GB/T 21052-2007Information security technology - Physical security technical requirement for information system (English PDF)

Foreword

Appendix A of this standard is the data appendix.

Introduction

Physical security of information systems related to the supporting parts, equipment and safety facilities of the whole system, in which the security environment as well as the whole A reliable operation, etc., is the basic guarantee safe operation of information systems.

This standard technical requirements include three aspects. 1) information systems supporting parts, equipment safety requirements; 2) information systems which Safety requirements for the physical environment; 3) protect the physical security of the technical requirements for reliable operation of information systems. Equipment physical security, physical security environment Full physical security systems and the level of security technical requirements identified for the protection of the safe operation of information systems must meet the basic physical skills Surgery requirements.

This standard GB 17859-1999 for the security level is divided into five basis, according to GB/T 20271-2006 five security Stage for the different requirements of physical security technologies, combined with the current situation of China's specific computer, network and information security technology development, according to the The principle of appropriate protection, physical security technology class is divided into five different levels, and the information system security is proposed physical security technology Requirements. Different security levels of physical security platform provides physical security protection should correspond to the security level of information systems.

The first level physical security platform to provide basic physical security for the first level of user self-protection level, the second level of physical security platform for the second Level protection system audit level to provide adequate physical security, third-level physical security platform for third-level security tags provide a higher protection level The degree of physical security protection, fourth grade physical security platform provides a higher degree of physical security for the quaternary structure of the protection level, the fifth Level physical security platform provides the highest level of physical security for the fifth-level access validation protection level. With the physical security level sequentially mention High reliability of physical security information system also increases physical security risks faced by information systems is gradually reduced.

Accordance with the standards GB 17859-1999 division of five security levels, and each level of physical security requirements detailed technical description.

Because the fifth stage relates to the technical requirements of the physical security of the highest level of physical security technology, the content of this standard is omitted. Appendix A physical security phase Off the concept described, and the physical security classification techniques are described. Each level represents a relatively low level to secure clear Increase and enhance the security level of physical security technical requirements, the new part of each level is indicated by "bold italicized word."

1 Scope

This standard specifies the physical security of information systems grading technical requirements.

This standard applies to the class of physical security information system according to GB 17859-1999 security level requirements carried out the set Design and implementation of the test according to GB 17859-1999 security level requirements of physical security information system carried out, management may refer to use.

2 Normative references

The following documents contain provisions which, through reference in this standard and become the standard terms. For dated references, subsequent Amendments (not including errata content) or revisions do not apply to this standard, however, encourage the parties to the agreement are based on research Whether the latest versions of these documents. For undated reference documents, the latest versions apply to this standard.

GB/T 2887-2000 General specification for computer sites

GB 4943-2001 Safety of information technology equipment (idt IEC 60950:1999)

GB 8702-1988 electromagnetic radiation protection

GB 9175-1988 environmental electromagnetic health standards

GB 9254-1998 Limits and methods of measurement of radio disturbance of information technology equipment (idt CISPR 22:1997)

GB/T 9361-1988 computer site security requirements

GB/T 17626.2-2006 Electromagnetic compatibility - Testing and measurement techniques - Electrostatic discharge immunity test (IEC 61000-4-2:2001, IDT)

GB/T 17626.3-2006 Electromagnetic compatibility - Testing and measurement techniques RFEMS test (IEC 61000-4-3:2002, IDT)

GB/T 17626.4-1998 Electromagnetic compatibility - Testing and measurement techniques - Electrical fast transient burst immunity test (idt IEC 61000-4-4:1995)

GB/T 17626.5-1998 Electromagnetic compatibility - Testing and measurement techniques - Surge (impact) immunity test (idt IEC 61000-4-5:1995)

GB/T 17626.6-1998 Electromagnetic compatibility - Testing and measurement techniques - conducted disturbances induced by RF field immunity (idt IEC 61000-4-6:1995)

GB/T 17626.8-2006 Electromagnetic compatibility - Testing and measurement techniques - Power frequency magnetic field immunity test (IEC 61000-4-8:2001, IDT)

GB/T 17626.9-1998 Electromagnetic compatibility - Testing and measurement techniques - Pulse magnetic field immunity test (idt IEC 61000-4-9:1995)

GB/T 17626.11-1998 Electromagnetic compatibility Testing and measurement techniques - Voltage dips, short interruptions and voltage variations immunity Test (idt IEC 61000-4-11:1995)

GB 17859-1999 computer information system security protection classification criterion

GB/T 20271-2006 Information security technology - Common security techniques requirement information system

GB 50057-1994 Building Lightning Protection Design Code (2000 edition)

GB 50174-1993 computer room design specifications