GB/T 34990-2017Information security technology—Technical requirements and testing evaluation approaches of information system security management platform products (English PDF)
信息安全技术 信息系统安全管理平台技术要求和测试评价方法
This is a limited preview
Buy now to download the full PDF (58 pages)
Need quotation for your management?
Get a formal quotation for GB/T 34990-2017 in 30 minutes.
Issued by
SAMR; SAC
Level / Type
National · Recommended
Issue date
November 1, 2017
Implementation date
May 1, 2018
Scope
GB/T 34990-2017 is the English-translated version of 信息安全技术 信息系统安全管理平台技术要求和测试评价方法.
GB/T 34990-2017 is the Chinese standard "Information security technology—Technical requirements and testing evaluation approaches of information system security management platform products".
Its scope clause reads: This standard specifies the safety management platform based on information security strategy and management responsibilities of systems management, security management, audit management and other work Can, as well as platform function requirements of object recognition, policy setting, security monitoring, event handling and other processes, the platform's own security requirements, protection Seeking, and testing evaluation methods.
This standard applies to the safety management platform planning, design, development and testing evaluation, as well as in the Information Systems Security Management Center application.
Found what you need?
Document preview — GB/T 34990-2017
National Standard of the People's Republic of China
- ICS
- 35.040
- Classification
- L 80
Issued by: State Administration for Market Regulation; Standardization Administration of the PRC
Contents
- Foreword
- Introduction
- 1 Scope
- 2 Normative references
- 3 Terms and definitions
- 4 Security Management Platform Overview
- 4.1 Security Management Platform Fundamentals
- 4.2 security management platform management object
- 4.3 security management platform to use the environment
- 4.4 Security Management Platform Security Level
- 5 functional requirements
- 5.1 Functional Composition
- 5.2 The basic function
- 5.2.1 Safety Strategy and Safety Management Functions Requirements
- 5.2.2 System Component Management Function Requirements
- 5.2.3 Security Mechanism Management Function Requirements
- 5.2.4 audit mechanism management function requirements
- 5.2.5 platform function data management function requirements
- 5.2.6 platform system interface functional requirements
- 5.2.7 platform cascading function requirements
- 5.3 Extended Functions
- 5.3.1 Physical Security Management
- 5.3.2 Security Risk Management
- 5.3.3 Other extensions
- 6 safety requirements and protection requirements
- 6.1 Safety Requirements
- 6.1.1 Identification
- 6.1.2 Non-repudiation
- 6.1.3 Access Control
- 6.1.4 Security Audit
- 6.1.5 Integrity Protection
- 6.1.6 Confidentiality Protection
- 6.1.7 Intrusion and Malicious Code Prevention
- 6.1.8 Software Fault Tolerance and Resource Control
- 6.1.9 Trusted Path
- 6.1.10 password support
- 6.2 Security Requirements
- 6.2.1 Configuration and equipment selection
- 6.2.2 Delivery and Operation
- 6.2.3 Development
- 6.2.4 Guidance Document
- 6.2.5 Test
- 6.2.6 Vulnerability Assessment
- 6.2.7 Life Cycle Support
- 7 Test Evaluation Method
- 7.1 Test Evaluation Range
- 7.2 platform function test
- 7.2.1 Security Strategy and Security Responsibility Management Function Test
- 7.2.2 System Component Management Function Test
- 7.2.3 Security Mechanism Management Function Test
- 7.2.4 audit mechanism management function test
- 7.2.5 data management function test
- 7.2.6 Interface Management Function Test
- 7.2.7 Cascading function test
- Appendix A (Informative) Safety Management Platform Technical Requirements Security classification
- Appendix B (informative) platform for various types of management object control process description
- Appendix C (Informative) Security Management Platform in the cloud computing applications
- Appendix D (Informative) Information System Security Mechanism Reference
- References
1 Scope
This standard specifies the safety management platform based on information security strategy and management responsibilities of systems management, security management, audit management and other work
Can, as well as platform function requirements of object recognition, policy setting, security monitoring, event handling and other processes, the platform's own security requirements, protection
Seeking, and testing evaluation methods.
This standard applies to the safety management platform planning, design, development and testing evaluation, as well as in the Information Systems Security Management Center application.
2 Normative references
The following documents for the application of this document is essential. For dated references, only the dated version applies to this article
Pieces. For undated references, the latest edition (including all amendments) applies to this document.
Computer Information Systems - Security Protection Classification Guidelines
GB/T 18018 Information Security Technology Router Security Technical Requirements
Information security technology Information system security management requirements
GB/T 20270 Information Security Technology Network Security Requirements
Information security technology Operating system security technology requirements
GB/T 20273 Information security technology database management system security technical requirements
GB/T 20275 Information Security Technology Network Intrusion Detection System Technical Requirements and Test Evaluation Methods
GB/T 20279 Information Security Technology Network and terminal isolation product safety technical requirements
GB/T 20281 Information security technology Firewall security technical requirements and test evaluation methods
GB/T 20945 Information security technology Information system security audit product technical requirements and test evaluation methods
Information security technology Information security risk assessment code
GB/T 21028 Information Security Technology Server Security Technology Requirements
GB/T 21050 Information Security Technology Network Switch Security Technical Requirements (Evaluation Guarantee Level 3)
GB/T 21052 Information Security Technology Information Systems Physical Security Technical Requirements
Information technology - Security technology - Information security management - Practical rules
Information security technology - Information system - Security level protection - Basic requirements GB/T 22239-2008
Information security technology Information security emergency response plan specification
GB/T 25055 information security technology public key infrastructure security support platform technology framework
Information technology - Security terminology
Information security technology Information system level protection Security design technical requirements
GB/T 28451 Information Security Technology Network Intrusion Prevention Product Technical Requirements and Test Evaluation Methods
Information security technology application software systems - General safety requirements
Information security technology Information system security management assessment requirements
GB/T 29240 Information Security Technology Terminals Computer General Security Technical Requirements and Test Evaluation Methods
GB/T 29244 Information security technology office equipment basic safety requirements […]
......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 58 pages — is available in the English PDF.
Referenced standards
Similar standards
How to Download GB/T 34990-2017
- 1
Add to cart
Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.
- 2
Checkout
Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).
- 3
Instant delivery (0–9 sec)
Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
- 4
Invoice included
A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.
Related Standards
GB/T 10003-2026 — Biaxially oriented polypropylene (BOPP) film
GB/T 10004-2026 — Plastic/Plastic laminated films and pouches for packaging
GB/T 10007-2026 — Rigid cellular plastics - Determination of shear properties
Secure payment via Stripe
Payments accepted
GB/T 34990-2017
$950.00