Optimization path of network security governance system under the background of digital transformation

Abstract

Digital transformation not only releases the efficiency dividend of enterprises, but also significantly expands the network attack surface, which makes the traditional network security governance model face severe challenges. This paper systematically analyzes the four core pain points in the current governance system and the dilemma of governance logic reconstruction in zero trust transformation. Through the comparative study of mainstream governance paradigms such as NIST CSF 2.0, ISO 27001:2022 and zero trust architecture, this paper proposes a three-tier collaborative governance model covering strategic layer, operational layer and technical layer, emphasizing the horizontal integration of business-security-compliance. An empirical study of Group A shows that the model can shorten the decision-making period of cross-departmental security policy by 71.9%, reduce the time-consuming of new business security assessment by 84.9%, reduce the cost of multi-jurisdiction compliance integration by 50%, and reduce the response time of unauthorized access incident detection by 91.3%. The research provides a theoretical framework and practical path for the optimization of network security governance of digital transformation enterprises.