发布单位： 中国移动通信集团有限公司 编制单位： 信息安全管理与运行中心 中移（苏州）软件技术有限公司 参编人员： 张峰、江为强、秦尔楠、朱文鹏、郭中元、王浩硕、邱勤、张文勇、王光涛、 罗志成、董航、石春磊、叶锦辉、徐天妮、张瑞钦、张泉、徐思嘉、丁郅豪、 董军、于乐、肖煜、何亮忠、刘畅、邵根波、冯尧、王晓周、严仍义、 柴倩、徐扬、王国宇、牟丽、密鹏翔、张胜、檀鹏、费怡超、张弘扬、 王馨裕、李智水声明 版权所有©中国移动通信集团有限公司。保留一切权利。 非经中国移动通信集团有限公司明确的书面许可，任何单位和个人，均不得基于任 何目的，以任何方式摘抄、复制、传播本文档的部分或全部内容，亦不得将本文档复制、 存储或引入到任何检索系统中。重要注意事项 中国移动通信集团有限公司可能拥有本文档内容所涉及的专利、专利申请、商标、版权 或其他知识产权，获得本文档并不代表您同时获得这些知识产权的授权许可。 您购买的产品、服务或特性等应受移动云商业合同和条款的约束，本文档中描述的全部 或部分产品、服务或特性可能不在您的购买或使用范围之内。本文档仅作为使用指导，除非 另有约定，本文档中的所有陈述、信息和建议均不构成中国移动通信集团有限公司对您所购 买的产品、服务或特性的任何明示或暗示的声明或保证。 由于产品、服务版本升级或其他原因，移动云保留在没有任何通知或者提示下对本文档 的内容进行修改的权利，并在移动云授权通道中不时发布更新后的本文档。您应当实时关注 云服务客户文档的版本变更并通过移动云授权渠道下载、获取最新版的本文档。目录 CONTENT目录 1.1移动云简介···········································································································································2 1.2移动云安全战略··································································································································2 2.1安全合规资质·······································································································································4 2.2安全防护技术·······································································································································4 2.3安全运营管理·······································································································································6 2.4安全产品服务·······································································································································7 3.1移动云用户安全··································································································································9 3.2移动云平台安全································································································································12 3.3移动云安全管理································································································································12 3.4移动云安全运营································································································································14目录 3.5移动云安全合规保障·······················································································································16 4.1责任共担模型····································································································································17 4.2云服务商安全责任····························································································································21 4.3云服务客户安全责任·······················································································································21 5.1保障安全合规····································································································································22 5.2安全资质认证····································································································································22 6.1移动云安全管理 6.2移动云安全运营································································································································25 6.3移动云产品开发安全管理···············································································································27 7.1物理安全·············································································································································28 7.2虚拟化安全········································································································································28 7.3平台数据安全····································································································································30 7.4客户数据安全····································································································································31 7.5个人信息隐私保护····························································································································33 目录 8.1移动云运营管理平台··························