Gartner Insights Abstract

放眼IT解耦之外:降低中国网络安全合规风险

Published: 12 August 2024

Summary

由于成本和复杂性增加等挑战,中国企业机构很难实现由合规驱动的IT解耦。CIO及安全和风险管理(SRM)领导者应在IT解耦之外放眼全局,降低网络安全合规风险,以遵守监管要求并实现业务收益。

Included in Full Research

概述

主要发现
  • 对于跨国企业来说,将在中国的IT应用与其全球业务彻底解耦是一项艰巨的任务,往往会导致成本增加和运营效率降低。

  • 由于缺乏标准,中国的企业机构并不了解哪些应用需要解耦才能满足网络安全监管要求。因此,这一决策需要由IT与业务、法务及其他团队共同做出,而非仅由IT独自决定。

  • 多数企业机构寻求IT解耦是因为担心网络安全合规问题,而非存在此类业务需求,这将产生不必要的成本。企业机构需要一种新的方法来平衡网络安全合规性和业务收益。

  • 中国针对数据出境的最新监管措施大幅降低了IT解耦的必要性。

建议
  • 优先考虑满足明确的网络安全监管要求和业务需求,而不是简单地将IT应用解耦。

  • 构建企业机构网络安全协作的沟通和响应流程,减轻业务中断和网络安全监管处罚等负面影响。例如,定期向高管介绍网络安全法规,并在业务应急计划中增加应对网络安全违规事件的流程。

  • 采用高敏捷度的组装式IT架构,增强针对网络安全法规的韧性(如减少供应商和技术依赖性),从而降低网络安全合规风险。

Clients can log in to view the entire document.

Analysts:

Feng Gao Xingyu Gu Carolin Zhou Wei Jin

To access these insights and much more, talk to Gartner today.

Fill out the form to connect with a specialist to learn how we can help you.

By clicking the "Continue" button, you are agreeing to the Gartner Terms of Use and Privacy Policy.

Access Insights

Already a Gartner client?

AskGartner: The AI-powered tool our clients use to find trusted Gartner insights, instantly.

AskGartner | Discover the new AI-powered tool to access trusted Gartner insights

Gartner research: Trusted insight for executives and their teams

What is Gartner research?

Gartner research, which includes in-depth proprietary studies, peer and industry best practices, trend analysis and quantitative modeling, enables us to offer innovative approaches that can help you drive stronger, more sustainable business performance.

Gartner research is unique, thanks to:

Independence and objectivity

Our independence as a research firm enables our experts to provide unbiased advice you can trust.

Actionable insights

Not only is Gartner research unbiased, it also contains key take-aways and recommendations for impactful next steps.

Proprietary methodologies

Our research practices and procedures distill large volumes of data into clear, precise recommendations.

Gartner research is just one of our many offerings.

We provide actionable, objective insight to help organizations make smarter, faster decisions to stay ahead of disruption and accelerate growth.

Tap into our experts

We offer one-on-one guidance tailored to your mission-critical priorities.

Pick the right tools and providers

We work with you to select the best-fit providers and tools, so you avoid the costly repercussions of a poor decision.

Create a network

Connect directly with peers to discuss common issues and initiatives and accelerate, validate and solidify your strategy.

© 2026 Gartner, Inc. and/or its affiliates. All rights reserved. Gartner is a registered trademark of Gartner, Inc. and its affiliates. This publication may not be reproduced or distributed in any form without Gartner's prior written permission. It consists of the opinions of Gartner's business and technology insights organization, which should not be construed as statements of fact. While the information contained in this publication has been obtained from sources believed to be reliable, Gartner disclaims all warranties as to the accuracy, completeness or adequacy of such information. Although Gartner business and technology insights may address legal and financial issues, Gartner does not provide legal or investment advice and its insights should not be construed or used as such. Your access and use of this publication are governed by Gartner’s Usage Policy. Gartner prides itself on its reputation for independence and objectivity. Its insights are produced independently by its business and technology insights organization without input or influence from any third party. For further information, see Guiding Principles on Independence and Objectivity. Gartner publications and other content may not be used as input into or for the training or development of generative artificial intelligence, machine learning, algorithms, software or related technologies.