Valid

GB/T 20272-2026Cybersecurity technology — Technical specification for the security of operating systems (English PDF)

网络安全技术　操作系统安全技术规范

Preview PDF

This is a limited preview

Buy now to download the full PDF (104 pages)

Need quotation for your management?

Get a formal quotation for GB/T 20272-2026 in 30 minutes.

Issued by

SAMR; SAC

Level / Type

National · Recommended

Issue date

April 30, 2026

Implementation date

November 1, 2026

Scope

GB/T 20272-2026 is the English-translated version of 网络安全技术　操作系统安全技术规范.

GB/T 20272-2026 is the Chinese national standard covering the security requirements of an operating system — identification and authentication, access control both discretionary and mandatory, the audit subsystem, the isolation between processes, the trusted path and the assurance evidence at each level.

At 62,500 words it is one of the largest documents in the batch and it replaces GB/T 20008-2005 after twenty-one years, under a different number. In force since 1 November 2026.

It was issued on 30 April 2026 and takes effect on 1 November 2026, replacing GB/T 20008-2005. The document is under the responsibility of the Standardization Administration of China.

This page is published from the official record of the 2026 edition; the clause text of a standard this recent is not yet in circulation, and the figures, limits and tables it contains are those of the document itself, delivered in full with the English translation.

Found what you need?

Document preview — GB/T 20272-2026

National Standard of the People's Republic of China

ICS: 35.030
Classification: L 80
Replacing: GB/T 20008-2005

Issued by: State Administration for Market Regulation; Standardization Administration of the PRC

Foreword
1 Scope
2 Normative references
3 Terms and definitions
4 Abbreviations
5 General rules
6 Safety technical requirements
7 Test and evaluation methods
Annex A (normative) Classification of the security technical requirements for operating systems and the corresponding test and evaluation methods
References

3 Terms and definitions

4 Abbreviations

5 General rules

6 Safety technical requirements

7 Test and evaluation methods

Foreword

This document was issued on 30 April 2026 by the State Administration for Market Regulation and the Standardization Administration of the People's Republic of China, and takes effect on 1 November 2026.

It replaces GB/T 20008-2005, which remains in force until that date.

The document is under the responsibility of the Standardization Administration of China.

Classification: ICS 35.030, CCS L 80.

3 Classification and status

GB/T 20272-2026 is classified under ICS 35.030, in the field of information technology. ICS is the International Classification for Standards, the same scheme used by ISO and by the national bodies of most countries, which is what allows a Chinese standard to be placed beside its foreign counterparts on subject rather than on number.

Its Chinese Standard Classification code is CCS L 80. CCS is the domestic scheme, a letter for the sector and two digits for the subject within it, and it is the code by which the standard is filed and searched in China.

The GB/T prefix marks a recommended national standard. It is not, in itself, law: it becomes binding when a contract names it, when a regulation or a mandatory standard refers to it, or when a producer declares conformity with it. In practice that covers most of the cases in which it will be read — a purchase specification, an inspection agreement or a certification scheme.

The document is under the responsibility of the Standardization Administration of China, which is the body that maintains it and that will answer a formal question about its interpretation.

......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 104 pages — is available in the English PDF.

Referenced standards

Cited by

Editions of GB/T 20272

Edition	Title	Revision	Status
GB/T 20272-2026	Cybersecurity technology — Technical specification for the security of operating systems	current edition	Current
GB/T 20008-2005	Cybersecurity technology — Technical specification for the security of operating systems	previous edition	In force until 1 November 2026

This page sells the current edition, GB/T 20272-2026. Earlier editions are listed for reference only.

How to Download GB/T 20272-2026

1
Add to cart
Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.
2
Checkout
Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).
3
Instant delivery (0–9 sec)
Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
4
Invoice included
A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.