GB/T 29245-2012Information security techniques - Basic requirements of information security for national department (English PDF)

1 Scope

This standard specifies the basic government information security management requirements for information security management guidance at all levels of government. this

Standard involved in security work, in accordance with privacy regulations and standards; work involving passwords, password management in accordance with national regulations.

This standard applies to all levels of government departments and other units can use and reference.

2 Normative references

The following documents for the application of this document is essential. For dated references, only the dated version suitable for use herein

Member. For undated references, the latest edition (including any amendments) applies to this document.

GB/T 20984-2007 Information Security techniques - Information security risk assessment specification

GB/T 22239-2008 Information security technology information system security protection essential requirements

GB/T 22240-2008 Information security technology information system security protection rating guide

3 Organization of information security management

The entry requirements include.

a) should strengthen their leadership and responsibility, improve measures to establish and improve information security and accountability mechanism;

b) should be a clear leader in charge of the unit responsible for information security management, in accordance with national laws and regulations of the relevant requirements, the actual

Organizations to develop information security management system, improve the technical protection measures to coordinate the handling of major information security incidents;

c) shall designate an authority, specific commitment to information security management, the organization responsible for implementing information security management system and information security technologies

Art protective measures, information security education and training to carry out supervision and inspection;

d) The internal organization should designate a full-time or part-time information security officer, responsible for the daily information security supervision, inspection, guidance. letter

Information security officer should have a strong sense of responsibility and awareness of information security, information security master the basic knowledge and skills.

4 daily information security management