Data Lifecycle Security Management on the Industrial Internet

With the growing number of digital industrial enterprises in China and the explosion of data from the industrial Internet, data security is becoming increasingly important for the smooth operation of enterprises in China. On April 8, 2022, the China Industrial Information Security Development Research Center (CIC) released the China Industrial Internet Industry Integration Development Report… Continue reading Data Lifecycle Security Management on the Industrial Internet

Important Data in Industry and Information Technology

The Data Security Law (DSL) requires companies to categorize their data as “general data,” “important data,” and “core data.” Which data falls into these categories varies from industry to industry. The definition of important data for the automotive industry has received the most attention so far, and also for the financial industry a detailed explanation… Continue reading Important Data in Industry and Information Technology

Legal Requirements for Vulnerability Management

For some time now, CIOs around the world have been busy fixing the Log4j2 vulnerability. From a technical perspective, there are solutions such as patches and system upgrades. However, vulnerability management is not just a technical issue in China; there are also legal requirements that companies must meet.  For example, service providers are required by… Continue reading Legal Requirements for Vulnerability Management

Creative Commons and Copyleft: Open-Source Licenses in China

Free open source software is highly popular in China. A recent report by the Chinese think tank China Academy for Information and Communication Technology (CAICT) states that in 2019, 87.4% of Chinese companies had already used open source technologies, and by now the figure is likely to be even higher. Standardized licenses (public copyright licenses),… Continue reading Creative Commons and Copyleft: Open-Source Licenses in China

MLPS 2.0: China Steps Up Its Cybersecurity Inspections

Implementation of the Cyber Security Law through the Multi Level Protection Scheme (MLPS 2.0) is mandatory for all companies established in China. Because implementation has been slow, the government has now stepped up cybersecurity monitoring and is urging companies to fulfill their MLPS obligations. The authorities are particularly targeting the industrially strong regions, where many… Continue reading MLPS 2.0: China Steps Up Its Cybersecurity Inspections