event:
On December 14, 2021, the Ministry of industry and information technology issued the notice of the general office of the Ministry of industry and information technology on organizing the pilot work of data security management in the industrial field (hereinafter referred to as the "notice") to organize the pilot work of data security management in the industrial field.
comment:
On September 30, 2021, the Ministry of industry and information technology issued the measures for the administration of data security in the field of industry and information technology (Trial) (Draft for comments) (hereinafter referred to as the "administrative measures"), which aims to accelerate the institutionalization and standardization of data security management in the field of industry and information technology. This pilot work of data security management in the industrial field is based on the administrative measures On the basis of further implementation and extension, we focus on various types of large and medium-sized enterprises in the industrial field. We believe that this pilot work means that the data security management in the industrial field has officially entered the implementation stage. From the specific content and process of the pilot work, we believe that the pilot work mainly has the following impact on the market:
1. Further clarify the landing direction of data security in the industrial field
The notice points out that the pilot content is divided into two parts: mandatory and optional, The required contents include data security management (mainly involving data classification and classification), data security protection (mainly involving data life cycle process protection) and data security assessment (mainly self-assessment by enterprises and supervision and inspection by provincial Ministry of industry and information technology). The optional contents include application and promotion of data security products (jointly promoted by the security enterprise and the provincial competent department of industry and information technology), data security monitoring (or involving the construction of data security monitoring system on the regulatory side and the enterprise side) and data exit security management (refer to the measures for data exit security assessment (Draft for comments) ）Three, and at least one optional content shall be selected by the pilot province according to the existing work basis, conditions and willingness.
2. The pace of the pilot implementation was slightly higher than expected, reflecting the determination to promote data security from top to bottom
According to the schedule in the notice, each provincial competent department of industry and information technology shall complete the pilot application in December 2021, complete the start-up deployment from December 2021 to January 2022, and complete the pilot implementation and summary evaluation from January 2022 to September 2022. After the summary and evaluation, the typical practices in the pilot work will be promoted. From the time schedule of the Ministry of industry and information technology issuing the draft of the management measures on September 30, the end of the consultation on October 30, the release of the notice on the pilot work of data security management in the industrial field on December 14, and the completion of the pilot application on December 25, we believe that the landing performance of the pilot work is slightly higher than expected, It reflects the determination of national regulatory authorities to promote data security construction from top to bottom.
3. Directly guide the implementation of data security solutions in the industrial field
According to the notice, Various types of training will be carried out in about 5 provinces (covering raw material industry, equipment industry, consumer goods industry, electronic information manufacturing industry, software and information technology service industry, etc.) the pilot work of industrial enterprises, and the number of enterprises in each field shall not be less than 3. We assume that the pilot work of data security in industrial field will be carried out in the form of products of data security management platform, with reference to the current number of government terminals and operators According to the customer unit price of the security management platform (2 million-2.93 million), we believe that the relevant order demand directly brought by the pilot work is about 150-220 million yuan, and the data security management order demand around large and medium-sized industrial enterprises after the pilot is completed is expected to continue in large quantities (the forward market space depends on the actual penetration rate of data security management. Assuming 20% penetration rate of large enterprises, the market scale is about 3.2 billion). We believe that the release of the notice is good for data security and Password manufacturers. We recommend Dbappsecurity Co.Ltd(688023) , Venustech Group Inc(002439) , Sangfor Technologies Inc(300454) , Nsfocus Technologies Group Co.Ltd(300369) , Qi An Xin Technology Group Inc(688561) , Beijing Infosec Technologies Co.Ltd(688201) , and we suggest paying attention to Hillstone Networks Co.Ltd(688030) , Topsec Technologies Group Inc(002212) , Westone Information Industry Inc(002268)
Risk tips: the macro economy is depressed, the policy implementation is less than expected, the demand of downstream industries is less than expected, and the market space calculation includes subjective assumptions
