GB/T 37096-2018Information security technology—Security testing specification for office information systems (English PDF)

Foreword

This standard was drafted in accordance with the rules given in GB/T 1.1-2009.

Introduction

This standard is a test standard matched with GB/T 37095-2018 to guide testers to the security of office information systems. test.

This standard is in accordance with GB/T 37095-2018 on the basic technical requirements of office information system security, respectively from the physical environment, the basic hardware Five aspects of products, basic software products, network facilities and application software systems stipulate the security test specifications for office information systems.

1 Scope

This standard specifies the physical environment test of office information systems, basic hardware product testing, basic software product testing, and network facility testing. Test and application software system test specifications.

This standard is applicable to the construction of office information systems for the party and government departments, including system design, product procurement, system integration, etc.

The construction and management of the information system is implemented in accordance with the relevant national secrecy regulations and standards.

2 Normative references

The following documents are indispensable for the application of this document. For dated references, only dated versions apply to this document. For undated references, the latest edition (including all amendments) applies to this document.

GB/T 2887-2011 General specification for computer sites

GB/T 18018 Information Security Technology Router Security Technical Requirements

GB 18030-2005 Information Technology Chinese Coded Character Set

GB/T 20272 Information Security Technology Operating System Security Technical Requirements

GB/T 20273 Information Security Technology Database Management System Security Technical Requirements

GB/T 20275-2013 Information security technology network intrusion detection system technical requirements and test evaluation methods

GB/T 20281-2015 Information security technology firewall technical requirements and test evaluation methods

GB/T 21028-2007 Information security technology server security technical requirements

GB/T 21050-2007 Information security technology network switch security technical requirements (assessment assurance level 3)

GB/T 21052-2007 Information security technology information system physical security technical requirements

GB/T 25069-2010 Information Security Technology Terminology

GB/T 26856-2011 Chinese office software basic requirements and compliance test specifications

GB/T 28452-2012 Information security technology application software system general security technical requirements

GB/T 29240-2012 Information security technology terminal computer general safety technical requirements and test evaluation methods

GB/T 33190-2016 electronic file storage and exchange format layout document

GB/T 37095-2018 Information Security Technology Office Information System Security Basic Technical Requirements

3 Terms and definitions

The terms and definitions defined in GB/T 25069-2010 and GB/T 37095-2018 apply to this document.

4 Abbreviations

The following abbreviations apply to this document.

BIOS. Basic Input Output System (BasicInputOutputSystem)