Global
PRACTICES Digital Economy Cybersecurity and Information Governance
Cybersecurity and Information Governance
Digital Economy
Cybersecurity and Information Governance

Cybersecurity is the backbone of stability in the digital economy, with businesses facing increasingly complex regulatory obligations and rising risks of cyber incidents. We help clients establish enterprise-wide security governance systems in compliance with China's Cybersecurity Law, Data Security Law, and related regulations, while also advising international organizations on cross-border data flows and foreign investment reviews impacting critical information infrastructure. Our services support both domestic and multinational enterprises in building resilient systems to manage security risks proactively and respond effectively to regulatory challenges.

Security Governance and Risk Management

  • Enterprise cybersecurity compliance frameworks

    We design comprehensive cybersecurity governance systems covering internal policies, management structures, and incident response protocols.

  • Critical information infrastructure compliance

    We advise on identification, registration, and security obligations for critical information infrastructure operators under Chinese law.

  • Network security graded protection (MLPS)

    We provide legal support for graded protection assessments, remediation measures, and regulatory filings.

  • Participation in cybersecurity assessments and compliance reporting

    We assist clients in national and local cybersecurity evaluations and prepare compliance reports required by regulators, ensuring alignment with evolving legal standards.

Technology, Procurement, and Operations

  • Cybersecurity in software and cloud operations

    We assess cybersecurity risks in software development, cloud services, and IT outsourcing, including reviewing contractual safeguards where needed.

  • Security product procurement and liability allocation

    We advise on procurement agreements and define liability for vulnerabilities and operational failures.

Incident Response and Regulatory Support

  • Cyber incident management and reporting

    We assist in responding to cyberattacks, system outages, and data breaches, including regulatory filings and stakeholder communications

  • National security and cross-border reviews

    We advise on China's cybersecurity review process, particularly for foreign investments and cross-border data transfers.

  • Whistleblower and compliance accountability mechanisms

    We help set up internal reporting systems and accountability frameworks for security events.


Contacts
Cookie Settings
When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. This information might be about you or your device and is mostly used to make the site work as you expect it to. The information does not usually directly identify you, but it can give you a more personalized web experience. Because we respect your right to privacy, you can choose not to allow some types of cookies. Click on the different category headings to find out more and change our default settings. However, blocking some types of cookies may impact your experience of the site. You may change your consent to Cookies at any time through the “Change your consent” button in the Cookie Policy
Required Cookies
These Cookies are essential for the website to function and cannot be switched off in our system. They enable basic functions like page navigation and access to secure areas of the website. These Cookies do not store any personally identifiable information. You can set your browser to block or alert you about these Cookies, but some parts of the site will not then work.
Analytical Cookies
These Cookies allow us to conduct an internal analysis to understand how our website performs, and how visitors interact with our website. Analytical Cookies may count visits and traffic sources and track performance and technical issues, all of which will help us to improve the website and to provide better, more relevant information to our users. All information collected through Analytical Cookies is aggregated, Non-Personal Information.
CONFIRM MY CHOICE