With the development of technology, schools have completed the great centralization of school data through the construction of data centralization, but the means of protection is still mainly at the level of traditional network security, and it is not possible to carry out the security protection of the whole life cycle of data on the database storing sensitive academic data and student information:
1、Account permissions are not clear, the management system is not perfect, data tampering is difficult to prevent, leakage is difficult to trace;
2、Data leakage in the education industry occurs from time to time, mostly by people in the know, and there is an urgent need to strengthen internal security control;
3、Personal information, teaching information, scientific research information is highly sensitive, and there are multiple ways of data exchange and sharing, the security of sensitive data to be strengthened;
4、The school business system involves complex personnel roles, large exposure to data security threats, and lack of data security overall situational awareness.
Based on the current situation of the school's business and the analysis of data security risks, this solution takes data security as the center and builds a data security protection system from the dimensions of organization, management, technology and operation:
1、Complete the combing of school data assets and sensitive data through data asset combing and classification and grading;
2、Data security consulting planning, data security risk assessment, assisting the school to complete the data security organization system, data security management system construction, as well as clear data security risk points.
3、Distinguish monitoring and protection on personnel, roles and permissions, and build a protection system covering various application scenarios of data with the data security comprehensive governance platform as the core.
1、For the university big data platform business operation and maintenance scenarios, to achieve the control of operation and maintenance personnel operating behavior, sensitive data real-time desensitization;
2、Internal audit and control of data leakage caused by misoperation, overstepping authority and malicious operation of internal personnel in universities.
3、Access audit for key data such as student registration information, staff and student identity information, encrypted storage, and real-time alarms, effective prevention, accurate positioning, and tracking and tracing of malicious operations.
4、For data sharing and exchange between universities and the outside world, sensitive data protection, efficient desensitization, effective prevention, accurate positioning, tracking and tracing.
Applicable to the school's existing data center environment.
Systematic protection, covering all types of sensitive data usage scenarios in schools.
Intelligent security protection model, which can realize automatic identification of security risks and accurate protection.
Intelligent sensitive data identification, classification and grading capabilities, which can quickly sort out, identify and protect all kinds of sensitive information in schools.