标准化学报Issue(5)：16-24,9.DOI:10.3969/j.issn.2097-857X.2026.05.002
网络安全法律引用标准:现状、问题与建议
The Reference to Standards in Cybersecurity Laws:Current Status,Issues,and Recommendations
摘要
Abstract
[Objective]The cybersecurity regulatory framework comprises legal norms(laws,administrative regulations,and departmental rules)and technical standards.These two components establish connections through the"reference"of technical standards by laws,jointly undertaking the important responsibility of regulating network activities and preventing cybersecurity risks.This paper aims to clarify the current status and existing issues of technical standard references in China's cybersecurity laws,and propose targeted optimization paths to enhance the synergy between laws and technical standards.[Methods]Adopting the legal text analysis method,this paper systematically sorts out core elements such as the quantity,methods,and scope of technical standards cited in legal documents of different hierarchical levels(laws,administrative regulations,and departmental rules)in the field of cybersecurity,and summarizes the current situation of citations.[Results]The research identifies four prominent problems in the citation of technical standards by cybersecurity laws:firstly,the overall citation rate of standards is low,with the citation scope concentrated on a small number of mandatory national standards,while a large number of voluntary standards,industry standards,and other types of standards are not fully incorporated;secondly,under the general citation method,the standards referred to in some legal provisions are missing or incompatible,rendering the provisions"in a state of inaction";thirdly,there is an asynchrony between laws and standards in direct citations,including dated citations failing to keep up with standard revisions and undated citations facing the problem of delayed standard development;fourthly,the expression of cited standards is vague and inaccurate,failing to clearly define the development entities,attributes,and scope of the standards.[Conclusion]To address the above issues,it is necessary to construct hierarchical referencing rules to clarify the hierarchy and priorities of standard citations;improve standard catalogs and public inquiry channels to enhance standard accessibility;prioritize the use of undated direct referencing methods to achieve dynamic adaptation between laws and standards;unify the norms for citation expressions to clarify the type and scope of cited standards.In this way,the scientificity,standardization,and operability of technical standard references in cybersecurity laws can be improved,and the cybersecurity governance system can be refined.关键词
网络安全法律/技术标准/引用/标准清单Key words
cybersecurity laws/technical standards/reference/standard catalog引用本文复制引用
郗蕊,柳经纬..网络安全法律引用标准:现状、问题与建议[J].标准化学报,2026,(5):16-24,9.基金项目
本文受国家社会科学基金重大项目"基于法治、国家治理和全球治理的技术法规研究"(项目编号:21&ZD192)资助. （项目编号:21&ZD192）
