ICS35.030 CCSL80 T/CSAS 团 体 标 准 T/CSAS0028—2025 航空数据安全要求 Requirementsforaviationdatasecurity 2025-11-28发布 2025-12-29实施 四川省网络空间安全协会  发布 全国团体标准信息平台 T/CSAS0028—2025 I目  次 前言·············································································································II 引言············································································································III 1范围···········································································································4 2规范性引用文件······························································································4 3术语和定义···································································································4 4航空数据安全总体要求······················································································5 4.1航空数据安全治理框架················································································5 4.2航空数据安全要求的基本原则········································································5 4.3航空数据识别···························································································6 4.4航空数据分类分级······················································································6 4.5航空数据全生命周期安全防护········································································6 5航空数据安全技术要求······················································································6 5.1通则·····································································································6 5.2采集·····································································································6 5.3传输·····································································································6 5.4存储·····································································································7 5.5使用·····································································································7 5.6共享·····································································································7 5.7出境·····································································································7 5.8公开·····································································································8 5.9销毁·····································································································8 6航空数据安全管理要求······················································································8 6.1数据安全责任人························································································8 6.2事件应急处置···························································································8 参考文献·········································································································9 全国团体标准信息平台 T/CSAS0028—2025 II前  言 本文件按照GB/T1.1—2020《标准化工作导则第1部分：标准化文件的结构和起草规则》的规定 起草。 请注意本文件的某些内容可能涉及专利。本文件的发布机构不承担识别专利的责任。 本文件由四川省网络空间安全协会提出并归口。 本文件起草单位：民航成都电子技术有限责任公司、成都理工大学、全域数据信息安全重点联合实 验室西南实验室。 本文件主要起草人：马勇、曹欣、苏恒、李冬芬、多滨、李瑞、张瑞庆（排名不分先后）。 全国团体标准信息平台 T/CSAS0028—2025 III引  言 随着航空业的飞速发展，航空数据在飞行安全、运营管理、客户服务等领域发挥着至关重要的作用。 为了确保航空数据的安全性、完整性和可用性，特制定航空数据安全要求标准。 本文件涉及多种技术领域，包括但不限于数据加密、访问控制、数据备份与恢复、网络安全防护等。 同时还强调了技术的持续更新和适应性，以应对不断演变的安全威胁和新兴技术挑战。 全国团体标准信息平台 T/CSAS0028—2025 4航空数据安全要求 1范围 本文件规定了民用航空行业数据安全保护要求，提出了航空数据的使用者应履行的安全责任和义务， 其他航空领域可借鉴参考。 本文件适用于指导民用航空行业及相关单位开展数据相关处理活动，包括数据的采集、传输、存储、 处理、交换、销毁。 2规范性引用文件 下列文件中的内容通过文中的规范性引用而构成本文件必不可少的条款。其中，注日期的引用文件， 仅该日期对应的版本适用于本文件；不注日期的引用文件，其最新版本（包括所有的修改单）适用于本 文件。 GB/T22239—2019信息安全技术网络安全等级保护基本要求 GB/T35273—2020信息安全技术个人信息安全规范 GB/T43697—2024数据安全技术数据分类分级规则 MH/T5057—2021智慧民航数据治理规范数据安全 3术语和定义 GB/T35273—2020、MH/T5057—2021界定的以及下列术语和定义适用于本文件。 3.1 数据data 任何以电子或者其他方式对信息的记录。一种确保数据处理系统的资源只能由经授权实体以授权方 式进行访问的手段。 [来源：GB/T43697—2024，3.1] 3.2 信息处理informationprocessing 对信息操作的系统执行，包括数据处理，也可包括诸如数据通信和办公自动化之类的操作。 注：术语“信息处理”不能用为“数据处理”的同义词。 [来源：GB/T5271.1—2000，01.01.05] 3.3 数据处理dataprocessing 数据操作的系统执行。 注：术语“数据处理”不能用为“信息处理”的同义词。 [来源：GB/T5271.1—2000，01.01.06] 3.4 个人信息personalinformation 以电子或者其他方式记录的与已识别或