Party Office Tong (2024) No. 6
Each Level 2 unit:
To ensure network security in the second half of 2024，Maintain network security and stability，Improve the level of cybersecurity protection，In accordance with the Cybersecurity Law of the People's Republic of China and other laws and regulations，In accordance with the "Hunan Provincial Department of Education on doing a good job in the second half of 2024 important period network security work Notice" deployment，Combined with the practice of our school，The relevant matters are hereby notified as follows。
First, effectively strengthen organizational leadership。All units should fully understand the importance of network security，Continuously enhance the "Four consciousnesses"，Strengthen the "four self-confidence"，Do "two maintenance"，We will effectively improve our ability to forestall and defuse major risks，We will earnestly implement the cybersecurity responsibility system of party committees，Improve the leadership responsibility system of "the main person in charge personally and the person in charge specifically"，Cybersecurity work will be included in the priority work，We will do a good job in ensuring network security。
Second, comprehensively investigate weak links。All units should focus on checking the relevant Shuangfei (non-school domain name and IP) information system (website) and the "zombie" information system (website) that has low frequency of use, has not been updated for a long time, and has no special person to operate and maintain.。Comprehensively check weak passwords, default passwords, common passwords, and long-term passwords，High-risk vulnerabilities are not fixed，Non-essential ports and services are enabled for a long time，Old versions Basic software and general software are not updated，The zombie host or system is not rectified，System data is not backed up，Backup data is not verified，Important sensitive data is not encrypted，Data transmission is not encrypted，The API interface has no authentication and the API interface has unauthorized access and injection vulnerabilities，We will promptly address weaknesses in cybersecurity and data security，Avoid "one breakthrough, the whole network is lost"。For the checked double non-information system (website), zombie system (website), it must be reported to the information center in a timely manner or shut down。
Third, optimize network protection measures。All units shall strengthen the combing and updating of their information assets, take effective measures to ensure the safe operation of their information systems (websites), ensure that the security risks of the information systems in charge of the unit are eliminated, and prohibit "operation with illness".。We should strengthen the monitoring of supply chain security and data security risks, focus on strengthening the protection measures for the network security and data security of general products and important information systems, and strictly prevent "cascading" security incidents。Access control measures can be taken for information systems (websites) that have no service loading and no special operation and maintenance。
Fourth, comprehensively clean up the Internet content。All units should strengthen the management of their websites, micro-blogs, wechat public accounts and other media with content release functions, standardize content expression, and regularly carry out special network inspections。It is necessary to comprehensively investigate and clean up the external links and attachment information connected to the media, timely clean up expired and invalid external links and content, and timely remove the content with personal sensitive information。Portal websites, E-mail systems and other important foreign service websites should be on the basis of key protection to ensure smooth access。Strictly implement the "third review" system for content publishing, and strictly manage the permissions and passwords of content publishing accounts。All units shall timely cancel network and new media accounts that have been neglected for a long time。Any unit that establishes, terminates or cancels a website, new media or other platform shall apply to the Propaganda Department of the Party Committee for registration and filing in a timely manner。
5. Do a good job in emergency response。All units should attach great importance to network security early warning monitoring and rectification work, strengthen the network security guarantee during important periods such as the opening of the school, achieve early detection, early prevention, early disposal, and the loopholes found or feedback must be rectified in place within the specified time。In the event of a network security incident, decisive measures should be taken in strict accordance with the requirements of the "Hunan Normal University Network Security Incident Emergency Plan" to minimize the negative impact and promptly report to the information center。
Contact person and telephone: Information Center Sun Yusui, 0731-88872100。
Party committee office
Principal's office
August 31, 2024
