GB/T 31722-2025Cybersecurity technology - Guidance on managing information security risks (English PDF)
网络安全技术 信息安全风险管理指导
Also coversGB/T31722-2025 + GBT31722-2025
This is a limited preview
Buy now to download the full PDF (44 pages)
Need quotation for your management?
Get a formal quotation for GB/T 31722-2025 in 30 minutes.
Issued by
SAMR; SAC
Level / Type
National · Recommended
Issue date
August 1, 2025
Implementation date
February 1, 2026
Scope
GB/T 31722-2025 is the English-translated version of 网络安全技术 信息安全风险管理指导.
Organisations that handle information face a constant need to identify, evaluate and treat security risks in a structured way. This document provides guidance on managing information security risks, and it sits in the cybersecurity technology family of Chinese national standards.
Being guidance, it is meant to support those who set up or run a risk management process, rather than to prescribe a single mandatory procedure. Typical readers include information security managers, risk and compliance officers, system owners, consultants and auditors, as well as technology suppliers who need to explain their risk practices to customers in China.
The standard was issued on 1 August 2025 and takes effect on 1 February 2026, replacing GB/T 31722-2015. It is a recommended national standard, which means adoption is voluntary unless a regulator, customer contract or internal policy requires it. Teams that built their risk programmes on the 2015 edition should review the new version when planning their next update cycle.
Found what you need?
Document preview — GB/T 31722-2025
National Standard of the People's Republic of China
- ICS
- 35.030
- Classification
- L80
- Replacing
- GB/T 31722-2015
Issued by: State Administration for Market Regulation; Standardization Administration of China
Contents
- Foreword
- 1 Scope
- 2 Normative references
- 3 Terms and definitions
Foreword
GB/T 31722-2025 is a recommended national standard (GB/T) of the People's Republic of China, issued on 1 August 2025 by the State Administration for Market Regulation and the Standardization Administration of China, with effect from 1 February 2026.
This edition replaces GB/T 31722-2015.
The document adopts an international standard (ISO or IEC).
It is under the responsibility of the Standardization Administration of China.
Classification: ICS 35.030; CCS L80.
1 Scope
Organisations that handle information face a constant need to identify, evaluate and treat security risks in a structured way. This document provides guidance on managing information security risks, and it sits in the cybersecurity technology family of Chinese national standards.
Being guidance, it is meant to support those who set up or run a risk management process, rather than to prescribe a single mandatory procedure. Typical readers include information security managers, risk and compliance officers, system owners, consultants and auditors, as well as technology suppliers who need to explain their risk practices to customers in China.
The standard was issued on 1 August 2025 and takes effect on 1 February 2026, replacing GB/T 31722-2015. It is a recommended national standard, which means adoption is voluntary unless a regulator, customer contract or internal policy requires it. Teams that built their risk programmes on the 2015 edition should review the new version when planning their next update cycle.
Remaining clauses in the full document
- 2 Normative references
- 3 Terms and definitions
......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 44 pages — is available in the English PDF.
Referenced standards
Cited by
- GB/T 24364-2023Information security technology—Implementation guide for information security risk management
- GB/T 43581-2023Smart city—General requirements for public health emergency management platform
- GB/T 42126.1-2022Industrial wireless communication specification based on cellular networks—Part 1: General technical requirements
- GB/T 25068.5-2021Information technology - Security techniques - Network security - Part 5: Securing communications across networks using virtual private networks
- GB/T 38628-2020Information security technology—Cybersecurity guide for automotive electronics systems
- GB/T 36324-2018Information security technology—Information security classification specifications of industrial control systems
Editions of GB/T 31722
| Edition | Title | Revision | Status |
|---|---|---|---|
| GB/T 31722-2025 | Cybersecurity technology - Guidance on managing information security risks | current edition | Current |
| GB/T 31722-2015 | Information technology - Security techniques - Information security risk management | previous edition | In force until 1 February 2026 |
This page sells the current edition, GB/T 31722-2025. Earlier editions are listed for reference only.
How to Download GB/T 31722-2025
- 1
Add to cart
Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.
- 2
Checkout
Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).
- 3
Instant delivery (0–9 sec)
Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
- 4
Invoice included
A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.
Related Standards
GB/T 10003-2026 — Biaxially oriented polypropylene (BOPP) film
GB/T 10004-2026 — Plastic/Plastic laminated films and pouches for packaging
GB/T 10007-2026 — Rigid cellular plastics - Determination of shear properties
Secure payment via Stripe
Payments accepted
GB/T 31722-2025
$695.00