Cloud storage is an emerging network storage technology. In recent years, as the "cloud" functions of networks have become increasingly widespread, "cloud" data has also become a focus of attention for foreign espionage and intelligence agencies. Through various means such as cyber attacks and implanting trojans, they attempt to steal our sensitive information and classified data, posing a serious threat to personal privacy and national security. Some units and individuals, for convenience and speed, upload sensitive information or classified matters to the "cloud," causing the relevant sensitive and classified information and data to "run naked" on the Internet, giving foreign espionage and intelligence agencies opportunities for cyber theft.

　　Data stored on the "cloud" must be declassified

　　In recent years, the national secrecy administrative departments have published multiple cases of illegal cloud storage of state secrets. The responsible persons involved, without undergoing secrecy review, uploaded classified materials to the Internet and were subsequently seriously held accountable in accordance with discipline and law.

　　For example, Li, a staff member of a provincial-level unit, used his own online disk to privately store confidential-level classified materials.

　　For example, Yang, a staff member of a county-level organ, for work convenience, without authorization uploaded a large amount of documents and materials, including 1 confidential-level document and 2 secret-level documents, to an online disk and downloaded them for use at home.

　　For example, Fang, a leading cadre of a county, without undergoing secrecy review, asked office staff to upload 15 documents and materials, including 1 secret-level document, to an online disk and set it to sharing mode for relevant personnel to browse.

　　The above cases reflect that weak secrecy awareness and wishful thinking among users are important reasons leading to cloud storage leaks and disclosures. Staff of Party and government organs and classified units should always keep the string of secrecy taut, regulate their Internet behavior, and strictly prohibit storing, processing, transmitting, or discussing classified and sensitive information through the Internet, mobile phones, online disks, etc., resolutely preventing leaks and disclosures and ensuring the security of state secrets.

　　"Cloud" protection needs to be strengthened

　　When using the Internet to handle personal matters in daily work and life, in the face of risks such as cloud storage accounts being vulnerable to illegal cyber attacks, corresponding security protection needs to be strengthened at the operational level.

　　—Strictly prohibit classified information from going online. Relevant personnel and units should adhere to the bottom line of "classified information does not go online, and what goes online is not classified," strictly prohibit uploading, storing, and processing classified information through the Internet, and strictly protect state secrets and work secrets.

　　—Do a good job of protecting sensitive information. Personal privacy or sensitive information should, as far as possible, not be uploaded to the cloud. If uploading is necessary, important information can be set to "prohibit sharing." Sensitive information should be backed up through USB flash drives, CDs, and other media physically isolated from the outside.

　　—Encrypt online disk content. At present, most cloud storage online disks provide file encryption functions. For cloud storage data that needs to be shared, it is recommended to set an "extraction code" and set a "sharing validity period" to reduce the possibility of information leakage.

　　—Maintain account passwords in a timely manner. Bind accounts to mobile phones, WeChat, email, etc., and log in through dynamic verification codes each time; set relatively complex passwords and change them frequently, and adjust passwords promptly when account abnormalities are discovered.

　　—Choose "automatic backup" cautiously. Many service providers offer users the function of regularly and automatically backing up photos, contacts, data, and other information to the cloud. It is recommended to choose this function cautiously and to selectively back up relevant data manually.

　　Tips from the national security organ

　　The Secrecy Law of the People's Republic of China stipulates that it is prohibited to transmit state secrets over the Internet or other public information networks or in wired and wireless communications without adopting effective secrecy measures in accordance with national secrecy regulations and standards.

　　The Data Security Law of the People's Republic of China stipulates that carrying out data processing activities using the Internet and other information networks shall, on the basis of the cybersecurity classified protection system, fulfill data security protection obligations.

　　In the era of networking, digitalization, and intelligence, the broad masses and relevant units should raise secrecy awareness, strengthen the concept of secrecy, fulfill secrecy obligations, implement secrecy responsibilities, and resolutely build a solid defense line for safeguarding the secrets of the Party and the state in the new era. Under the strong leadership of the Party Central Committee, the national security organs will coordinate and cooperate with relevant departments to resolutely safeguard national cybersecurity and data security.