Published: 12 December 2022
中国网络安全监管部门对由政府主导的业务数据和个人数据出境安全评估做出了要求。跨国公司的安全和风险管理（SRM）领导者必须提前计划，避免数据传输和业务运营的中断。
并非所有数据出境都会触发政府主导的安全评估。然而，一旦触发评估，企业机构就需要在进行数据传输之前向相关部门报批。
政府主导的安全评估可能需要几个月才能完成，若不能及时响应，可能会中断现行的数据传输或影响新项目的上线。
如果传输数据的处理流程发生变化，或者接收国的监管环境有所改变，企业机构将需要重新申请政府主导的安全评估。这就将安全评估从一个周期性的行动变成了一系列持续的运营工作。
政府主导的安全评估结果和中国监管部门提供的指导意见，将促使企业机构重新审视其中国数据本地化和IT隔离战略。
在中国经营或业务与中国有关的跨国公司的安全和风险管理（SRM）领导者应：
根据出境数据的敏感程度和规模，确认企业机构的出境数据传输是否符合申请政府主导的安全评估的条件。
为正在进行的数据出境传输准备并申请政府主导的安全评估，或在将要进行的数据传输开始前至少三个月做此准备。
利用技术（如流程自动化、工作流管理、数据发现和映射、数据活动监测，以及审计和风险评估）简化安全评估的重启流程，并为流程的完整性设立正式的审查程序。
在规划未来在中国的IT布局和运营时，将期中的风险分析发现和政府主导的安全评估结果纳入考量。
Clients can log in to view the entire document.
Analysts:
Gartner research, which includes in-depth proprietary studies, peer and industry best practices, trend analysis and quantitative modeling, enables us to offer innovative approaches that can help you drive stronger, more sustainable business performance.
Our independence as a research firm enables our experts to provide unbiased advice you can trust.
Not only is Gartner research unbiased, it also contains key take-aways and recommendations for impactful next steps.
Our research practices and procedures distill large volumes of data into clear, precise recommendations.
We provide actionable, objective insight to help organizations make smarter, faster decisions to stay ahead of disruption and accelerate growth.
We offer one-on-one guidance tailored to your mission-critical priorities.
We work with you to select the best-fit providers and tools, so you avoid the costly repercussions of a poor decision.
Connect directly with peers to discuss common issues and initiatives and accelerate, validate and solidify your strategy.
Gartner clients can log in to access the full library.
Join your peers for the unveiling of the latest insights at Gartner conferences.
©2022 Gartner, Inc. and/or its affiliates. All rights reserved. Gartner is a registered trademark of Gartner, Inc. and its affiliates. This publication may not be reproduced or distributed in any form without Gartner’s prior written permission. It consists of the opinions of Gartner’s research organization, which should not be construed as statements of fact. While the information contained in this publication has been obtained from sources believed to be reliable, Gartner disclaims all warranties as to the accuracy, completeness or adequacy of such information. Although Gartner research may address legal and financial issues, Gartner does not provide legal or investment advice and its research should not be construed or used as such. Your access and use of this publication are governed by Gartner’s Usage Policy. Gartner prides itself on its reputation for independence and objectivity. Its research is produced independently by its research organization without input or influence from any third party. For further information, see Guiding Principles on Independence and Objectivity.
