Abstract:

[Purpose/Significance] Unclassified sensitive information, a special type of information, that falls between state secrets and public information, may threaten national scientific and technological security if it is not managed properly. This study aims to clarify the conceptual connotation and management value of unclassified sensitive information. Additionally, it seeks to improve China's information security protection system by promoting the country's "national unclassified sensitive information management system". [Method/Process] First, based on literature research and content analysis, the characteristics and attributes of unclassified sensitive information and the necessity of its management are systematically explained. Second, the management experience of controlled unclassified information (CUI) in the United States is analyzed by means of case studies. These studies include the creation of special laws and regulations to unify the CUI management, the formation of specialized management institutions to create a complete organizational structure, the development of a CUI management system, and the establishment of CUI classification and labeling. Finally, it proposes strategies to promote the development of China's sensitive information management system, given the current state of management situation in China, with the aim of promoting the safe and efficient management of public information resources. [Results/Conclusions] China needs to strengthen the top-level design of its management system for unclassified sensitive information. First, China should establish a policy and standard system for managing unclassified sensitive information, and clarify the rules for defining and controlling it. Second, the organizational and institutional structure should be improved for the management of unclassified sensitive information, and strengthening the review of information disclosure. Third, efforts should be made to develop a management system for registering directories and labels of sensitive information, and to realize standardized and dynamic management of directories of sensitive information. Fourth, the dissemination, use, training and management check should be strengthened, and thus long-term and healthy management of unclassified sensitive information can be promoted. Fifth, a registration directory and labeling management system for sensitive information should be developed so as to achieve standardized and dynamic management of the sensitive information directory. Finally, efforts should be made to strengthen the dissemination and use of sensitive information, as well as training and management inspections, so as to promote the long-term and healthy management of unclassified sensitive information.

Key words: unclassified sensitive information, information management system, scientific and technological security, information classification management