In order to standardize data processing activities in the field of natural resources, strengthen data security management, ensure data security, and promote data development and utilization, the Ministry of Natural Resources recently issued the "Measures for Data Security Management in the Field of Natural Resources"(hereinafter referred to as the "Measures"), requiring the Ministry of Natural Resources, the State Forestry and Grassland Administration and local industry regulatory authorities to incorporate data security into the national security responsibility system of the party committee (party group), in accordance with the principle of "who manages business, who manages data, and who manages data security", and implement the guidance and supervision responsibilities for data security in this industry, region and field.

The "Measures" clarify that data in the field of natural resources refers to data collected and generated during the development of natural resource activities, mainly including basic geographical information, remote sensing images and other geographical information data, land, minerals, forests, grasslands, water, wetlands, sea areas and islands, etc. Survey and monitoring data of natural resources, land and spatial planning data such as master plans, detailed plans, and special plans, use control, asset management, cultivated land protection, ecological restoration, development and utilization, Natural resource management data such as real estate registration.

In terms of data classification and hierarchical management, the "Measures" clarify that the Ministry of Natural Resources organizes the formulation of standards and specifications for data classification and classification in the field of natural resources, identification and identification of important data and core data, and data security protection, guide the development of data classification and hierarchical management, and compile important data in the industry. Catalog and implement dynamic management. The State Forestry and Grassland Administration compiles data safety standards and specifications in the field of natural resources in accordance with the data classification and grading standards and specifications in the field of forest and grass based on work needs, guides the classification and grading of forest and grass data, compiles important forest and grass data and core data catalogs, and implements dynamic management. In accordance with the data classification and grading standards and specifications in the field of natural resources, local industry supervision departments organize and carry out data classification and grading management in the field of natural resources in the region and the identification and review of important data and core data, compile a catalog of important data and core data in the field of natural resources in the region, and Report to the Ministry of Natural Resources. If the catalog changes, it should be reported and updated in a timely manner.

In terms of data life cycle security management, the "Measures" clarify that data processors should take the main responsibility for the security of data processing activities, and implement hierarchical protection for all types of data. If different levels of data are processed at the same time and it is difficult to take separate protection measures, protection should be implemented in accordance with the highest level of requirements. Establish a data security management system and formulate specific hierarchical protection requirements and operating procedures for each link in the entire data life cycle for different levels of data. During the full life cycle of data processing, logs such as data processing, rights management, and personnel operations are recorded, and commercial password technology is used to protect the integrity of the logs.

In terms of data security monitoring, early warning and emergency management, the "Measures" require organizations to establish data security risk monitoring mechanisms and early warning systems in the field of natural resources, divide data security risks and event levels, organize and build data security monitoring and early warning technical means, and form monitoring, traceability, Early warning, disposal and other capabilities, and strengthen information sharing with relevant departments.

Notice of the Ministry of Natural Resources on Issuing the Measures for Data Security Management in the Field of Natural Resources

Ziran Zifa [2024] No. 57

:

With the approval of the National Data Security Coordination Mechanism and the consent of the Ministry's leaders, the "Measures for Data Security Management in the Field of Natural Resources" are hereby issued to you. Please implement them carefully based on actual conditions.

Ministry of Natural Resources

March 22, 2024

_