ICS 33.040 M10 中 华 人 民 共 和 国 通 信 行 业 标 准 YD/T XXXX—XXXX 云服务用户 数据保护能力参考框架 Cloud user data protection capability reference frame work （报批稿 ） ×××× -×× -××发布 ×××× -×× -××实施 中华人民共和国工业和信息化部 发布 YD YD/T × × × × —× × × × 1 目 次 前 言 ................................ ................................ ................................ ................................ .............................. 2 引 言 ................................ ................................ ................................ ................................ .............................. 3 1 范围 ................................ ................................ ................................ ................................ ................................ ....... 4 2 规范性引用文件 ................................ ................................ ................................ ................................ ................... 4 3 术语和定义 ................................ ................................ ................................ ................................ ........................... 4 4 概述 ................................ ................................ ................................ ................................ ................................ ....... 5 4.1 云服务用户数据保护能力范围 ................................ ................................ ................................ ................... 5 4.2 云服务用户数据保护能力参考框架 ................................ ................................ ................................ ........... 5 4.3 云服务用户数据保护能力划分 ................................ ................................ ................................ ................... 7 5 指标项定义和规范性描述 ................................ ................................ ................................ ................................ ... 7 5.1 数据持久性 ................................ ................................ ................................ ................................ .................. 7 5.2 数据私密性 ................................ ................................ ................................ ................................ .................. 9 5.3 数据隐私性 ................................ ................................ ................................ ................................ ................ 11 5.4 数据知情权 ................................ ................................ ................................ ................................ ................ 11 5.5 数据防窃取性 ................................ ................................ ................................ ................................ ............ 12 5.6 数据可用性 ................................ ................................ ................................ ................................ ................ 12 5.7 数据访问安全性 ................................ ................................ ................................ ................................ ........ 12 5.8 数据传输安全性 ................................ ................................ ................................ ................................ ........ 14 5.9 数据迁移安全性 ................................ ................................ ................................ ................................ ........ 14 5.10 数据销毁安全性 ................................ ................................ ................................ ................................ ...... 15 5.11 数据返还安全性 ................................ ................................ ................................ ................................ ...... 15 5.12 人员安全管控 ................................ ................................ ................................ ................................ .......... 16 5.13 入侵防范 ................................ ................................ ................................ ................................ .................. 17 5.14