many forms, at least annually to carry out a confidential special study and education activities focus on strengthening the right classified computers, mobile storage media, classified confidential online education, from the purchase of equipment, the use of , management, maintenance and scrapping all links must be in accordance with relevant regulations, build a strong and confidential mental defense line.


Third, we must strengthen management, improve the system, plug the loopholes. The confidentiality of the existing rules and regulations to conduct a comprehensive clean-up, failed to meet the job requirements of confidentiality under the new situation, the timely amendment, supplement; right not included in the management of classified computers within the LAN, it is necessary to develop practical management systems into effective Monitoring scope; the establishment of classified removable storage media, a registration system for the device model, hardware number, custodian, enable time registered in the books, and report to the offices of record; the establishment of classified computers, classified removable storage media to go out the registration ledger system; non-classified computer connected to the Internet is strictly prohibited non-classified computer and between computers with classified national security department without the approval of the removable storage media to transfer data directly; classified obsolete computers and removable storage media must be submitted to Council Committee for the record confidentiality, rosters later physical methods for destruction.


Fourth, we should increase investment, rely on technological means to strengthen prevention capabilities. All units in the formulation of work plans, project project, research project will be included in confidential work in co-ordination in the system design, equipment selection, site construction, maintenance, personnel training and other aspects fully into account the needs of security technology to prevent. Right does not meet the classification standards of confidentiality of classified networks, to gradually add the facilities, Anguidingbao departments audited Security Level. Confidentiality provisions that do not comply with the current computer, mobile storage media should be gradually updated to adjust to make it meet the requirement.