bICS 33.040 M10 中 华 人 民 共 和 国 通 信 行 业 标 准 YD/T XXXX—XXXX 云服务用户数据保护能力评估方法 第1部分：公有云 Cloud user data protection capability assessment method part 1: public clouds （报批稿 ） ×××× -×× -××发布 ×××× -×× -××实施 中华人民共和国工业和信息化部 发布 YD YD/T × × × × —× × × × 1 目 次 前 言 ................................ ................................ ................................ ................................ .............................. 3 1 范围 ................................ ................................ ................................ ................................ ................................ ....... 4 2 规范性引用文件 ................................ ................................ ................................ ................................ ................... 4 3 术语和定义 ................................ ................................ ................................ ................................ ........................... 4 4 评估方法概述 ................................ ................................ ................................ ................................ ....................... 5 5 企业基本信息和业务基本信息披露 ................................ ................................ ................................ ................... 5 6 云计算用户数据保护能力指标的完备性和规范性 ................................ ................................ ........................... 6 6.1 评估方法 ................................ ................................ ................................ ................................ ...................... 6 6.2 具体指标项 ................................ ................................ ................................ ................................ .................. 6 7 云计算用户数据保护能力指标的真实性 ................................ ................................ ................................ ........... 8 7.1 评估方法概述 ................................ ................................ ................................ ................................ .............. 8 7.2 具体指标或条款评估方法 ................................ ................................ ................................ .......................... 8 7.2.1 数据持久性 ................................ ................................ ................................ ................................ .............. 8 7.2.1.1 数据存储持久性评估方法 ................................ ................................ ................................ ................... 8 7.2.1.2 数据存储完整性 ................................ ................................ ................................ ................................ .. 9 7.2.1.3 数据本地备份和恢复 ................................ ................................ ................................ .......................... 9 7.2.1.4 数据异地备份和恢复 ................................ ................................ ................................ ........................ 10 7.2.2 数据私密性 ................................ ................................ ................................ ................................ ............ 10 7.2.2.1 数据隔离安全性 ................................ ................................ ................................ ................................ 10 7.2.2.2 数据存储保密性 ................................ ................................ ................................ ................................ 10 7.2.2.3 秘钥和证书管理 ................................ ................................ ................................ ............................ 1011 7.2.2.4 加密算法可配置 ................................ ................................ ................................ ................................ 11 7.2.2.5 加解密性能 ................................ ................................ ................................ ................................ ........ 11 7.2.2.6 第三方加密 ................................ ................................ .