2.6.4.2 Data security
1) Data security level
Data security level are information security, antivirus protection, media security, database security, system security, network security, equipment security etc according to security classification importance order. its security system structure shows as follows:
2) Data backup and recovery: the project is to apply data backup and recovery function of Sql Server database system to backup and recovery the buyer data. for a constant running multi user concurrent system, the buyer should build unified backup strategy to ensure the data security in the database. for the data in file base, it is also to apply unified backup strategy to ensure the file security.
3) Data encryption: the project is to transmit data by VPN network of the buyer and ensure the data security by choosing network encryption transmission strategy.
4) Data authority access: the project is to authorize different data access authority to different users to ensure the data access security according to the data access authority buyer assigned.

2.6.3.3 Network security
1) Network security: the buyer company is built on the Internet-based environment to ensure the whole system security, it is to suggest the buyer installing firewall, invasion detection etc product to ensure the network system security.
2) Antivirus：it is to suggest the buyer installing enterprise level matrix filter gateway at server and storage equipment inlet/outlet port to filter and check the virus, worm, Trojan, malice code etc and protect network from invasion to ensure the information security.
3) Network system management：it is to suggest the buyer installing network management product to implement monitoring on network logon, alarm on repeated password input trial, alarm on illegal external logon system.