开放教育数据安全能力体系构建——以国家开放大学为例

Building a Data Security Capability Framework for Open Education—A Case Study of The Open University of China

摘要: 自《数据安全法》颁布实施以来，数据安全问题日益受到关注。开放教育场景下，校务数据治理、数据共享与开放应用伴随大量师生个人隐私等敏感信息，其安全保障直接关系高校办学稳定与长远发展。当前，制度漏洞、技术短板、环境风险等多重因素交织叠加，高校数据安全面临的威胁持续加剧。大模型、云计算及智能终端的广泛应用推动数据深度集成与高频交互，大数据的存储、共享与应用暴露出数据泄露与隐私外溢等问题，给师生个人权益、高校办学安全乃至国家信息安全带来潜在风险。本文结合开放教育数据特征与学校数据安全现实困境，基于数据生命周期理论，围绕在线教育数据的采集、传输、存储、共享、销毁等全流程，从制度、技术、环境等多维度对高校数据安全风险进行溯源，构建覆盖数据全生命周期、融合制度规范与技术防护的开放教育数据安全预警监测与防护体系，为开放教育数据安全治理提供实践参考。

Abstract: Since the promulgation and implementation of the Data Security Law, data security has drawn increasing attention. In open education settings, the governance of institutional data and the sharing and open application of data involve a large volume of sensitive information, such as the personal privacy of teachers and students; safeguarding such data bears directly on the operational stability and long-term development of higher education institutions. At present, multiple factors—institutional loopholes, technological shortcomings, and environmental risks—are interwoven and superimposed, and the threats confronting data security in higher education continue to intensify. The widespread application of large models, cloud computing, and intelligent terminals has driven the deep integration and high-frequency interaction of data, while the storage, sharing, and application of big data have exposed problems such as data breaches and privacy leakage, posing potential risks to the individual rights and interests of teachers and students, the operational security of institutions, and even national information security. Drawing on the characteristics of open education data and the real-world dilemmas of data security in universities, and grounded in data lifecycle theory, this paper traces the sources of data security risks in higher education from the multiple dimensions of institution, technology, and environment across the full process of online education data—collection, transmission, storage, sharing, and destruction. It constructs an early-warning, monitoring, and protection system for open education data security that spans the full data lifecycle and integrates institutional and technical safeguards, thereby providing a practical reference for the governance of open education data security.