Published: 29 April 2024
为遵守相关国家的数据隐私和驻留要求，跨国企业正在实施应用和数据本地化战略，而这增加了其所面临的网络安全风险。安全和风险管理领导者应参考本文，有效应对相关挑战，支持企业在受监管市场的业务发展。
不断增加的数据本地化要求，推动应用和数据的托管和设计方式快速演变，两者日益被分散或隔离在不同的地区，这大大增加了中心化数据访问和威胁管理的复杂度。
随着全球主要市场陆续出台相关法规，跨国企业（MNC）面临的合规义务不断增加，且这些义务会对企业的业务和安全运营产生影响。作为应对，企业需要对不同的安全标准进行协调。
应用和数据存储本地化可能会引发诸多问题，包括与数据隔离相关的问题、互操作性挑战，以及数据传输管理缺口，企业需要对相关工作保持监控并应对这些问题。
在受到高度监管的市场（跨境数据传输会受到严格审查）开展业务的跨国企业，其安全和风险管理（SRM）领导者须：
评估并引入针对本地化数据存储和应用的安全措施，支持安全运营。为此，可综合利用嵌入式安全功能、组装式安全工具，以及非安全产品的安全功能。
与软件开发团队合作，将业务所在地相关法律、法规和标准涉及的安全要求融入开发流程，支持软件部署和开发。如已建立DevSecOps实践，可对其进行复制并纳入各地区的安全运营。
支持全球层面的数据分析，或者不同地区数据存储间必要的数据集成。为此，需要实施相关的安全工具，利用隐私增强技术（PET）或传统的匿名化技术等，为跨境数据传输连通的分散数据源提供安全防护。
对跨境数据传输保持监控和检测，防止管理缺口，降低合规风险。具体而言，可实施数据安全态势管理（DSPM）来监控敏感数据的移动情况，并利用应用编程接口（API）网关等安全工具来阻止未经授权的数据传输。
Clients can log in to view the entire document.
Analysts:
Gartner research, which includes in-depth proprietary studies, peer and industry best practices, trend analysis and quantitative modeling, enables us to offer innovative approaches that can help you drive stronger, more sustainable business performance.
Our independence as a research firm enables our experts to provide unbiased advice you can trust.
Not only is Gartner research unbiased, it also contains key take-aways and recommendations for impactful next steps.
Our research practices and procedures distill large volumes of data into clear, precise recommendations.
We provide actionable, objective insight to help organizations make smarter, faster decisions to stay ahead of disruption and accelerate growth.
We offer one-on-one guidance tailored to your mission-critical priorities.
We work with you to select the best-fit providers and tools, so you avoid the costly repercussions of a poor decision.
Connect directly with peers to discuss common issues and initiatives and accelerate, validate and solidify your strategy.
Gartner clients can log in to access the full library.
Attend a Conference
Experience Information Technology conferences
With exclusive insights from Gartner experts on the latest trends, sessions curated for your role and unmatched peer networking, Gartner conferences help you accelerate your priorities.
Gartner CIO & IT Executive Conference
São Paulo, Brasil
© 2026 Gartner, Inc. and/or its affiliates. All rights reserved. Gartner is a registered trademark of Gartner, Inc. and its affiliates. This publication may not be reproduced or distributed in any form without Gartner's prior written permission. It consists of the opinions of Gartner's business and technology insights organization, which should not be construed as statements of fact. While the information contained in this publication has been obtained from sources believed to be reliable, Gartner disclaims all warranties as to the accuracy, completeness or adequacy of such information. Although Gartner business and technology insights may address legal and financial issues, Gartner does not provide legal or investment advice and its insights should not be construed or used as such. Your access and use of this publication are governed by Gartner’s Usage Policy. Gartner prides itself on its reputation for independence and objectivity. Its insights are produced independently by its business and technology insights organization without input or influence from any third party. For further information, see Guiding Principles on Independence and Objectivity. Gartner publications and other content may not be used as input into or for the training or development of generative artificial intelligence, machine learning, algorithms, software or related technologies.
