Specialized Training on Commercial Cryptography Applications Successfully Held to Strengthen Security Protection

To implement the requirements of the Cryptography Law of the People’s Republic of China on the application of cryptography in information systems and to accelerate the secure application of commercial cryptography in China’s disease prevention and control information systems, the Information Center of the Chinese Center for Disease Control and Prevention (China CDC) hosted a training program on commercial cryptography applications on July 3, 2025, at its North Campus. Over 60 participants attended, including business administrators of the disease prevention and control information systems, information technology personnel, and technical staff from maintenance service providers across various departments and affiliated units. The training was chaired by Fu Gang, Director of the Information Center.

 

Director Fu highlighted the significance of commercial cryptography applications, stressing that cryptographic measures must not be implemented for their own sake. He noted that, in the actual operation of information systems, it is essential to thoroughly map and assess “assets,” clearly define the objects requiring protection, and apply cryptography in a targeted manner to ensure it effectively safeguards the system. The session featured a special lecture by Jia Shijie, Researcher at the Institute of Information Engineering, Chinese Academy of Sciences. He focused on security assessment for commercial cryptography applications, relevant laws, regulations and policies, as well as the standards framework for the security evaluation of commercial cryptography applications.

 

Through this training, participants gained a deeper understanding of the core role of cryptography in protecting information system assets and maintaining data security. The program underscored that cryptographic security assessment is a key component of ensuring the security of information systems, providing a solid foundation for departments and units to conduct cryptographic evaluations of their business systems.