GB/T 37095-2018Information security technology—Security basic technical requirements for office information systems (English PDF)
信息安全技术 办公信息系统安全基本技术要求
This is a limited preview
Buy now to download the full PDF (15 pages)
Need quotation for your management?
Get a formal quotation for GB/T 37095-2018 in 30 minutes.
Issued by
SAMR; SAC
Level / Type
National · Recommended
Issue date
December 28, 2018
Implementation date
July 1, 2019
Scope
GB/T 37095-2018 is the English-translated version of 信息安全技术 办公信息系统安全基本技术要求.
GB/T 37095-2018 sets the basic security technical requirements for office information systems built for Party and government departments, covering system design, product procurement and system integration.
It lays down five basic principles - standards compliance, open compatibility, security, minimum functionality and transparent verifiability - and then technical requirements for the physical environment, basic hardware and software products, the main network and security equipment, and application software, which is assessed for functionality, security, reliability and ease of use.
It draws on related standards for computer sites, servers, operating systems, databases, routers, switches, firewalls and intrusion detection. Classified office information systems are instead built under the relevant national secrecy regulations and standards. It was issued on 28 December 2018 and has applied since 1 July 2019.
Found what you need?
Document preview — GB/T 37095-2018
National Standard of the People's Republic of China
- ICS
- 35.040
- Classification
- L 80
Issued by: State Administration for Market Regulation; Standardization Administration of the PRC
Contents
- Foreword
- 1 Scope
- 2 Normative references
- 3 Terms and Definitions
- 4 Abbreviations
- 5 Basic Principles
- 5.1 Standards meet principle
- 5.2 Open Compatibility Principle
- 5.3 Security Principle
- 5.4 Function Minimization Principle
- 5.5 Transparent Verifiable Principle
- 6 Technical requirements
- 6.1 Overview
- 6.2 General requirements
- 6.3 Physical Environment
- 6.4 Basic software and hardware products
- 6.4.1 Hardware Products
- 6.4.2 Software product
- 6.5 Network facilities
- 6.5.1 Main network equipment
- 6.5.2 Main safety equipment
- 6.6 Application Software System
- 6.6.1 Functionality
- 6.6.2 Security
- 6.6.3 Reliability
- 6.6.4 Ease of use
Foreword
This standard was drafted in accordance with the rules given in GB/T 1.1-2009.
1 Scope
This standard specifies the basic technical requirements for the safety of office information systems.
This standard is applicable to the construction of office information systems for the party and government departments, including system design, product procurement, system integration, etc. The basic principles to follow and the basic technical requirements that should be met. Construction management of classified office information systems is based on relevant national secrecy regulations And standard requirements are implemented.
2 Normative references
The following documents are indispensable for the application of this document. For dated references, only dated versions apply to this document. For undated references, the latest edition (including all amendments) applies to this document.
GB/T 2887-2011 General specification for computer sites
GB/T 18018 Information Security Technology Router Security Technical Requirements
GB 18030-2005 Information Technology Chinese Coded Character Set
GB/T 20272 Information Security Technology Operating System Security Technical Requirements
GB/T 20273 Information Security Technology Database Management System Security Technical Requirements
GB/T 20275-2013 Information security technology network intrusion detection system technical requirements and test evaluation methods
GB/T 20281-2015 Information security technology firewall technical requirements and test evaluation methods
GB/T 21028-2007 Information security technology server security technical requirements
GB/T 21050-2007 Information security technology network switch security technical requirements (assessment assurance level 3)
GB/T 21052-2007 Information security technology information system physical security technical requirements
GB/T 22239-2008 Information security technology information system security level protection basic requirements
GB/T 25069-2010 Information Security Technology Terminology
GB/T 26856-2011 Chinese office software basic requirements and compliance test specifications
GB/T 28452-2012 Information security technology application software system general security technical requirements
GB/T 29240-2012 Information security technology terminal computer general safety technical requirements and test evaluation methods
GB/T 33190-2016 electronic file storage and exchange format layout document
3 Terms and definitions
The following terms and definitions as defined in GB/T 25069-2010 apply to this document.
3.1 Office information system
Server, desktop PC, operating system, database management system, application server middleware, office software, network facilities, application software The system consists of software and hardware, and provides information system for office services through means of data collection, storage, transmission, management and processing.
......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 15 pages — is available in the English PDF.
Referenced standards
Normative references
- GB/T 2887-2011General specification for computer field
- GB/T 18018Information security technology—Technical requirement for router security
- GB 18030-2005Information technology - Chinese coded character set
- GB/T 20272Cybersecurity technology — Technical specification for the security of operating systems
- GB/T 20273Information security technology—Security technical requirements for database management system
- GB/T 20275-2013Information security technology—Technical requirements and testing and evaluation approaches for network-based intrusion detection system
Cited by
- GB/T 47855-2026Basic requirements for smart park information systems
- GB/T 42455.1-2023Smart city—Building and residence community—Part 1: Technology requirements of information system for smart community
- GB/T 37094-2018Information security technology—Security management requirements for office information systems
- GB/T 37096-2018Information security technology—Security testing specification for office information systems
Similar standards
How to Download GB/T 37095-2018
- 1
Add to cart
Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.
- 2
Checkout
Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).
- 3
Instant delivery (0–9 sec)
Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
- 4
Invoice included
A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.
Related Standards
GB/T 18018-2019 — Information security technology—Technical requirement for router security
GB/T 20272-2019 — Information security technology—Security technical requirements for operating system
GB/T 20272-2026 — Cybersecurity technology — Technical specification for the security of operating systems
Secure payment via Stripe
Payments accepted
GB/T 37095-2018
$145.00