GB/T 36957-2018Information security technology —Requirements for disaster recovery service (English PDF)
信息安全技术 灾难恢复服务要求
This is a limited preview
Buy now to download the full PDF (23 pages)
Need quotation for your management?
Get a formal quotation for GB/T 36957-2018 in 30 minutes.
Issued by
SAMR; SAC
Level / Type
National · Recommended
Issue date
December 28, 2018
Implementation date
July 1, 2019
Scope
GB/T 36957-2018 is the English-translated version of 信息安全技术 灾难恢复服务要求.
GB/T 36957-2018 sets the requirements for disaster recovery services for information systems, as supplied by a service provider to a customer organization.
It covers three areas: resource configuration, including sites, disaster recovery systems and the service team; the service process, from disaster recovery planning and design through system construction and implementation to operation and maintenance; and project organization management, with quality, configuration, risk, planning and monitoring requirements, support environment management, skills transfer, confidentiality and coordination with suppliers.
Customers can use it to set out what they require and to select a disaster recovery service, and providers can use it to standardize the services they deliver. It builds on the terms of GB/T 20988-2007. It was issued on 28 December 2018 and has applied since 1 July 2019.
Found what you need?
Document preview — GB/T 36957-2018
National Standard of the People's Republic of China
- ICS
- 35.040
- Classification
- L 80
Issued by: State Administration for Market Regulation; Standardization Administration of the PRC
Contents
- Foreword
- 1 Scope
- 2 Normative references
- 3 Terms and Definitions
- 4 Disaster Recovery Service General Requirements
- 5 Disaster Recovery Service Resource Configuration Requirements
- 5.1 Resource Configuration General Requirements
- 5.2 Site resource allocation requirements
- 5.3 Disaster Recovery System Resource Configuration Requirements
- 5.4 Disaster Recovery Service Team Requirements
- 6 Disaster Recovery Service Process Requirements
- 6.1 Disaster Recovery Service Process Overview
- 6.2 Disaster Recovery Planning Design Service Process Requirements
- 6.3 Disaster Recovery System Construction Implementation Service Process Requirements
- 6.4 Disaster Recovery Operation and Maintenance Service Process Requirements
- 7 Disaster Recovery Service Project Organization Management Requirements
- 7.1 Project Organization Management Content
- 7.2 Project Quality Management Requirements
- 7.3 Project Management Configuration Requirements
- 7.4 Project Risk Management Requirements
- 7.5 Project Planning Requirements
- 7.6 Project Monitoring Requirements
- 7.7 System Engineering Support Environmental Management Requirements
- 7.8 Skills and Knowledge Enhancement Service Requirements
- 7.9 Disaster Recovery Service Confidentiality Requirements
- 7.10 Coordination with suppliers
- Reference
Foreword
This standard was drafted in accordance with the rules given in GB/T 1.1-2009.
1 Scope
This standard specifies three aspects of disaster recovery service resource configuration, disaster recovery service process and disaster recovery service project management. Difficult to restore service requirements.
This standard applies to the disaster recovery service demand side (hereinafter referred to as "service demand side") to the disaster recovery service provider (hereinafter referred to as "service" The service provider") proposes service requirements, which can be used by relevant industries and enterprises to select disaster recovery services.
This standard can also be used to standardize the disaster recovery services performed by service providers.
2 Normative references
The following documents are indispensable for the application of this document. For dated references, only dated versions apply to this document. For undated references, the latest edition (including all amendments) applies to this document.
GB/T 20984 Information Security Technology Information Security Risk Assessment Specification
GB/T 20985.1 Information technology security technology information security event management Part 1: Principles of event management
GB/T 20988-2007 Information Security Technology Information System Disaster Recovery Specification
GB/T 30285-2013 Information Security Technology Disaster Backup Center Construction and Operation and Maintenance Management Specifications
GB/T 31240-2014 Information technology user building cable routing path and space
GB/T 31722-2015 Information technology security technology information security risk management
GB 50116-2013 Fire automatic alarm design specification
GB 50370-2005 Gas fire extinguishing system design specification
3 Terms and definitions
The following terms and definitions as defined in GB/T 20988-2007 apply to this document and are listed below for ease of use. Some terms and definitions in GB/T 20988-2007.
3.1 Disaster
Due to human or natural causes, the information system is seriously faulty or paralyzed, causing the information system's business function to be suspended or the service level is not Sudden time that is acceptable and reaches a specific time. Often the information system needs to be switched to the disaster backup center to run. [GB/T 20988-2007, definition 3.8]
3.2 Disaster recovery service
In order to restore an information system from a fault or paralysis caused by a disaster to a functioning state and to support the business functions it supports Activities such as analysis, design, implementation, operation, maintenance, and organization management that are carried out from an abnormal state caused by a disaster to an acceptable state Process.
3.3 Disaster recovery service demand side
An organization or department that needs to implement disaster recovery through third-party professional services and resources, referred to as the service demand side.
......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 23 pages — is available in the English PDF.
Referenced standards
Normative references
- GB/T 20984Information security technology—Risk assessment method for information security
- GB/T 20985.1Cybersecurity technology - Cybersecurity incident management - Part 1: Principles and process
- GB/T 20988-2007Cybersecurity technology - Disaster recovery specifications for information systems
- GB/T 30285-2013Information security technology - Construction and sustain management specifications of disaster recovery center
- GB/T 31240-2014Information technology -- Pathways and spaces for customer premises cabling
- GB/T 31722-2015Cybersecurity technology - Guidance on managing information security risks
Similar standards
How to Download GB/T 36957-2018
- 1
Add to cart
Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.
- 2
Checkout
Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).
- 3
Instant delivery (0–9 sec)
Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
- 4
Invoice included
A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.
Related Standards
GB 50116-2013 — Code for design of automatic fire alarm system
GB 50370-2005 — Code for design of gas fire extinguishing systems
GB/T 20984-2022 — Information security technology—Risk assessment method for information security
Secure payment via Stripe
Payments accepted
GB/T 36957-2018
$355.00