GB/T 37138-2018Implementation guide for cyber security classified protection of electric power information system (English PDF)

National Standard of the People's Republic of China

ICS

35.240.50

Classification

F 07

Issued by: State Administration for Market Regulation; Standardization Administration of the PRC

Contents

• Foreword
• Introduction
• 1 Scope
• 2 Normative references
• 3 Terms and Definitions
• 4 Level Protection Implementation Overview
• 4.1 Basic Principles
• 4.1.1 Structure Priority Principle
• 4.1.2 Joint Protection Principle
• 4.1.3 Security Controllable Principle
• 4.1.4 Stereoscopic Defense Principle
• 4.2 Roles and responsibilities
• 4.2.1 Power Information System Operation Unit
• 4.2.2 Power dispatching agency
• 4.2.3 Power Information System Security Service Agency
• 4.2.4 Power Information System Security Level Evaluation Agency
• 4.2.5 Power Information System Security Product Provider
• 4.2.6 Power Information System Supplier
• 4.2.7 Power Information System Design Unit
• 4.2.8 Administration
• 4.3 Basic activities implemented
• 5 Rating and filing
• 5.1 Process of grading and filing stage
• 5.2 Grading object analysis
• 5.2.1 Analysis of Power Information System
• 5.2.2 Rating object determination
• 5.3 Security protection level determination
• 5.3.1 Rating, review and approval
• 5.3.2 Forming a rating report
• 5.4 Rating results record
• 6 Assessment and evaluation
• 6.1 Process of Assessment and Evaluation
• 6.2 Ratings
• 6.2.1 Evaluation agency selection
• 6.2.2 Assessment preparation
• 6.2.3 Programme preparation
• 6.2.4 On-site assessment
• 6.2.5 Analysis and Reporting
• 6.3 Power Monitoring System Security Protection Assessment
• 6.3.1 Evaluation form selection
• 6.3.2 Evaluation preparation
• 6.3.3 Site assessment
• 6.3.4 Analysis and report preparation
• 7 Safety rectification
• 7.1 Process of safety rectification
• 7.2 Rectification plan development
• 7.3 Security rectification implementation
• 7.4 Safety rectification acceptance
• 8 Return
• 8.1 Process of the power information system return phase
• 8.2 Information Transfer, Staging and Clearance
• 8.3 Equipment Migration or Return
• 8.4 Clearing or Destroying Storage Media
• Reference