GB/T 37094-2018Information security technology—Security management requirements for office information systems (English PDF)
信息安全技术 办公信息系统安全管理要求
This is a limited preview
Buy now to download the full PDF (15 pages)
Need quotation for your management?
Get a formal quotation for GB/T 37094-2018 in 30 minutes.
Issued by
SAMR; SAC
Level / Type
National · Recommended
Issue date
December 28, 2018
Implementation date
July 1, 2019
Scope
GB/T 37094-2018 is the English-translated version of 信息安全技术 办公信息系统安全管理要求.
GB/T 37094-2018 sets out the security management requirements for office information systems. For construction it covers scheme design, product purchase and use, software development, project implementation, test acceptance, system delivery and the selection of service providers.
For operation and maintenance it covers environment, asset, device, monitoring and security management, change management, backup and recovery, emergency response, and maintenance through to end of life.
It also deals with the management system, the management organisation, personnel management and outsourcing. It is intended to guide the security management of office information systems in party and government departments, while confidential systems remain subject to national secrecy rules. It was issued on 28 December 2018 and has applied since 1 July 2019.
Found what you need?
Document preview — GB/T 37094-2018
National Standard of the People's Republic of China
- ICS
- 35.040
- Classification
- L 80
Issued by: State Administration for Market Regulation; Standardization Administration of the PRC
Contents
- Foreword
- 1 Scope
- 2 Normative references
- 3 Terms and Definitions
- 4 Management requirements
- 4.1 Construction Management
- 4.1.1 Scheme Design
- 4.1.2 Product Purchase and Use
- 4.1.3 Software Development
- 4.1.4 Project Implementation
- 4.1.5 Test Acceptance
- 4.1.6 System Delivery
- 4.1.7 Service provider selection
- 4.2 System Operation and Maintenance Management
- 4.2.1 Environmental Management
- 4.2.2 Asset Management
- 4.2.3 Device Management
- 4.2.4 Monitoring Management
- 4.2.5 Security Management
- 4.2.6 Change Management
- 4.2.7 Backup and Recovery Management
- 4.2.8 Emergency Response Management
- 4.2.9 Maintenance and End of Life Management
- 4.3 System Management
- 4.3.1 Management System
- 4.3.2 Management organization
- 4.3.3 Personnel Management
- 4.4 Outsourcing Management
Foreword
This standard was drafted in accordance with the rules given in GB/T 1.1-2009.
1 Scope
This standard specifies the requirements for the construction management, system operation and maintenance management, system management and outsourcing management of office information systems.
This standard is applicable to guide the security management of office information systems of the party and government departments, and the construction management basis of the confidential office information systems. National secrecy regulations and standards are required to be implemented.
2 Normative references
The following documents are indispensable for the application of this document. For dated references, only dated versions apply to this document. For undated references, the latest edition (including all amendments) applies to this document.
GB/T 25069-2010 Information Security Technology Terminology
GB/T 32926-2016 Information Security Technology Government Department Information Technology Service Outsourcing Information Security Management Specification
GB/T 37095-2018 Information Security Technology Office Information System Security Basic Technical Requirements
GB/T 37096-2018 Information Security Technology Office Information System Security Test Specification
3 Terms and definitions
The terms and definitions defined in GB/T 25069-2010 and GB/T 37095-2018 apply to this document.
4 Management requirements
4.1 Construction Management
4.1.1 Scheme design
The program design requirements are as follows.
a) The owner unit designates or authorizes a special department to prepare the overall construction according to the principles of office information system construction and construction needs. Planning, technical framework and detailed design plan, formulate construction work plan and management system, and form supporting documents;
b) Relevant departments and experts should be organized to relevant supporting documents for the overall planning, technical framework and detailed design plan adopted in the construction. Rationality and scientificity are demonstrated and can only be formally implemented after approval by the owner.
4.1.2 Product Purchase and Use
Product procurement and use requirements are as follows.
a) Infrastructure, equipment, hardware and software products, etc. should be selected according to the principles of office information system construction and construction needs. Perform a selection test;
b) Product selection should be based on the following basic requirements.
......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 15 pages — is available in the English PDF.
Referenced standards
Normative references
- GB/T 25069-2010Information security techniques—Terminology
- GB/T 32926-2016Information security technology—Information security management specification for government information technology service outsourcing
- GB/T 37095-2018Information security technology—Security basic technical requirements for office information systems
- GB/T 37096-2018Information security technology—Security testing specification for office information systems
Similar standards
How to Download GB/T 37094-2018
- 1
Add to cart
Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.
- 2
Checkout
Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).
- 3
Instant delivery (0–9 sec)
Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
- 4
Invoice included
A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.
Related Standards
GB/T 32926-2016 — Information security technology—Information security management specification for government information technology service outsourcing
GB/T 37095-2018 — Information security technology—Security basic technical requirements for office information systems
GB/T 37096-2018 — Information security technology—Security testing specification for office information systems
Secure payment via Stripe
Payments accepted
GB/T 37094-2018
$145.00