A few days ago, Dr. Wang Jingyao, director of the Digital Ecological Development Department of Taier Terminal Laboratory of China Institute of Information and Communications Technology (hereinafter referred to as " China Institute of Information and Communications Technology "), and his delegation visited BOSS Direct Recruitment to investigate data security-related work, and issued the "Data Security Management Capability Certification (DSMC)" certificate to BOSS Direct Recruitment. The relevant results can be checked in the National Certification and Accreditation Supervision and Administration Commission (http://www.cnca.gov.cn/).
Dr. Wang Jingyao and BOSS Direct Recruitment Information Security Compliance Head Zhang Xue
Data Security Management Capability Certification (DSMC) is an authoritative national certification in the field of data security initiated by the China Academy of Information and Communications Technology for the entire industry. This certification is based on relevant laws, regulations, policies and standards such as " Data Security Law, ", " Personal Information Protection Law, ", "Data Security Management Measures for Industrial and Information Technology Fields (Trial)", "Network Data Security Management Regulations (Draft for Comments)", "GB/T 41479-2022 Information Security Technology Network Data Processing Security Requirements", etc., and helps enterprises build a data security management system from the perspective of compliance.
includes: data security system implementation requirements, technical implementation requirements, and two dimensions, a total of 15 indicators for evaluation. Among them, the requirements for system implementation include organizational construction, system guarantee, data assets, data approval, management audit, partner management, education and training, reporting and complaints, emergency response, and compliance assessment; technical requirements include data identification, operational audit, data leakage prevention, interface security management, and sensitive data protection. Through this certification, it can be proved that the enterprise has a relatively complete data security management system and data security technical capabilities in the above work, achieving the fundamental purpose of controllable data security risks.
BOSS Direct recruitment is the first batch of participating companies in the "Data Security Management Capability Certification". Through its comprehensive evaluation and certification, the China Academy of Information and Communications Technology has helped BOSS Direct Recruitment improve the construction of the data security management capability framework, internal data security management processes, technical capabilities, and meet the certification requirements in the field of online recruitment. In August 2022, BOSS Direct Recruitment officially passed this capability certification.
BOSS Direct Recruitment stated: For a long time, job security and data security privacy protection have been problems that plague all relevant parties in the job search and recruitment market. All parties work together to solve this problem, which will have long-term value for the industry and the company's future. Therefore, BOSS Direct Recruitment always regards user data security and privacy protection as the company's "lifeline" and "red line", and continues to provide customers with safe and compliant products and services. This time, BOSS Direct Recruitment will continue to increase investment in related fields, creating a cleaner, safer and healthier job search and recruitment environment for job seekers, recruiters and society.
In the future, the China Institute of Information and Communications Technology will continue to provide effective solutions and data security capabilities for enterprise data security management with more comprehensive assessment and certification items and more rigorous assessment and certification processes, and provide high standards and high requirements for enterprise data security management, and guide enterprises to complete system construction.
Consultation email: [email protected]
