ICS35.030 CCSL70 T/CSAS 团 体 标 准 T/CSAS0020—2025 数据开发利用安全要求 Securityrequirementsfordataexploitationandutilization 2025-11-28发布 2025-12-29实施 四川省网络空间安全协会  发布 全国团体标准信息平台 T/CSAS0020—2025 I目  次 前言··············································································································II 引言·············································································································III 1范围···········································································································1 2规范性引用文件······························································································1 3术语和定义···································································································1 4基本原则·····································································································2 5数据开发利用安全总体框架················································································2 5.1框架概述································································································2 5.2数据开发利用业务阶段················································································3 5.3数据开发利用主体······················································································3 5.4数据开发管理要素······················································································4 5.5总体框架安全逻辑······················································································4 5.6关系说明································································································4 6数据开发利用一般性安全要求··············································································4 6.1定位与框架性说明······················································································4 6.2数据开发利用安全管理流程···········································································4 6.3数据开发利用安全过程管控一般性要求······························································5 6.4数据开发利用技术安全一般性要求···································································8 7数据开发利用业务阶段安全要求··········································································12 7.1定位与框架性说明····················································································12 7.2数据资源化管理过程··················································································13 7.3数据产品化管理过程··················································································16 7.4数据场景应用管理过程···············································································20 7.5数据流通管理过程····················································································23 附录A（资料性）数据安全等级分类参考·································································27 A.1数据安全级别确定规则···············································································27 A.2影响程度参考··························································································27 参考文献········································································································28 全国团体标准信息平台 T/CSAS0020—2025 II前  言 本文件按照GB/T1.1—2020《标准化工作导则第1部分：标准化文件的结构和起草规则》的规定 起草。 请注意本文件的某些内容可能涉及专利。本文件的发布机构不承担识别专利的责任。 本文件由四川省网络空间安全协会提出并归口。 本文件起草单位：四川易利数字城市科技有限公司、全域数据信息安全重点联合实验室西南实验室、 温州理工学院。 本文件主要起草人：曾凡、孔维、徐锴、赖一阳、田茂呈、刘明哲、项明荣（排名不分先后）。 全国团体标准信息平台 T/CSAS0020—2025 III引  言 随着信息技术的飞速发展和数据量的不断增长，数据已成为国家、企业乃至个人最重要的资产之一， 数据开发利用也成了推动经济社会发展的重要力量。然而，数据在开发利用过程中，面临着诸多安全风 险，如数据泄露、非法获取、篡改等，这些风险不仅可能导致巨大的经济损失，还可能对国家安全、社 会稳定产生严重影响。正是由于数据安全问题的存在，政府、企业和个人对数据开发利用持谨慎态度， 限制了数据要素市场化配置改革的进程。因此，制定《数据开发利用安全要求》团体标准，对于规范数 据开发利用行为，保障数据安全，促进数据产业健康发展具有重要意义。本文件依从T/CSAS0001—2025 《数据生命周期安全参考框架》在数据采集、存储、加工、使用、归档以及销毁等全生命周期的安全管 理要求。 全国团体标准信息平台 T/CSAS0020—2025 1数据开发利用安全要求 1范围 本文件规定了数据开发利用的管理体系、技术要求、操作流程、风险评估与应对、培训与教育等方 面的要求。 本文件适用于各类组织在非涉密数据开发利用过程中的安全管理，包括但不限于政府机构、企事业 单位、社会团体等，涉密数据的开发利用在满足涉密要求的前提下，可参考本标准进行安全管理。 2规范性引用文件 下列文件中的内容通过文中的规范性引用而构成本文件必不可少的条款。其中，注日期的引用文件， 仅该日期对应的版本适用于本文件；不注日期的引用文件，其最新版本（包括所有的修改单）适用于本 文件。 GB/T20984—2022信息安全技术信息安全风险评估方法 GB/T22239—2019信息安全技术网络安全等级保护基本要求 GB/T25062—2010信息安全技术鉴别与授权基于角色的访问控制模型与管理规范 GB/T25069—2022信息安全技术术语 GB/