ICS CCS T/CAAMTB—xxxx 智能网联汽车数据安全评估指南 Data security assessment guidelines for intelligent connected vehicles （征求意见稿） 2022-XX-XX发布 2022 - XX - XX实施 中国汽车工业协会 发 布团体 标 准X/XXXXX xx—xxxx II 目 次 1 范围 ............................................................................................................................................................................................ 1 2 规范性引用文件 ..................................................................................................................................................................... 1 3 术语和定义 .............................................................................................................................................................................. 1 3.1 智能网联汽车 intelligent connected vehicle ；ICV ......................................................................................... 1 3.2 汽车数据处理者 vehicle data processor ............................................................................................................. 2 3.3 汽车数据 vehicle data ............................................................................................................................................. 2 3.4 一般数据 general data ............................................................................................................................................. 2 3.5 个人信息 personal information ............................................................................................................................. 2 3.6敏感个人信息 sensitive personal information .................................................................................................... 2 3.7 重要数据 important data ......................................................................................................................................... 2 3.8 数据安全风险评估 data security risk assessment ............................................................................................ 3 3.9 数据安全合规性评估 data security compliance assessment ......................................................................... 3 4 数据安全风险评估实施流程 .............................................................................................................................................. 4 4.1评估准备阶段 .............................................................................................................................................................. 4 4.1.1确定评估目标 ................................................................................................................................................. 4 4.1.2确定评估范围 ................................................................................................................................................. 5 4.1.3组建评估团队 ................................................................................................................................................. 5 4.1.4系统调研 .......................................................................................................................................................... 8 4.1.5确定评估依据 ................................................................................................................................................. 8 4.1.6确定评估工具 ................................................................................................................................................. 8 4.1.7制定评估方案 ................................................................................................................................................. 9 4.2评估实施阶段 .............................................................................................................................................................. 9 4.2.1数据资产识别 ................................................................................................................................................. 9 4.2.2 数据威胁识别 ..............................