Small and medium-sized enterprises are the main force of national economic and social development, and are an important force in expanding employment, improving people's livelihood, and promoting innovation and entrepreneurship. In the tide of accelerating the transformation of new and old kinetic energy and accelerating the digital transformation of industries, small and medium-sized enterprises cannot be absent or left behind. Although my country has intensively issued laws and regulations such as the "Data Security Law", "Personal Information Protection Law", "Network Product Security Vulnerability Management Regulations", and "Critical Information Infrastructure Security Protection Regulations", the network security protection of small and medium-sized enterprises is still a weak link that needs to be strengthened.

85% of the surveyed small and medium-sized enterprises believe that network security issues will have a serious impact on their business, and 57% of small and medium-sized enterprises believe that they are likely to go bankrupt (due to cyber attacks). Among them, 36% of small and medium-sized enterprises have been attacked more than once, and three-quarters of small and medium-sized enterprises cannot really resist cyber attacks, and even suffer from ransom attacks.

To this end, it is recommended:

1. Coordinate the planning and construction of a network security risk service platform for small and medium-sized enterprises.

It is recommended that relevant departments take the lead in establishing a network security risk service center for small and medium-sized enterprises to escort small and medium-sized enterprises and provide all-round network security risk protection services. Through the popularization of network security awareness, through policies and regulations, online and offline, training and drills, we can strengthen employees' network security awareness in multiple forms, help enterprises to keep up with the pace of the government to do a good job in their own network security infrastructure, and improve all aspects from the aspects of protection capabilities themselves, personnel security awareness, personnel construction and training.

2. Build a "network security talent ecosystem".

Strengthen the training of network security professionals and establish a sustainable and manageable long-term mechanism. Build a closed-loop training model that integrates "talent training, talent delivery, talent management, and talent assessment". Promote the establishment of a talent selection and evaluation platform. Relying on the "learning, training, competition, and battle" system, form a comprehensive evaluation mechanism for network security talents and realize talent selection. Promote the establishment of industry network security job management standards, job skill requirements, skill certification and assessment methods, etc. Establish a network security talent base and create a new model of benign interactive development that integrates "theoretical research, technical research, scenario verification, and application promotion".

3. Accelerate the construction of a basic resource database for small and medium-sized enterprises.

Collect, store, analyze and visualize the data of network security talents of small and medium-sized enterprises, form a complete basic resource database of small and medium-sized enterprises, strengthen the digital management of basic resources of digital enterprises, and support the interconnection, opening and sharing of government information systems and public data. Build a unified digital enterprise capability platform, and fully support various platforms and application services of digital enterprises by calling the capability platform.